Comment by nodata
13 years ago
The first comment on that page is important: contact the ICO.
But it's interesting and worrying that this problem would not have been found if LG was using SSL.
13 years ago
The first comment on that page is important: contact the ICO.
But it's interesting and worrying that this problem would not have been found if LG was using SSL.
Well, I doubt they would be using certificate pinning.
So you could bypass it easily
How would I get a SSL certificate issued for an lg domain from an issuer that the LG tv trusts?
Best case is, they left the "--no-check-certificate" option on for debugging purposes.
Or maybe you can import a certificate somehow.
1 reply →