3 ms·
You can’t control anything if they do DNS over HTTPS to a hardcoded IP they control and cert pin so you can’t MITM the connection, can you?
by lukevp 2y ago
You can’t control anything if they do DNS over HTTPS to a hardcoded IP they control and cert pin so you can’t MITM the connection, can you?
- userbinator 2y agoThat's what a firewall is for.
- Wingy 2y agoIf the pinned cert is stored on some kind of ROM chip you could probably rewrite it to replace it with your own cert.
- hiatus 2y agoYou can at the very least block traffic to the hardcoded IP.
- pkulak 2y agoSure, but then DNS breaks on the device and it's useless. Might as well just hit it with a hammer.