AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]

Post by [deleted] » Fri, Feb 27, 2026, 6:16 PM UTC

StilesCrisis wrote: post #89

economistbob wrote: post #75

Earlier quoted context omitted.

I had organized neighbors who broke WPA3 using tools, i disabled downgrade to WPA2 and they still broke it. I had one that setup an evil twin to catch my Linux login They stole the IP of one of boxes so they could get my login, and joined my network to setup the credential stealer. I caught this when my password didn't work at the ssh login. That was an apartment and they knew when I caught them. The problem is not w…

Is it possible that you have undiagnosed schizophrenia?

Post by tptacek » Fri, Feb 27, 2026, 7:03 PM UTC

jcalvinowens wrote: post #118

amiljkovic wrote: post #40

Earlier quoted context omitted.

The Ars article mentions: “Even when HTTPS is in place, an attacker can still intercept domain look-up traffic and use DNS cache poisoning to corrupt tables stored by the target’s operating system.” Not sure, but I think this could then be further used for phishing.

DNSSEC prevents that if set up properly.

Post by jcalvinowens » Sat, Feb 28, 2026, 12:55 AM UTC

tptacek wrote: post #183

jcalvinowens wrote: post #118

Earlier quoted context omitted.

DNSSEC prevents that if set up properly.

This is an on-path attacker. In end-user DNS configurations, attackers can simply disable DNSSEC; it's 1 bit in the DNS response header ("yeah, sure, I verified this for you, trust me").

Post by varispeed » Sat, Feb 28, 2026, 1:48 AM UTC

9sdf90skdjflks wrote: post #184

mechanicalpulse wrote: post #182

Earlier quoted context omitted.

It's possible that he's taking "hope for the best, prepare for the worst" to its logical if unhealthy extreme by interpreting every ambiguous 802.11 frame as one with ill intent. However, just because he's paranoid doesn't mean there aren't misaligned people, devices, and applications out there probing networks. It's probably a good idea for anyone to check themselves every now and then by playing Angel's Advocate ju…

Fair enough, but in this case there are several massive red flags that OP was experiencing a variant of "targeted individual" delusion. (The confidence without evidence that their neighbor was a determined hacker group, using a complex zero-day to attack them at home personally, tie-ins to fear/belief of this being a widespread phenomenon). I had a stretch of a year or so a decade ago where I was going through someth…

Post by jcalvinowens » Sat, Feb 28, 2026, 2:39 AM UTC

tptacek wrote: post #188

jcalvinowens wrote: post #185

Earlier quoted context omitted.

No, modern resolvers like systemd-resolved actually check the dnssec signatures on the client.

To check the DNSSEC signatures on the client, you have to do a full recursive lookup. You've always been able to run your own DNS cache, if you want your host to operate independently of any upstream DNS server. But at that point, you're simply running your own DNS server.