Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Nah, you can't. The issue is the "easy monitor outgoing traffic with TLS/SSL" part.

It is not impossible but it is far from easy. If the application uses statically linked SSL client (as it should if it is commercially distributed) then you have to modify the application (for example in memory) to get a copy of everything that gets written to the SSL stream.



You know how you can do Ctrl+Shift+K in Firefox to open up the browser console and inspect all the bits of the page, see the code (and fuck with it), see all the network traffic, and so on? I dream of being able to do that for arbitrary applications. Imagine having a Super+Ctrl+Shift+K that opened an OS-level GUI showing all the pertinent details of the running program.


You know that this only pertains to webapps and there is still a lot of software running on your machine that you have no idea what it does?


I believe the parent commenter is aware of that - they’re describing their wish for a tool that makes monitoring native application requests easy and transparent, similar to the experience of using browser devtools with web apps.


I am specifically referring to the ability to have the same sort of interface with non-webapps as we do with webapps.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: