Top all-time · #24699
serializethoughts
Personal blog · serializethoughts.com · on HN as jor-elsecurityprogramming
serializethoughts is a personal blog at serializethoughts.com about security and programming. Since 2015, 3 different Hacker News readers have linked it 4 times. The last post was in 2024, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for its material on bypassing SSL pinning and intercepting traffic from mobile apps, including reverse engineering Android APKs. Both comments cite it as a technical reference.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Serializing thought objects!
Most-linked posts?
- /2016/08/18/bypassing-ssl-pinning-in-android-applications/2 people · 2 mentions · first linked 2017-06-15
What Hacker News says?
Kudos! This a great work. I remember few years back when I was exploring TLS, there were no such resources and it took many months of trial and error to get some reasonable understanding. I tried doing a similar thing, but was only able to do for couple of packets [0]. Surely such an illustration will go a long way to help newbies to understand a complicated protocol. [0] https://serializethoughts.com/2014/07/27/dis…
Comment linking /2014/07/27/dissecting-tls-client-hello-message/
on “Every Byte of a TLS Connection Explained and Reproduced”Submitted Why Firefox’s new control center design not good as a story · 4 points
HN discussionIt's very feasible to reverse engineer the Android APK for Facebook and replace the cert with your own. https://serializethoughts.com/2016/08/18/bypassing-ssl-pinni... http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-...
Comment linking /2016/08/18/bypassing-ssl-pinning-in-android-applications/
on “Facebook Really Is Spying on You, Just Not Through Your Phone's Mic”The tools are there for you to try it: https://www.charlesproxy.com/documentation/faqs/using-charle... http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/Conf... You could probably also do it with the emulator. You may need to do something like https://www.bettercap.org/blog/sslstripping-and-hsts-bypass/ or it could be even harder: http://docs.mitmproxy.org/en/stable/certinstall.html#certifi... There are of cou…
Comment linking /2016/08/18/bypassing-ssl-pinning-in-android-applications/
on “Facebook’s Safety Check is a stress-inducing flip of social norms”