Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Found hooked up to my router

reddit.com

Post reply on HN
Print view View original

51–60 of 358 posts

Re: Found hooked up to my router

#51

Post by beachy »

walrus01 wrote: post #48
r1ch wrote: post #47

Earlier quoted context omitted.

They've gone well beyond the extension now. These days you have no idea if that "free" app you've installed has made a deal with Luminati to sell your bandwidth to the highest bidder. They also have an Android SDK too. I've received several emails like the following: > My name is Lior and I lead the SDK partnerships at Luminati.​ I assume your > software earns money by charging users for a premium subscription or by…

That is sketchy and unethical as fuck. I would like to give them an A+ rating for whatever graphic artist drew their artwork and did the CSS/webpage layout, however.

I dunno, to me the icon is reminiscent of the Hades character from the Disney movie: https://vignette.wikia.nocookie.net/disney/images/c/cf/Hercu...

Re: Found hooked up to my router

#52

Post by larkeith »

petemill wrote: post #45

Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…

I find these claims extremely dubious. Everything they claim the Pi is needed for can be accomplished without the equipment and postage costs with a purely software solution; The hardware allows them to monitor all traffic and avoid antivirus/firewalls. Moreover, I doubt it is difficult to find mass-market Facebook accounts for much less than $15/month - it is far more likely that, given the hardware allows them unfettered access to all network traffic, it is designed to report back as much data as possible, ideally including plaintext passwords and banking information.

Re: Found hooked up to my router

#53

Post by krn »

One comment in that thread[1] gives a full explanation of what such a Raspberry Pi device hooked up to the router can do: forward all the network traffic, replace router's stock firmware with its own, install software on the network connected devices via known vulnerabilities, spoof websites by acting as custom DNS server. In my opinion, it looks like "a Pi-hole[2], but for phishing".

[1] https://www.reddit.com/r/whatisthisthing/comments/9ixdh9/fou...

[2] https://pi-hole.net/

Re: Found hooked up to my router

#54

Post by ryandrake »

PhantomGremlin wrote: post #34
tedunangst wrote: post #9

Earlier quoted context omitted.

Yeah, I have no idea how it could accomplish what is alleged. Just lots of very bad no good end of world comments. Have none of these people ever used public wifi?

Have none of these people ever used public wifi? This situation is totally totally unlike public wifi! When I connect to public wifi, the attack surface into my laptop is the external interface of the latest MacOS, with firewall on. Perhaps there are exploits against that, but they're not common. The Mac does have pf, but I'm sure it's a way out of date version! :) OTOH, "this thing" on the inside of a router/firewal…

My rule of thumb is: if i have root on the device, it can go behind my private LAN firewall. If I don’t have root, but the device requires Internet, it goes in the guest network which gets throttled and has no access to my LAN. I also scrutinize outbound more on this network. If I don’t have root and it doesn’t need Internet? It stays airgapped.

Re: Found hooked up to my router

#55

Post by konschubert »

petemill wrote: post #45

Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…

>Why do you need my account? Why not use your own? We have plenty of our own accounts. We need you because no matter how many accounts we have internally, Facebook limits the amount we can spend per account. By working with people like you, we are able to scale our business.

Can somebody explain if this makes sense? Why are there limits on account spending?

Re: Found hooked up to my router

#57

Post by tomatocracy »

walrus01 wrote: post #46
hedwall wrote: post #44

Earlier quoted context omitted.

Most mid- to high end switches already support that kind of functionality.

yes, any decent managed switch from the last 15-16 years can send outbound snmp traps for interface up/down events.

And 802.1X is a thing as well, although it's not very widely used.

Re: Found hooked up to my router

#58

Post by NickBusey »

konschubert wrote: post #55
petemill wrote: post #45

Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…

>Why do you need my account? Why not use your own? We have plenty of our own accounts. We need you because no matter how many accounts we have internally, Facebook limits the amount we can spend per account. By working with people like you, we are able to scale our business. Can somebody explain if this makes sense? Why are there limits on account spending?

Because the ad spends are fraudulent in nature? Just a guess.

Re: Found hooked up to my router

#59

Post by abraham_lincoln »

konschubert wrote: post #55
petemill wrote: post #45

Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…

>Why do you need my account? Why not use your own? We have plenty of our own accounts. We need you because no matter how many accounts we have internally, Facebook limits the amount we can spend per account. By working with people like you, we are able to scale our business. Can somebody explain if this makes sense? Why are there limits on account spending?

No, but if you accept the answer, you get $15.

Re: Found hooked up to my router

#60

Post by daveFNbuck »

petemill wrote: post #45

Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…

The first comment in the thread you link to says the Raspberry Pi connects to botnets and records all network traffic.
Post reply on HN