3 ms·
How is that "hacking"? The test subjects willingly modified their CA store, nothing can be made against that, it's users choosing who should receive data sent b
by Biganon 3y ago
How is that "hacking"? The test subjects willingly modified their CA store, nothing can be made against that, it's users choosing who should receive data sent by their device (I mean certificate pinning could help).
Reminds me of TV users willingly plugging a box into their TV that sends usage data to a statistics institute
- laweijfmvo 3y ago“I can’t think of a good argument for why this is okay. No security person is ever comfortable with this, no matter what consent we get from the general public. The general public just doesn’t know how this stuff works,” Canahuati wrote in an email, included in the court documents.
- Biganon 3y agoI'm not saying it's ethical, I'm saying it's not hacking Or maybe it's a weak, uninteresting form of social engineering, but even that's a stretch IMO
- itopaloglu83 3y ago> The test subjects willingly modified their CA store, … I don’t think users knew what they were consenting to. Only a small percentage of the population know what a Certificate Authority is. And also “monitoring traffic” doesn’t carry the weight of “we are going to listen to your private conversations”.
- ClumsyPilot 3y ago> willingly modified their CA store In the same way a patient might willingly consent to some highly specific chemical treatment being replaced with another highly specific chemical - they have no idea, they rely on the doctor not to purposefully mislead them. You could put anything in those forms and most people would trust the professional is at least not allowed to defraud them.