3 ms·
> I keep pcap files of all my network traffic to protect myself against this. How does this work if you receive the payload via HTTPS? Do you MITM all your app
by Jenda_ 3y ago
> I keep pcap files of all my network traffic to protect myself against this.
How does this work if you receive the payload via HTTPS? Do you MITM all your apps? (advanced version: can the payload be encrypted using an application-level Diffie-Hellman? e.g. if a JavaScript does a DH exchange and decrypts the payload with it)
- londons_explore 3y agoI run everything in a recorded VM, allowing me to replay all the code on my machine to get those keys if I need to.
- Jenda_ 3y agoThat sounds interesting, what is the technical solution for this? Are the logs extremely huge?
- TheDong 3y agoSorry, you store terrabytes of traffic, and then _also_ store all memory read/writes for all your browsing using a VM? What tooling do you use to record the VM? I'm unable to, with simple googling, find any tooling for VMs to do this, with all my results either being point-in-time snapshotting or video recording related. How much data does that generate in a month? No offense, but this claim just sounds fantastical to me.