News for hackers. Stuff that matters.

A comment on Dropbox accesses all the files in your PC?. Parent comment

Re:Dropbox accesses all the files in your PC? by umurkontaci on Tuesday March 03, 2015 @05:12AM (#9136981)
Simple. Put up an SSL interceptor proxy and see what's going through.
[ Parent | on HN ]
Re:Dropbox accesses all the files in your PC? by a3_nm on Tuesday March 03, 2015 @06:29AM (#9137142)
Would this really work? I would expect the SSL certificate of Dropbox's servers to be hardcoded in the client, so the client would refuse to connect to an interceptor.
[ Parent | on HN ]
Re:Dropbox accesses all the files in your PC? by exDM69 on Tuesday March 03, 2015 @08:48AM (#9137582)
The Dropbox client is running with normal user privileges on a computer that you have root access to. It should be possible to use reverse engineering/debugging tools to either bypass SSL checks or analyze the dropbox client binary to see what is being sent/recvd.
[ Parent | on HN ]
Re:Dropbox accesses all the files in your PC? by a3_nm on Tuesday March 03, 2015 @10:13AM (#9138005)
Sure, I'm just saying it would be less straightforward than mitmproxy. I wonder if there are tools to hook into whatever SSL library is being used (OpenSSL?) and intercept traffic before it gets encrypted and after it gets decrypted? (probably using LD_PRELOAD, like tsocks)
[ Parent | on HN ]