Upside-Down-Ternet (2006) • Hacker News Board

Re: Upside-Down-Ternet (2006)

#11

Post by athenot » Mon, Mar 16, 2020, 1:27 AM UTC

I had done this in a small office; it was definitely a fun prank to pull on folks. Of course with TLS everywhere, this is no longer possible.

Re: Upside-Down-Ternet (2006)

#12

Post by kayson » Mon, Mar 16, 2020, 1:42 AM UTC

athenot wrote: post #11

I had done this in a small office; it was definitely a fun prank to pull on folks. Of course with TLS everywhere, this is no longer possible.

Just need a root CA cert installed on the machines. Plenty of companies do this already

Re: Upside-Down-Ternet (2006)

#13

Post by obituary_latte » Mon, Mar 16, 2020, 1:42 AM UTC

lxe wrote: post #5

Can't do this with HTTPS everywhere nowadays :) At least not without certificate validation errors.

Oh cmon now, how hard can it be to get a user to install a cert? ;)

Re: Upside-Down-Ternet (2006)

#14

Post by katharine7 » Mon, Mar 16, 2020, 3:53 AM UTC

excited! I usually ban them without kidding. Not a humorous person lol

Re: Upside-Down-Ternet (2006)

#15

Post by Nashooo » Mon, Mar 16, 2020, 7:14 AM UTC

I first came across this via the alt text of this particular XKCD. https://xkcd.com/341/

Re: Upside-Down-Ternet (2006)

#16

Post by aequitas » Mon, Mar 16, 2020, 11:42 AM UTC

We had a LAN party a long while ago where they used a similar proxy. But instead of turning all images upside down they displayed all images not going via https on the main beamer screen. It was a valuable lesson in how secure your bare http connections where. Until the trolls woke up and we learned about all the kinds of porn that existed.

Re: Upside-Down-Ternet (2006)

#17

Post by Hitton » Mon, Mar 16, 2020, 1:16 PM UTC

I remember Upside-Down-Ternet module from when I was playing with MITMf - framework for MitM attacks. Now I know where the idea originated from.

Re: Upside-Down-Ternet (2006)

#18

Post by MithrilTuxedo » Mon, Mar 16, 2020, 5:29 PM UTC

Did anyone else notice the bit at the end?

I laughed.

Re: Upside-Down-Ternet (2006)

#19

Post by nelgaard » Tue, Mar 17, 2020, 4:14 PM UTC

aequitas wrote: post #16

We had a LAN party a long while ago where they used a similar proxy. But instead of turning all images upside down they displayed all images not going via https on the main beamer screen. It was a valuable lesson in how secure your bare http connections where. Until the trolls woke up and we learned about all the kinds of porn that existed.

Ah, yes. Probably driftnet And you will not need trolls for that.

As the debian description says:

== ...Driftnet is a program which listens to network traffic and picks out images from TCP streams it observes. It is interesting to run it on a host which sees a lot of web traffic. . (Obviously, this is an invasion of privacy of a fairly blatant sort. Also, if you are possessed of Victorian sensibilities, and share an unswitched network with others who are not, you should probably not use it.) ==