5 ms·

You can also do http(s) over DNS: http://code.kryo.se/iodine/ http://code.kryo.se/iodine/ . Nice way to avoid paying captive portals, although probably not lega

by kabes 9y ago

You can also do http(s) over DNS: http://code.kryo.se/iodine/ http://code.kryo.se/iodine/ . Nice way to avoid paying captive portals, although probably not legal.

gsich 9y ago
Why not?
- pbhjpbhj 9y ago
  In USA and UK at least unauthorised access or use of a computer is criminalised. On some situations you can argue for assumed consent, the law doesn't operate on "if I can do it then it's authorised". Unless you can show you have permission then it's not authorised, ergo not legal. AIUI; not legal advice.
  - gsich 9y ago
    But the premise was to circumvent crap such as captive portals. Doing that on your own computer (mostly in a public wlan), I don't see any reason against it.
    - remedan 9y ago
      You're still circumventing security measures to use somebody else's hardware in a way they clearly don't want you to. That's illegal in most cases.
      - gsich 9y ago
        Who is the "someone else" in your case? Where does the someone else's hardware come from? OP mentioned this to get rid off e.g captive portals. Iodine requires a client and a server. Both belong to you, what is the problem here? That I use a network to transmit packets? We are not talking about installing iodine on someone else's computer!
        lyk 9y ago
        Not sure if you're trolling, but the network is being accessed by bypassing the captive portal. The network is being accessed in a way that isn't permitted.
        gsich 9y ago
        And how should I know that there is a captive portal? I connect (connection is established after receiving IP address!) and use iodine (or similar).
        tedunangst 9y ago
        I'm sure the jury will be delighted to hear your explanation.
        gsich 9y ago
        Why should this go to court? I'm not sure if you have understood what this thread was about.
        loup-vaillant 9y ago
        "I used iodine all the time, so I can't even notice the presence of a captive portal, if any." "My son handles the computer stuff for me, I don't even know about that logging page you're talking about." "I thought restricted networks had a WPA-2 password? That's what they use at my workplace."
        pbhjpbhj 9y ago
        "The door to the house was open, move of the stuff was tied down, how could i be expected to know I wasn't authorised to use it??" Judges just aren't that stupid.
        gsich 9y ago
        Only that the comparison is stupid.
    - 0xffff2 9y ago
      In this case, you're potentially using the public wlan's router in an unauthorized manner.
      - gsich 9y ago
        What is authorized and what is not? It is (usually) not presented.
        zb3 9y ago
        Especially when the network is open, because for instance Android devices automatically connect to networks like that
ce4 9y ago
What does this shady technique (dns tunneling) have to do with dns-over-ssl?
- gsich 9y ago
  why shady? (assuming that shady is meant in a negative way)
  - spydum 9y ago
    It's clearly to evade a security control.. As if you approached a door, to find it locked, but then discovered the front window was unlocked and let yourself in.. Clearly the occupant didn't want you to enter, and just failed to secure the entire building. Pretty sure nobody would ever suggest it was okay for you to enter in such a way.
    - gsich 9y ago
      I doubt that. If DNS traffic is not filtered or blocked, it is clearly intended to transmit data that way. On a public wlan I first try to use VPN with port 53 (not DNS). If it works, I'll use it that way.
  - ce4 9y ago
    It's unfit for general use and abuses the DNS protocol to stealthily convey data, hence the shadiness. You're right, it needn't be used in a negative way. DNS tunneling is slow, needs polling for incoming traffic (due to the way dns works over udp) and is usually used to circumvent firewalls for both good (censorship) and bad reasons (exfiltrating data).
billpg 9y ago
Can I do HTTP over DNS over HTTP over DNS over HTTP over DNS over HTTP over DNS over HTTP over DNS?
- banachtarski 9y ago
  You do realize DNS is not a fully featured protocol right...
  - deleted 9y ago
    [deleted]

by kabes 9y ago

You can also do http(s) over DNS: http://code.kryo.se/iodine/ http://code.kryo.se/iodine/ . Nice way to avoid paying captive portals, although probably not legal.

gsich 9y ago

Why not?

pbhjpbhj 9y ago
In USA and UK at least unauthorised access or use of a computer is criminalised. On some situations you can argue for assumed consent, the law doesn't operate on "if I can do it then it's authorised". Unless you can show you have permission then it's not authorised, ergo not legal. AIUI; not legal advice.
- gsich 9y ago
  But the premise was to circumvent crap such as captive portals. Doing that on your own computer (mostly in a public wlan), I don't see any reason against it.
  - remedan 9y ago
    You're still circumventing security measures to use somebody else's hardware in a way they clearly don't want you to. That's illegal in most cases.
    - gsich 9y ago
      Who is the "someone else" in your case? Where does the someone else's hardware come from? OP mentioned this to get rid off e.g captive portals. Iodine requires a client and a server. Both belong to you, what is the problem here? That I use a network to transmit packets? We are not talking about installing iodine on someone else's computer!
      - lyk 9y ago
        Not sure if you're trolling, but the network is being accessed by bypassing the captive portal. The network is being accessed in a way that isn't permitted.
        gsich 9y ago
        And how should I know that there is a captive portal? I connect (connection is established after receiving IP address!) and use iodine (or similar).
        tedunangst 9y ago
        I'm sure the jury will be delighted to hear your explanation.
        gsich 9y ago
        Why should this go to court? I'm not sure if you have understood what this thread was about.
        loup-vaillant 9y ago
        "I used iodine all the time, so I can't even notice the presence of a captive portal, if any." "My son handles the computer stuff for me, I don't even know about that logging page you're talking about." "I thought restricted networks had a WPA-2 password? That's what they use at my workplace."
        pbhjpbhj 9y ago
        "The door to the house was open, move of the stuff was tied down, how could i be expected to know I wasn't authorised to use it??" Judges just aren't that stupid.
        gsich 9y ago
        Only that the comparison is stupid.
  - 0xffff2 9y ago
    In this case, you're potentially using the public wlan's router in an unauthorized manner.
    - gsich 9y ago
      What is authorized and what is not? It is (usually) not presented.
      - zb3 9y ago
        Especially when the network is open, because for instance Android devices automatically connect to networks like that

ce4 9y ago

What does this shady technique (dns tunneling) have to do with dns-over-ssl?

gsich 9y ago
why shady? (assuming that shady is meant in a negative way)
- spydum 9y ago
  It's clearly to evade a security control.. As if you approached a door, to find it locked, but then discovered the front window was unlocked and let yourself in.. Clearly the occupant didn't want you to enter, and just failed to secure the entire building. Pretty sure nobody would ever suggest it was okay for you to enter in such a way.
  - gsich 9y ago
    I doubt that. If DNS traffic is not filtered or blocked, it is clearly intended to transmit data that way. On a public wlan I first try to use VPN with port 53 (not DNS). If it works, I'll use it that way.
- ce4 9y ago
  It's unfit for general use and abuses the DNS protocol to stealthily convey data, hence the shadiness. You're right, it needn't be used in a negative way. DNS tunneling is slow, needs polling for incoming traffic (due to the way dns works over udp) and is usually used to circumvent firewalls for both good (censorship) and bad reasons (exfiltrating data).

billpg 9y ago

Can I do HTTP over DNS over HTTP over DNS over HTTP over DNS over HTTP over DNS over HTTP over DNS?

banachtarski 9y ago
You do realize DNS is not a fully featured protocol right...
- deleted 9y ago
  [deleted]