AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
1–10 of 204 posts
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#2On the one hand, a seems-solid article by an author I mostly trust.
OTOH... with the recent journalistic scandal at Ars Technica, perhaps Dan should have made sure that he spelled "Ubiquity" correctly? (5th para; it's correct further down.)
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#3On the one hand, a seems-solid article by an author I mostly trust. OTOH... with the recent journalistic scandal at Ars Technica, perhaps Dan should have made sure that he spelled "Ubiquity" correctly? (5th para; it's correct further down.)
That's an easy autocorrect issue. As someone who write Ubiquiti more often than most.
I don't even think most editors would know the difference. That's the problem with using corruptions of real words as your name.
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#4Paper discussed in this article: https://www.ndss-symposium.org/ndss-paper/airsnitch-demystif...
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#5Does anyone know of any good firewalls for macOS? The built in firewall is practically unusable, and if client isolation can be bypassed, the local firewall is more important than ever.
I often have a dev server running bound to 0.0.0.0 as it makes debugging easy at home on the LAN, but then if I connect to a public WiFi I want to know that I am secure and the ports are closed. "Block all incoming connections" on macOS has failed me before when I've tested it.
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#6Original source (should replace the current link): https://www.ndss-symposium.org/wp-content/uploads/2026-f1282...
Summary: https://www.ndss-symposium.org/ndss-paper/airsnitch-demystif... (hat tip: https://news.ycombinator.com/item?id=47167975)
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#7Does anyone know of any good firewalls for macOS? The built in firewall is practically unusable, and if client isolation can be bypassed, the local firewall is more important than ever. I often have a dev server running bound to 0.0.0.0 as it makes debugging easy at home on the LAN, but then if I connect to a public WiFi I want to know that I am secure and the ports are closed. "Block all incoming connections" on mac…
Little Snitch is probably the most popular one, written my devs who deeply understand macOS firewall architecture.
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#8Does anyone know of any good firewalls for macOS? The built in firewall is practically unusable, and if client isolation can be bypassed, the local firewall is more important than ever. I often have a dev server running bound to 0.0.0.0 as it makes debugging easy at home on the LAN, but then if I connect to a public WiFi I want to know that I am secure and the ports are closed. "Block all incoming connections" on mac…
LittleSnitch
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#9Bit of a sensational title? This doesn't "break WiFi encryption", only device isolation if the attacker is already in the same network.
Re: AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
#10Once again I feel justified in hard wiring all connections. I do have a wireless network for a couple of portable devices, but everything else has a plug and a VLAN.
It’s very difficult to have too much network security.