3 ms·
Couldn't someone just patch the binary to accept a different certificate? Or for that matter, read the decompiled bytecode and figure out if the app is listenin
by dancek 9y ago
Couldn't someone just patch the binary to accept a different certificate? Or for that matter, read the decompiled bytecode and figure out if the app is listening? Or run a patched Android that logs all microphone API calls?
I suspect I'm overlooking something, as surely some security researcher would have done some of this already.
- sofaofthedamned 9y agoYup, patching the binary works fine.
- janoc 9y agoUnless that package/binary is signed - which Android ones are.
- userbinator 9y agoThen patch the signing... ...and if the signing code is also signed, then patch that. It's patches all the way down. ;-)