“By modifying just 4 of the binary’s 97,477,728 bytes we can now intercept requests!”
Messenger for macOS pins its certificates so nobody can watch what the app sends home. The binary also carries a string reading “Using custom sandbox -> turn off SSL verification.” Flip one instruction so the check always passes and the traffic is readable. Meta locks users out of inspecting their own traffic and leaves the off switch in the code.