Comment by pkulak

Comment by pkulak 3 days ago

5 replies

View on Hacker News

Yeah, if it was intentional, it would probably be a hard-coded, encrypted URL. Some devices are starting to do that to get around ad blocking.

hiatus 3 days ago

Good thing you can still see the domain over the network if you control the network.

Reply View 4 replies
  • lukevp 2 days ago

    You can’t control anything if they do DNS over HTTPS to a hardcoded IP they control and cert pin so you can’t MITM the connection, can you?

    Reply View 3 replies
    • Wingy 2 days ago

      If the pinned cert is stored on some kind of ROM chip you could probably rewrite it to replace it with your own cert.

      Reply View 0 replies
    • hiatus 2 days ago

      You can at the very least block traffic to the hardcoded IP.

      Reply View 0 replies