Live data from Hacker News

Show HN: Print a WiFi Login Card

wificard.io

11–20 of 347 posts

Re: Show HN: Print a WiFi Login Card

#12

This is a nice idea! I once whipped up a shell script to do the same thing. UX feedback - disable autocorrections on the input fields [1], you may want to trim white space as well. [1] https://davidwalsh.name/disable-autocorrect

Thanks for the tip, added in https://github.com/bndw/wifi-card/commit/1924298335692eebc79...

Re: Show HN: Print a WiFi Login Card

#15
post #9
post #8

Earlier quoted context omitted.

Are there any tools to run an untrusted client side web application isolated from the internet?

turn off wifi/unplug network cable?

Probably should also run it in a sandboxed tab and delete all site related data after use. It is possible for sites to detect network connection and sync data when a connection is re-established.

EDIT: you could also just run the local server in offline mode and shut it down before you re-connect.

Re: Show HN: Print a WiFi Login Card

#18

who would believe such as statement that info is not collected or sent? I have some prime real estate in Florida to sell you if you do!

Not really sure what use knowing my wifi password would be unless you were specifically stalking me anyway.

You have a password and an SSID for somewhere in the world (maybe, if they didn’t lie) or if tracing IP addresses, somewhere in a neighbhourhood or city).

Seems about as useful as an MH 370 flight data recorder password (if such things exist). Yes, you could break into the black box with it, but that’s not the real problem.

Re: Show HN: Print a WiFi Login Card

#19
I do wish there was an option to safely disable all connectivity in a browser tab (forever) like with Javascript or camera access.

Yes, saving the page, disconnecting your network connection, then deleting the page would work, but it's a real bother.

Re: Show HN: Print a WiFi Login Card

#20
post #10

Earlier quoted context omitted.

Running it on Firefox with web inspector opened, I saw no network traffic at all after the page loaded, so it wasn't sending the network name or password anywhere off my device.

This method picks up "most" requests, but not all. eg. websocket and webrtc can be used to exfiltrate data but it won't show up on inspector.

They do show up, not the connections themselves, but the initiation, no?? At least I always see lots of 101 Switching Protocols responses on sites that use websocket, it might be some sort of nonstandard gateway though. Never used it so dunno.

Of course even if that's the case, you gotta load the website with the network inspector already open, to see the initiation.

Post reply on HN