3 ms·
The first comment on that page is important: contact the ICO. But it's interesting and worrying that this problem would not have been found if LG was using SSL
by nodata 13y ago
The first comment on that page is important: contact the ICO.
But it's interesting and worrying that this problem would not have been found if LG was using SSL.
- raverbashing 13y agoWell, I doubt they would be using certificate pinning. So you could bypass it easily
- nodata 13y agoHow would I get a SSL certificate issued for an lg domain from an issuer that the LG tv trusts?
- raverbashing 13y agoBest case is, they left the "--no-check-certificate" option on for debugging purposes. Or maybe you can import a certificate somehow.
- sk5t 13y agoNo certificate checking is quite likely unless the TV also has a method to update its CA trust list, and maybe even handle CRL/OCSP depending on the client library.