Live data from Hacker News

I told the flight attendant "the WiFi isn't working"

twitter.com

81–90 of 171 posts

Re: I told the flight attendant "the WiFi isn't working"

#82
post #42

Earlier quoted context omitted.

Isn’t this the fundamental point of the push for impotency in configuration management tools? You just need the state set to “good”, regardless of which bits need to change and current state. Hit the button and it makes it “good”.

> Isn’t this the fundamental point of the push for impotency in configuration management tools? FYI, The word you're looking for is idempotence (EYE-dem-poh-tense).

Yes, autocorrect.

Re: I told the flight attendant "the WiFi isn't working"

#84

Earlier quoted context omitted.

We laugh as IT experts. But think about it from the end user perspective. Literally the most simple instruction; near fault proof. On an airplane that is thousands of feet from remote IT support (plus "costs"). The instruction to staff; problem with "the Internet"? - press the "Interest Reset" button. Far better than "router restart", "renew DHCP leases" or "reboot IT" Explicit, non ambiguous and without technobabble…

If that's your attitude, you may as well rename the button "Appease Machine Spirit" and attach a few purity seals to it.

That's a bad name for the button because now the staff have to remembered what it's for.

Re: I told the flight attendant "the WiFi isn't working"

#85
post #64

Earlier quoted context omitted.

Great project, a lot of APs themselves support VLAN segregation using RADIUS, has SPR ever considered the scenario where it might be ideal if it were just the router and it controls APs (and even switches) that way?

SPR supports receiving VLAN tagged packets over a wired LAN interface today. Soon we are planning to support an OpenWRT package that will allow people to link up into SPR from lots of APs, provided the AP card supports AP/VLAN mode which is critical for the segmentation. We have no plan to work more closely with managing RADIUS right now, enterprise wifi authentication is difficult to deploy securely without client-s…

Yeah I already do some combination of MPSK and MAC-based Security on Aruba AP-555 and AP-655 at home with a couple hundred IOT devices, OPNsense and FreeRADIUS. I segment by (vendor, device model) instead of /30 per individual device but that’s more setup convenience than anything (it’d be possible to uniquely dot1q every device, too).

I think SPR looks neat, it’s a more well-packaged version of essentially what I already do (albeit in a kludgey way), hence the curiosity about ambition.

Re: I told the flight attendant "the WiFi isn't working"

#86
post #42

Earlier quoted context omitted.

Isn’t this the fundamental point of the push for impotency in configuration management tools? You just need the state set to “good”, regardless of which bits need to change and current state. Hit the button and it makes it “good”.

> Isn’t this the fundamental point of the push for impotency in configuration management tools? FYI, The word you're looking for is idempotence (EYE-dem-poh-tense).

Thank you. I thought this was some reference to giving people config options that don’t actually do anything.

Re: I told the flight attendant "the WiFi isn't working"

#87

Hacking WiFi on a plane is a sure fire way to get yourself added to the no-fly list.

Note that what the author did could have been done in a purely passive way, just by capturing packages and seeing the DHCP responses others got. I don't think that qualifies as "hacking".

Re: I told the flight attendant "the WiFi isn't working"

#88

Earlier quoted context omitted.

Every time I have to interact with a "captive portal", I'm annoyed at the hack implemented through DNS hijacking, rather than implementing and extending 802.1X and/or another layer-2 authentication scheme. The idea seems to have been tossed aside entirely. Instead, every device has to have a web browser. There's not even a way to do surrogate registration for devices that don't have browsers, with Apple TV and Ninten…

I have a work laptop (government) that hates captive portals. It has a security system that won't let it connect using the local DNS. So it doesn't get captured. Those of us with such laptops all have tricks for getting to a hotel's wifi login page using IP addresses. But we have to do it fast, before the security software fully wakes up and blocks the hack. We used to just login on our phones, then tether the work l…

> I have a work laptop (government) that hates captive portals. It has a security system that won't let it connect using the local DNS.

Does the OS not pay attention to DHCP option 114:

    This document describes a DHCP option (and a Router Advertisement
    (RA) extension) to inform clients that they are behind some sort of
    captive-portal device and that they will need to authenticate to get
    Internet access.  It is not a full solution to address all of the
    issues that clients may have with captive portals; it is designed to
    be used in larger solutions.  The method of authenticating to and
    interacting with the captive portal is out of scope for this
    document.

* https://datatracker.ietf.org/doc/html/rfc8910

* https://developer.apple.com/news/?id=q78sq5rv

Re: I told the flight attendant "the WiFi isn't working"

#89
post #76

Earlier quoted context omitted.

I'd suggest a book. I was pretty happy with "Computer Networking: A Top-down Approach" by Jim Kurose. I find it more appealing that it starts with the upper layers (http), because I was more familiar with them.

From the authors’ website: “You can't buy a hard copy of the 8th edition, but instead can rent (and then choose/pay to keep the hardcopy if you want a hard copy book). You can rent a copy or subscribe to Pearson+ from our publisher, or rent a hard copy or purchase a Kindle version from Amazon, or rent a hard copy from VitalSource.” That’s just… odd! http://gaia.cs.umass.edu/kurose_ross/index.php

Or just http://library.lol/main/8B547BCDF967B08655D6360F6FE9D809

Re: I told the flight attendant "the WiFi isn't working"

#90
post #18

How does one learn about this stuff? I learned about basic networking in college (the TCP layers) etc but people doing such stuff sounds like Greek to me. If I want to learn more about what the author is doing, is there a resource like a udemy course or YouTube channel you guys can recommend?

Start homelabbing. Set up your own network.
Post reply on HN