Want to use my wifi?
thejh.net
Want to use my wifi?
1–10 of 57 posts
Re: Want to use my wifi?
#2Just for teh lulz, you could do ARP-spoofing on public wifi's too, and achieve the same effect wthout having the trouble of setting up a hotspot.
I admit of having spoofed a Burger King public WiFi and replacing all img-tag sources with Goatse. Priceless reactions everywhere ;)
Re: Want to use my wifi?
#3Just for teh lulz, you could do ARP-spoofing on public wifi's too, and achieve the same effect wthout having the trouble of setting up a hotspot. I admit of having spoofed a Burger King public WiFi and replacing all img-tag sources with Goatse. Priceless reactions everywhere ;)
True, and that might also give you access to more traffic than just a random open wifi because people expect a wifi there and look for it.
Re: Want to use my wifi?
#4Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks.
Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use the strict security header). In this case you do not get a warning, just the absence of a tiny green icon.
Re: Want to use my wifi?
#5These attacks could be given longevity by using a cache manifest.
Re: Want to use my wifi?
#6Using a VPN would protect you against all of this right?
Re: Want to use my wifi?
#7Using a VPN would protect you against all of this right?
Assuming you can trust the VPN and the encryption is good it should.
Re: Want to use my wifi?
#8Is it possible to use the browser in https only mode, or at least have it force launch any https sites in a new incognito mode window so that you know it's http-only. Furthermore, it would be nice if you could disable all text inputs on http-only windows.
I know that I would be more likely to contact a site owner asking for https if it screamed at me everytime it happened.
It's time to ditch http for all but rare use cases, because almost 2014.
Re: Want to use my wifi?
#9Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks. Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use th…
How easy is it to fully automate VPN only computer usage so that everything I do comes out of a machine at Amazon EC2 for example?
I've never set it up and was curious what others have done to make it as invisible as possible.
Re: Want to use my wifi?
#10Using a browser in incognito mode does none of the sort. You can still enter your password into it and it can be stolen just as easily. The true solution is to only browse over HTTPS, connect to a VPN or not use untrusted networks. Note that if I can spoof an IP address, I can send you bogus DNS replies, and send you to a web server that impersonates Google/Facebook/etc. but does not require HTTPS (unless they use th…
How easy is it to fully automate VPN only computer usage so that everything I do comes out of a machine at Amazon EC2 for example? I've never set it up and was curious what others have done to make it as invisible as possible.
If you're on a Mac, it's nearly plug-and-play — I use a small menubar app called sidestep[1] that automatically tunnels over SSH, but there are also a few (Viscosity comes to mind) that work in a similar fashion with OpenVPN.
There may be similar bits available for Windows, but I haven't looked into it there in some time.