3 ms·
If they really want to test this ability, just set up a DNS proxy to your own server... it looks trivial to spoof.
by LogicHoleFlaw 18y ago
If they really want to test this ability, just set up a DNS proxy to your own server... it looks trivial to spoof.
- stcredzero 18y agoIf they're competent, then the deactivation tokens would have to be signed. They're using SSL encryption for this?
- deleted 18y ago[deleted]
- LogicHoleFlaw 18y agoThe file at the current link, which supposedly disables a test app, is just a plaintext JSON-like file. No tokens or encryption or anything like that.
- stcredzero 18y agoYes, but you should be able to use SSL to verify the certificate.