Hacker News Reader

-If you are doing tracking in real time, you can see what's happening. If you want to, say, explore what happens when your phone goes to a website, you can't do that if you don't have a jailbreak because Apple doesn't give you the specific permissions that you need to see things happening at such a low level on your phone.

How is this different than MITMproxy, Burp Suite, Charles combined with setting iPhone to proxy the traffic through your machine?

View on HN

Well, to accomplish that with HTTPS traffic, you'd have to tell your device to accept (for example) Burp's CA certificate. Many applications (especially sensitive applications such as banking) nowadays use certificate pinning to verify the expected certificate and prevent this kind of MITM from happening. So you'd still need to do some sort of lower-level manipulation, such as manually hooking the certificate validation functions, to even be able to get this proxying to work.

It's becoming increasingly difficult to really see what's going on without a jailbroken iPhone, or rooted Android device.

Those all depend on the phone software honoring proxy settings.

Reply on news.ycombinator.com