3 ms·
> I can't see the contents of the traffic, since 99% of it is encrypted, but I can safely say Apple is very cozy with your device. So in reality you are too la
by rosndo 4y ago
> I can't see the contents of the traffic, since 99% of it is encrypted, but I can safely say Apple is very cozy with your device.
So in reality you are too lazy to hook their TLS verification code (super easy to do with public tools), or alternatively you did do this and the traffic just wasn’t that interesting.
Not really sure what we are supposed to take away from this.
- twocards 4y agoLaughs in certificate pinning. Updating/restoring MacOS behind a TLS intercepting proxy is more or less impossible.
- rosndo 4y agoI already addressed this in the very comment you were replying to, certificate pinning is very easy to defeat with public tools.
- Larrikin 4y agoWhich tools? You keep saying it's very easy in a fairly insulting manner but then offer zero information to anyone on how to do it.
- not_really 4y agoFrida
- rosndo 4y agoI think it’s fair and reasonable to expect a basic level of knowledge when someone is making such confident statements regarding their reverse engineering work. Defeating certificate pinning with tools like Frida is one of the most basic and common tasks when reversing iOS/OS X applications.