Earlier quoted context omitted.
Are there any tools to run an untrusted client side web application isolated from the internet?
turn off wifi/unplug network cable?
Show HN: Print a WiFi Login Card
11–20 of 347 posts
Re: Show HN: Print a WiFi Login Card
#12This is a nice idea! I once whipped up a shell script to do the same thing. UX feedback - disable autocorrections on the input fields [1], you may want to trim white space as well. [1] https://davidwalsh.name/disable-autocorrect
Re: Show HN: Print a WiFi Login Card
#13I have some prime real estate in Florida to sell you if you do!
Re: Show HN: Print a WiFi Login Card
#14Re: Show HN: Print a WiFi Login Card
#15Earlier quoted context omitted.
Are there any tools to run an untrusted client side web application isolated from the internet?
turn off wifi/unplug network cable?
EDIT: you could also just run the local server in offline mode and shut it down before you re-connect.
Re: Show HN: Print a WiFi Login Card
#16Re: Show HN: Print a WiFi Login Card
#17Feature request: giant passwords like that one that was posted on the side of a building.
I ran it with network off and saw the code, so it looks safe.
Re: Show HN: Print a WiFi Login Card
#18who would believe such as statement that info is not collected or sent? I have some prime real estate in Florida to sell you if you do!
You have a password and an SSID for somewhere in the world (maybe, if they didn’t lie) or if tracing IP addresses, somewhere in a neighbhourhood or city).
Seems about as useful as an MH 370 flight data recorder password (if such things exist). Yes, you could break into the black box with it, but that’s not the real problem.
Re: Show HN: Print a WiFi Login Card
#19Yes, saving the page, disconnecting your network connection, then deleting the page would work, but it's a real bother.
Re: Show HN: Print a WiFi Login Card
#20Earlier quoted context omitted.
Running it on Firefox with web inspector opened, I saw no network traffic at all after the page loaded, so it wasn't sending the network name or password anywhere off my device.
This method picks up "most" requests, but not all. eg. websocket and webrtc can be used to exfiltrate data but it won't show up on inspector.
Of course even if that's the case, you gotta load the website with the network inspector already open, to see the initiation.