Stunnel and Airline Wi-Fi • Hacker News Board

Re: Stunnel and Airline Wi-Fi

#61

Post by anticensor » Sat, Jul 20, 2019, 2:40 PM UTC

PaulAJ wrote: post #25

In the USA this would be a violation of the CFAA https://www.law.cornell.edu/uscode/text/18/1030 . Specifically, the router is a "protected computer" and the procedure described here is "exceeding authorised access" because it routes packets around a mechanism that was designed to stop them. Maximum penalty 5 years. (Some might argue that it was authorised because the computer let him do it. However the CFAA simply d…

It is computer abuse as he continued doing it repeatedly and looked up for different workarounds, after getting an unauthorised way to access. A more severe offense than simple unauthorised access.

Re: Stunnel and Airline Wi-Fi

#62

Post by oh_sigh » Sat, Jul 20, 2019, 2:40 PM UTC

ThinkingGuy wrote: post #24

xedeon wrote: post #15

Earlier quoted context omitted.

Please actually read the article. The author did not “mess” with WiFi radio. It was all done on the network layer.

How well do you trust that 12 jury members would understand the distinction?

That wasn't the point OP was making.

Re: Stunnel and Airline Wi-Fi

#63

Post by eyeball » Sat, Jul 20, 2019, 2:41 PM UTC

I’ve been able to get enough bandwidth to check email on delta by:

1) connect to WiFi and get to the sign up / credit card page 2) turn on PIA vpn client

Seems to work. Very limited speed though. Email checks and not much else.

Re: Stunnel and Airline Wi-Fi

#64

Post by aisofteng » Sat, Jul 20, 2019, 2:41 PM UTC

NKosmatos wrote: post #8

Nice post and well written. I’ll have to try something similar with stunner for my office connection (heavily filtered and firewalled), to allow me to reach my raspberry back home.

Just note that doing that is probably a fireable offense.

Re: Stunnel and Airline Wi-Fi

#65

Post by anticensor » Sat, Jul 20, 2019, 2:42 PM UTC

Dayshine wrote: post #55

kemitche wrote: post #44

Earlier quoted context omitted.

It's not nuts when compared to non-tech laws. It's illegal to come into my house and take my stuff even if I forget to lock my back door. If we want to protect security professionals, we should write laws that do so.

It's not illegal to use 500GB of fibre bandwidth in a month when you only pay for 250GB though (say due to a bug in their method of counting usage).

It is not unauthorised access when you exceed your bandwith quota. It is simply another debt, even if it is not billed correctly yet. Most will lose internet subscription if it were considered unauthorised access.

Re: Stunnel and Airline Wi-Fi

#66

Post by jfk13 » Sat, Jul 20, 2019, 2:43 PM UTC

Dayshine wrote: post #58

kristianc wrote: post #50

Earlier quoted context omitted.

This is hacking under federal law, as it should be. Likewise that if I break into your house by merely exploiting a weakness in the design of the lock, I am still committing a crime.

If someone charges for tours of part of their house, has two prices of tour, and you change the colour of your badge to let you access the part you haven't paid for, is that a crime?

Sounds like some form of fraud to me. What's the difference between that and simply forging a ticket to an event instead of buying one? Or forging a currency note?

Re: Stunnel and Airline Wi-Fi

#67

Post by MikeKusold » Sat, Jul 20, 2019, 2:44 PM UTC

Dayshine wrote: post #58

kristianc wrote: post #50

Earlier quoted context omitted.

This is hacking under federal law, as it should be. Likewise that if I break into your house by merely exploiting a weakness in the design of the lock, I am still committing a crime.

If someone charges for tours of part of their house, has two prices of tour, and you change the colour of your badge to let you access the part you haven't paid for, is that a crime?

Yes. It’s trespassing.

Re: Stunnel and Airline Wi-Fi

#68

Post by 0xbadcafebee » Sat, Jul 20, 2019, 2:45 PM UTC

batbomb wrote: post #49

It’s always easier to just wireshark for an IP address that has access (in hotels too) and then clone the MAC adddress.

Yep, this is the easiest & most reliable method.

Other techniques include tunneling over DNS, tunneling over ICMP, finding flaws in the HTTP parser, scanning the default router for open ports, scanning intermediate proxies for open ports, exploiting bad proxy redirect rules, finding protocols and ports that the firewall doesn't block outbound, and finding holes in the paywall's web apps.

Once upon a time there was a pre-paid mobile internet provider that sold USB sticks. It turned out that once you had initially activated the stick, even without an account, it would always default to a paywall until you had an account paid up. The HTTP parser of the paywall proxy was so bad, it only filtered connections with CRLF as the line-terminator for HTTP requests... so a simple proxy that converted CRLF to LF bypassed the paywall.

Re: Stunnel and Airline Wi-Fi

#69

Post by ht85 » Sat, Jul 20, 2019, 2:47 PM UTC

cabaalis wrote: post #54

kemitche wrote: post #44

Earlier quoted context omitted.

It's not nuts when compared to non-tech laws. It's illegal to come into my house and take my stuff even if I forget to lock my back door. If we want to protect security professionals, we should write laws that do so.

> It's illegal to come into my house and take my stuff even if I forget to lock my back door. For some reason, on HN when I've made this argument before, the resulting comments have been that the internet is somehow different, and that real-world analogies don't exist. Using equipment that you don't own in a way the owners don't intend is apparently well-accepted.

Probably because this is a victimless crime...

What he did would be more akin to someone entering your property, having their lunch in your garden and cleaning up before leaving.

Re: Stunnel and Airline Wi-Fi

#70

Post by UperSpaceGuru » Sat, Jul 20, 2019, 2:48 PM UTC

myrandomcomment wrote: post #33

The comment about the 24Mbps is pretty impressive. My experience every month on the JAL flights SF to Tokyo and Tokyo to $SomeOtherAsianCity is pretty crappy. I wonder if doing this it also bypasses some QoS filters? For example on a flight I tried to open the XM app on my iPad and could not stream a thing (it's pretty low but rate). Slack connects and disconnects all time. Email works but is slow. Webpages take minu…

That’s because you’re traveling in airspace covered by different Satellite than the one that covers The American continent. Top speed should actually be ~74MBps.

I was one of the people who helped build the system (not at Viasat)