News for hackers. Stuff that matters.

A comment on How Apple Watch Unexpectedly Measured My Vitals During a Car Crash. Parent comment

Re:How Apple Watch Unexpectedly Measured My Vitals During a ... by Zikes on Wednesday May 06, 2015 @02:22AM (#9496877)
> I can hijack a DNS entry and host a server pretending to be you

Not for long.[1]

[1] https://blog.mozilla.org/security/2015/04/30/deprecating-non...

[ Parent | on HN ]
Re:How Apple Watch Unexpectedly Measured My Vitals During a ... by click170 on Wednesday May 06, 2015 @03:33PM (#9501248)
The solution to this is very simple: cut off their access entirely.

I use an SSL proxy at home and if you attempt to pin certificates such that the local certificate store is ignored or inaccessible. Your device can be guaranteed to not have access from my network. End of story.

[ Parent | on HN ]
Re:How Apple Watch Unexpectedly Measured My Vitals During a ... by narrowrail on Wednesday May 06, 2015 @02:36AM (#9496912)
I don't think these watches use a browser to reach their servers (i.e. the cloud).
[ Parent | on HN ]
Re:How Apple Watch Unexpectedly Measured My Vitals During a ... by Zikes on Wednesday May 06, 2015 @09:27AM (#9498399)
Once it's the norm for browsers it wouldn't make much sense not to use HTTPS everywhere.
[ Parent | on HN ]