How did Facebook intercept their competitor's encrypted mobile app traffic?
1–10 of 222 posts
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#2Ooooooooh, SSLbump.
There has to be a court precedent that criminalized sniffing network traffic on the customer’s side.
Should be one of those many cases involving wiretapping for banking info.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#3tl;dr: If you install and fully trust a root CA on your client device, of course your TLS traffic can be MITMed.
edit: the problem, obviously, is that this app tricked the non-technical people into installing/trusting the root CA for malicious purposes. Clearly this was malware.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#4The email snippets are impressive on multiple levels, mainly how fucking stupid/arrogant people at FB must be. Openly talking about MITM, and then getting multiple other companies to include this kit in their products as well is just beyond stupid for putting in writing. "Hey Zuck, I have an idea on your proposal. We should get together to discuss in person" would be suspect, but at least it's not incriminating. It's like these people have never seen a movie, or read a news article on other companies getting caught.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#5If there is a god we'll be compensated through a class action settlement for a $5 meta ad voucher.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#6[flagged]
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#7tl;dr: If you install and fully trust a root CA on your client device, of course your TLS traffic can be MITMed. edit: the problem, obviously, is that this app tricked the non-technical people into installing/trusting the root CA for malicious purposes. Clearly this was malware.
Unless the TLS traffic uses certificate pinning.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#8tl;dr: If you install and fully trust a root CA on your client device, of course your TLS traffic can be MITMed. edit: the problem, obviously, is that this app tricked the non-technical people into installing/trusting the root CA for malicious purposes. Clearly this was malware.
That's great for someone reading this forum to be aware of, but moms have no idea what any of the words you just wrote means. So if they were told they get a coupon for installing or some other bit of ridiculous things malware devs use, and yes I'm calling FB software malware. All of if it. Messenger, FB.app, everything. If it's from Meta, it's malicious.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#9The email snippets are impressive on multiple levels, mainly how fucking stupid/arrogant people at FB must be. Openly talking about MITM, and then getting multiple other companies to include this kit in their products as well is just beyond stupid for putting in writing. "Hey Zuck, I have an idea on your proposal. We should get together to discuss in person" would be suspect, but at least it's not incriminating. It's…
Billionaire bosses are all surrounded by opportunists and flatterers. Over time like the Great Pacific Garbage Patch the size of this group grows to unmanageable dimensions, cause anyone acting moderately sane will be treated as an existential threat to their lives of fantasy, domination, manipulation, luxury, leisure etc and pushed out.
Re: How did Facebook intercept their competitor's encrypted mobile app traffic?
#10[flagged]
[flagged]