Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to get Gogo in-flight wireless internet for free

outkastz.com

Post reply on HN
Print view View original

41–49 of 49 posts

Re: How to get Gogo in-flight wireless internet for free

#41

Post by jackowayed »

jws wrote: post #5

This looks like it dups a paying customer's IP and MAC addresses. Does that work if both devices are running at the same time? I was under the impression TCP didn't like that.

I think it would still work. I think you'll end up both getting all of the network packets, in which case the higher-level protocols will ignore the ones meant for the other device. TCP and UDP both have source ports as well as destination ports, but the source ports are usually picked arbitrarily, so the different devices will have connections on different ports and will discard any packets bound for ports they don't have open. And TCP also has sequence numbers (which should be chosen randomly), so even if you ended up on the same port for a TCP connection, your packets are very likely to have different enough seqnos that you ignore each other's packets.

Re: How to get Gogo in-flight wireless internet for free

#42

Post by enobrev »

arn wrote: post #18
enobrev wrote: post #12

I was recently disappointed by the huge price hike of gogo in flight. It's been $10 for a flight for quite some time now which I'd felt was perfectly fair considering the quality. On my recent flight to NYC for work and play it was $10 per hour which essentially amounts to a 5x increase. I grabbed it for 2 hours and it was just as bad as always. Fine for email and Facebook but unideal for pushing a significant commit…

They have a $14 all day pass, which is what I get, since I usually have to change planes when going to the west coast. http://www.gogoair.com/gogo/listAllProducts.do

Interesting. My memory is a bit hazy, but I assume their all-day pass either wasn't available, easy to find, or that price. I only say that because I've purchased an all-day pass for a multi-leg flight in the past, so there must have been good reason for me not to use it this time. Or it could be as simple as grogginess from catching a 7am flight.

Re: How to get Gogo in-flight wireless internet for free

#43

Post by cybernoodles »

Although the prices are a bit over the top, I can respect GoGo's customer support. A while back I reported to them how I was able to gain access to Facebook and Youtube almost effortlessly and they gave me two free coupons for unlimited in-flight WiFi as a token of appreciation. I would have informed them directly of this and awaited a response. They appeared to be pretty good at responding to my inquiries.

Re: How to get Gogo in-flight wireless internet for free

#44

Post by justinsb »

gonzo wrote: post #35
justinsb wrote: post #26

How can MAC spoofing be stopped? All the counter-measures I can think of seriously degrade the experience. I can think of approaches that work for HTTP, for example, but I can't see how you would allow e.g. SSH while preventing MAC spoofing.

> How can MAC spoofing be stopped? 802.1x

Can you explain a bit about how this would work here (i.e. for Gogo)?

Re: How to get Gogo in-flight wireless internet for free

#45

Post by lawnchair_larry »

mason55 wrote: post #8
pilom wrote: post #6

What is proper etiquette for responsible disclosure? Hacker: "I'm publishing on the 15th." Vendor: "We'd like to see your post first" Hacker: "Ok, here you go" 15th comes and goes Hacker: "Hey any response?" Hacker: "Ok its the 18th... I'm publishing" Is this how this usually works? Or how it should work?

A full month of notification is plenty. If the vendor acknowledges you and tells you they're working on it and asks you to hold off then that's one thing, but if they basically ignore you for a month then you've done your part. Especially with an exploit like this, you're not opening up access to PII, although it sounds like you are opening the window to possible fraudulent charges.

No, disclosure timelines only make sense if the public is at risk. There is nothing like that here. The outcome is gogo not getting paid. This is just grandstanding a fairly unsophisticated bug in their service. The end result is that gogo will end up with more money.

Re: How to get Gogo in-flight wireless internet for free

#46

Post by sjm-lbm »

enobrev wrote: post #42
arn wrote: post #18

Earlier quoted context omitted.

They have a $14 all day pass, which is what I get, since I usually have to change planes when going to the west coast. http://www.gogoair.com/gogo/listAllProducts.do

Interesting. My memory is a bit hazy, but I assume their all-day pass either wasn't available, easy to find, or that price. I only say that because I've purchased an all-day pass for a multi-leg flight in the past, so there must have been good reason for me not to use it this time. Or it could be as simple as grogginess from catching a 7am flight.

FWIW, they've changed the menu - there's still a "Flight Pass" that's within a dollar or two of what it's always been, but you have to do some more hunting to find it. It's annoying, because every flight now I spend a few minutes paranoid that they removed the option that I'm looking for.

Re: How to get Gogo in-flight wireless internet for free

#47

Post by epoxyhockey »

enobrev wrote: post #12

I was recently disappointed by the huge price hike of gogo in flight. It's been $10 for a flight for quite some time now which I'd felt was perfectly fair considering the quality. On my recent flight to NYC for work and play it was $10 per hour which essentially amounts to a 5x increase. I grabbed it for 2 hours and it was just as bad as always. Fine for email and Facebook but unideal for pushing a significant commit…

I was recently disappointed by the huge price hike of gogo in flight

Agreed. If I recall correctly, the all-day pass was close to $30 when purchased while on the plane. By going to their website ahead of time (i.e. while not using gogo's network), their all-day pass is $14.

Re: How to get Gogo in-flight wireless internet for free

#48

Post by mason55 »

lawnchair_larry wrote: post #45
mason55 wrote: post #8

Earlier quoted context omitted.

A full month of notification is plenty. If the vendor acknowledges you and tells you they're working on it and asks you to hold off then that's one thing, but if they basically ignore you for a month then you've done your part. Especially with an exploit like this, you're not opening up access to PII, although it sounds like you are opening the window to possible fraudulent charges.

No, disclosure timelines only make sense if the public is at risk. There is nothing like that here. The outcome is gogo not getting paid. This is just grandstanding a fairly unsophisticated bug in their service. The end result is that gogo will end up with more money.

> disclosure timelines only make sense if the public is at risk

The post says that fraudulent charges can be made without a password or credit card number by using this exploit.

I would bet that you can access account info as well which means there is some PII leaking. I would consider PII + fraudulent transactions to be a step above gogo losing oney.

Re: How to get Gogo in-flight wireless internet for free

#49

Post by bobf »

Lots of people have known this for quite a while - nothing new to see here. Here's a blog post by a friend of mine, from 2007 ("Bypass a wifi captive portal"), which includes an example of a script to handle it all: http://www.semicomplete.com/blog/2007/Aug/11

The basic idea is as follows:

1) ping the broadcast/multicast addresses to quickly fill the arp cache

2) change your mac address to that of the detected nodes

3) see if you can access the internet now [repeat step #2-3 until you can]

Post reply on HN