Stunnel and Airline Wi-Fi

#1

Post by Pneumaticat » Sat, Jul 20, 2019, 1:05 PM UTC

Stunnel and Airline Wi-Fi
potatofrom.space

Re: Stunnel and Airline Wi-Fi

#2

Post by BearsAreCool » Sat, Jul 20, 2019, 1:36 PM UTC

Nice breakdown! This makes me curious of just how many "free" wifi hotspots that allow access to a specific site can be completely bypassed.

Re: Stunnel and Airline Wi-Fi

#3

Post by nawtacawp » Sat, Jul 20, 2019, 1:37 PM UTC

While interesting, I would have an uneasy feeling messing with the WIFI AP on an airplane. Perhaps there is a U.S. law this type of conduct would fall under specific to being on an airplane?

Re: Stunnel and Airline Wi-Fi

#4

Post by Pneumaticat » Sat, Jul 20, 2019, 1:37 PM UTC

BearsAreCool wrote: post #2

Nice breakdown! This makes me curious of just how many "free" wifi hotspots that allow access to a specific site can be completely bypassed.

Thank you! I suspect the answer is "most", especially if they allow HTTPS in any way. The way to solve this issue is to either whitelist IPs/host the site internally on the local network (e.g. most captive portals).

Re: Stunnel and Airline Wi-Fi

#5

Post by thomasfedb » Sat, Jul 20, 2019, 1:45 PM UTC

Nice write-up. Found it very clear (and thanks for the SNI primer) except perhaps the port-soup near the end. Might have benifitted from a little diagram or flowchart for that bit.

Re: Stunnel and Airline Wi-Fi

#6

Post by Pneumaticat » Sat, Jul 20, 2019, 1:48 PM UTC

thomasfedb wrote: post #5

Nice write-up. Found it very clear (and thanks for the SNI primer) except perhaps the port-soup near the end. Might have benifitted from a little diagram or flowchart for that bit.

Thanks! Let me see if I can add an mspaint diagram.

edit: added! try refreshing if you don't see it.

Re: Stunnel and Airline Wi-Fi

#7

Post by gravitas » Sat, Jul 20, 2019, 1:51 PM UTC

nawtacawp wrote: post #3

While interesting, I would have an uneasy feeling messing with the WIFI AP on an airplane. Perhaps there is a U.S. law this type of conduct would fall under specific to being on an airplane?

The author does not "mess with the WIFI AP on the plane", they exploit a weakness in the design (failure by viasat to maintain an checksum IP mapping to their domain for the captive service) to simply bypass a trivial TLS header check in order to tunnel their traffic.

Re: Stunnel and Airline Wi-Fi

#8

Post by NKosmatos » Sat, Jul 20, 2019, 1:52 PM UTC

Nice post and well written. I’ll have to try something similar with stunner for my office connection (heavily filtered and firewalled), to allow me to reach my raspberry back home.

Re: Stunnel and Airline Wi-Fi

#9

Post by behrlich » Sat, Jul 20, 2019, 1:53 PM UTC

gravitas wrote: post #7

nawtacawp wrote: post #3

While interesting, I would have an uneasy feeling messing with the WIFI AP on an airplane. Perhaps there is a U.S. law this type of conduct would fall under specific to being on an airplane?

The author does not "mess with the WIFI AP on the plane", they exploit a weakness in the design (failure by viasat to maintain an checksum IP mapping to their domain for the captive service) to simply bypass a trivial TLS header check in order to tunnel their traffic.

This is almost definitely “hacking” under federal law.

Re: Stunnel and Airline Wi-Fi

#10

Post by Scea91 » Sat, Jul 20, 2019, 1:53 PM UTC

This seems quite unethical to me.