Hacker News new | past | comments | ask | show | jobs | submit login

I would think that they have statically linked it, which is why I thought about using a debugger to catch the data. With dynamically linked library, such as OpenSSL, it would be quite easy to capture the data.



You could just search for the certificates in the code, and update them with your own.


But haven't they been rushing updates out the door? They may have been careless given the situation.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: