Remix.run Logo
▲ shrubble 4 hours ago

If I’m understanding correctly, you could sniff the communication between your Smart TV and the manufacturer using this method?

▲the_snooze 4 hours ago | parent | next [-]

As long as the smart TV still trusts eMudhra, then yeah. You'll want to super careful and prevent the TV from pulling updates that could revoke that trust.

▲kevin_nisbet 4 hours ago | parent | prev | next [-]

Possibly. But some manufacturers may not have the full set of roots, use a private authority, or do certificate pinning.

▲quotemstr 4 hours ago | parent | prev [-]

If the TV isn't older than a few years, if it's not checking CRLs, and if it hasn't yet patched itself.

▲thayne 25 minutes ago | parent [-]

> if it's not checking CRLs

I would be amazed to see a TV that is checking CRLs and keeps the CRLs up to date.