Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WiFi without internet on a Southwest flight

jamesbvaughan.com

Post reply on HN
Print view View original

581–590 of 675 posts

Re: WiFi without internet on a Southwest flight

#581

Post by walth »

LtWorf wrote: post #546
pak9rabid wrote: post #285

Earlier quoted context omitted.

lol, I used to do this all the time at non-free wifi hotspot locations, only I'd start off with a ping sweep of the entire subnet (nmap -sP) in order to get my ARP cache filled with a bunch of potential usable IP/mac addresses on the network. From there, I'd iterate through each one and set the IP & mac address until I found one that would let me through the firewall. Granted, being a NOC engineer at Wayport (now AT&…

Normally ping is disabled on those networks?

Yup. And we normally have client L2 Isolation.

Re: WiFi without internet on a Southwest flight

#582

Post by refurb »

extraduder_ire wrote: post #569
refurb wrote: post #560

Earlier quoted context omitted.

I’m imaging it’s because states and even cities can have differing sales tax rates. Hard to advertise to a wide audience when the final price after tax is one of 12 different prices depending on where they live.

That's a weak justification to apply to prices listed right where the product is sold. Like, if one uses a sticker gun to put a price tag on a product itself. I don't know of any US businesses other than waffle house that always include all taxes in the listed price, however.

There are laws against adding in taxes on listed prices in places like NJ, likely others as well.

Regardless, I'm not sure why people consider it such a big deal. It's consistent across the board and it's relatively basic math to estimate what the total would be.

I've lived in places that do it both ways and it's a non-issue.

Re: WiFi without internet on a Southwest flight

#583

Post by masukomi »

duckqlz wrote: post #579
pak9rabid wrote: post #285

Earlier quoted context omitted.

lol, I used to do this all the time at non-free wifi hotspot locations, only I'd start off with a ping sweep of the entire subnet (nmap -sP) in order to get my ARP cache filled with a bunch of potential usable IP/mac addresses on the network. From there, I'd iterate through each one and set the IP & mac address until I found one that would let me through the firewall. Granted, being a NOC engineer at Wayport (now AT&…

If any lawyers or FAA employees are reading this I’m genuinely interested in what, if any, legal implications there would be for running nmap mid flight on an airline. Surely once you have spoofed the MAC address and IP of another passenger to gain unauthorized access to the planes LAN you have committed a crime but what about passively scanning?

are you asking if its a crime to read information they've publicly broadcast?

Because if that's a crime we're screwed because then it's illegal to read, or listen.

Re: WiFi without internet on a Southwest flight

#584

Post by alexellisuk »

jamesbvaughan wrote: post #165
alexellisuk wrote: post #126

What did you use to create your graphics?

I used chart.js [0], but I don't necessarily endorse it - it's just what I knew how to use quickly. I usually try to keep my posts free from javascript, and could have used a different tool that gives me SVG data or images. You can see the code that's generating these charts here: https://github.com/jamesbvaughan/jamesbvaughan.com/blob/main... [0] https://www.chartjs.org/

Thanks

Re: WiFi without internet on a Southwest flight

#585

Post by marktangotango »

masukomi wrote: post #583
duckqlz wrote: post #579

Earlier quoted context omitted.

If any lawyers or FAA employees are reading this I’m genuinely interested in what, if any, legal implications there would be for running nmap mid flight on an airline. Surely once you have spoofed the MAC address and IP of another passenger to gain unauthorized access to the planes LAN you have committed a crime but what about passively scanning?

are you asking if its a crime to read information they've publicly broadcast? Because if that's a crime we're screwed because then it's illegal to read, or listen.

We should not be surprised how much ignorance there is around this. Networking even for technical people can be a "black art".

https://www.theverge.com/2021/12/31/22861188/missouri-govern...

Re: WiFi without internet on a Southwest flight

#586

Post by gorlilla »

stereo wrote: post #495
Wowfunhappy wrote: post #449

Earlier quoted context omitted.

The first problem that comes to my mind--clients will remember both wifi networks and may continue to choose the open network when e.g. waking from sleep. The user can go in and forget the open network of course, but most won't know to do that.

It would theoretically be possible to bounce clients which you know are already authorised on the paid network.

QR code to connect to the _open_ but _hidden_ SSID. Instructs user to join WPA-EAP with supplied credentials once they've paid. Remains available to connect via QR in case customer somehow misplaced creds but avoids auto-reconnect during scan.

Re: WiFi without internet on a Southwest flight

#587

Post by gregfjohnson »

This is why I love hacker news. I was sitting in the waiting area at Long Beach Airport about to board a Southwest flight when I read this article. Did the hack, it worked spectacularly. I didn't have jq installed, but whipped up a python script with 'import json', watched the data stream the whole flight. Thanks a million for posting this!

Re: WiFi without internet on a Southwest flight

#588

Post by Fatnino »

withinboredom wrote: post #409
colanderman wrote: post #393

Earlier quoted context omitted.

Aren't you then fighting the switch's port learning? Or RSTing each other's TCP connections?

Its wifi. You both just pick up the same frame when it is broadcast, then it sees two stations (a level below IP) with the same MAC. Most routers just don't care about that. (it's technically a valid edge case that two stations have the same mac address. It should be vanishingly rare in the wild ... but this is a practical example of why it isn't).

"vanishingly rare"

I once bought a cheap Bluetooth dongle from China. Its MAC address was 11:11:11:11:11:11 Obviously there are now a lot of bluetooth dongles in the wild with the same MAC address.

Re: WiFi without internet on a Southwest flight

#589

Post by colanderman »

withinboredom wrote: post #409
colanderman wrote: post #393

Earlier quoted context omitted.

Aren't you then fighting the switch's port learning? Or RSTing each other's TCP connections?

Its wifi. You both just pick up the same frame when it is broadcast, then it sees two stations (a level below IP) with the same MAC. Most routers just don't care about that. (it's technically a valid edge case that two stations have the same mac address. It should be vanishingly rare in the wild ... but this is a practical example of why it isn't).

Yes so that is the hub case (2nd half of my comment) -- clients will RST each others' connections then. Unless you are MAC cloning but not IP cloning.

Re: WiFi without internet on a Southwest flight

#590

Post by eadmund »

jedberg wrote: post #172
dgellow wrote: post #81

Earlier quoted context omitted.

> WA chat is not HTTPS (or even TLS) If you don’t mind, could you expend on this? Are there specific reasons to not be using TLS?

We didn't use TLS at Netflix either, and instead used our own encryption protocol that ran on top of HTTP. We could do this because we controlled the clients too. The why was because of trust store issues. Every device has its own built in trust store, and especially on devices like TVs and DVD players, they couldn't be updated. After looking at all the devices we supported, there was no common certificate signer amo…

This discussion is another great example of why HTTP without TLS can be just fine, even desirable.
Post reply on HN