Comment by hiatus | Hacker News Reader

Top New Best Ask Show Jobs

Comment by hiatus | Hacker News Reader

Parent Full thread

Good thing you can still see the domain over the network if you control the network.

You can’t control anything if they do DNS over HTTPS to a hardcoded IP they control and cert pin so you can’t MITM the connection, can you?

That's what a firewall is for.

If the pinned cert is stored on some kind of ROM chip you could probably rewrite it to replace it with your own cert.

You can at the very least block traffic to the hardcoded IP.

Sure, but then DNS breaks on the device and it's useless. Might as well just hit it with a hammer.

Reply on news.ycombinator.com