yoshimo

Results 329 comments of yoshimo

It is not as detailed as COM though and i wonder if we should port the detailed approach to firefox?

de.telekom.android.customercenter detects xposed, if you want more samples

When the request includes app version , architecture and store, can't you abort early and save resources that would otherwise be spent on downloading the app , unpacking and scanning...

Full Time effort, sounds like the chances are higher if we put a big bounty on it and start a fundraiser campaign

> We do not yet have an official bugzilla bug entry for it. I will add one later and link it here. Is it later already? Something to watch and...

> > Are there any relevant issues in the Thunderbird project that could be linked here as dependencies? > > We do not yet have an official bugzilla bug entry...

Applications can include their own checks on top of what this module hooks. Also recent Android Versions added more stuff. So to look at this properly, which device, os version...

for me the Roli app crashes because the list of pinned certs is empty when using https://github.com/httptoolkit/frida-android-unpinning/ `Process crashed: java.lang.IllegalArgumentException: pins must start with 'sha256/' or 'sha1/': Pinned certificates for...

It looks like the apps try to use sslv3 with this module enabled. I get a lot of similiar warnings. Not sure yet why that happens.

I still get trouble with Google components in a boringssl library. Is that supposed to work with v4 or do we need additional hooks?