News for hackers. Stuff that matters.
Re:SimCity mod demonstrates the possibility of offline play by lucian1900 on Thursday March 14, 2013 @12:11PM (#5375836)
I never meant that changing the certificate is impossible, just that it isn't trivial.
Re:SimCity mod demonstrates the possibility of offline play by icebraining on Thursday March 14, 2013 @12:19PM (#5375889)
I only did something like that once, but it was absolutely trivial, since it included the ASCII header. Search, overwrite, add a little padding, done.
Re:SimCity mod demonstrates the possibility of offline play by gknoy on Thursday March 14, 2013 @12:35PM (#5375984)
toblaso means that rather than finding/changing the certificate, someone patching the game could either replace the certificate with a self-signed/generated one (for your local server instance), or completely bypass the usage of SSL entirely.
Re:SimCity mod demonstrates the possibility of offline play by nwh on Friday March 15, 2013 @02:17AM (#5379435)
I've done similar while reverse engineering a protocol. Just whipped open a hex editor, found the signature of the certificate and bamn. Neutered.