3 ms·
I'm fairly sure tethering can also be trivially detected by inspecting the TTL of packets, as a device sitting "behind" the tethering device will increase the T
by mfontani 7y ago
I'm fairly sure tethering can also be trivially detected by inspecting the TTL of packets, as a device sitting "behind" the tethering device will increase the TTL by one.
https://android.stackexchange.com/questions/47819/how-can-phone-companies-detect-tethering-incl-wifi-hotspot https://android.stackexchange.com/questions/47819/how-can-ph... seems to have more on the matter.
- ben7799 7y agoThis can be spoofed/hidden extremely easily if both devices are open source and you want to change it though. It's not like TTL can't be changed. The tethering device can just rewrite the packets to hide the tethered device.
- lima 7y agoEven better - you only need root on either device. Just set a higher initial TTL on your tethered device, or rewrite the TTL on the phone. But carriers don't use that anymore, too easy to bypass.
- esotericn 7y agoClever! I hadn't considered that at all. I suspect you mean decrement by one, though. On Linux: `sysctl net.ipv4.ip_default_ttl` (mine was 64) `sysctl net.ipv4.ip_default_ttl=65` Done ;)