7 ms·

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Co

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Comcast / Xfiniti logins off the web, and use those to connect to "xfiniti-wifi" hotspots. Most cities have them, the speeds are fairly decent too. We're truly living in the panopticon

samschooler 6y ago
Through the pandemic, Xfinity is offering anyone free guest access, so for at least the next few months, you don't need to even buy logins. https://corporate.comcast.com/press/releases/comcast-extends-free-public-wifi-access-remainder-of-2020 https://corporate.comcast.com/press/releases/comcast-extends...
- codemac 6y ago
  Note, this only works on the xfinity "public wifi stations" rather than the xfinity ssid's from home routers. If you want to access the home router networks, you still need to pay for an account.
  - samschooler 6y ago
    Yup thanks for the clarification
refurb 6y ago
Maybe I'm being overly paranoid, but if you're arrested, what's stopping the cops from matching the phones MAC to public wifi connections?
- CharlesW 6y ago
  This might be helpful: https://support.apple.com/en-us/HT211227 https://support.apple.com/en-us/HT211227 > To reduce this privacy risk, iOS 14, iPadOS 14, and watchOS 7 include a feature that periodically changes the MAC address your device uses with each Wi-Fi network. This randomized MAC address is your device's private Wi-Fi address for that network—until the next time it joins with a different address. iOS 14 is in beta, but has been pretty solid for me. https://beta.apple.com/sp/betaprogram/ https://beta.apple.com/sp/betaprogram/
- zamadatix 6y ago
  Since Android 9 there is an option to use randomized MACs for the actual connection (not just probing).
  - mixmastamyk 6y ago
    Most folks won't be aware of an option unless it is default.
    - chocolatkey 6y ago
      On my Samsung Galaxy S10e (Android 10) it is the default
      - zamadatix 6y ago
        That's for probing only, randomization on connection is accessible via developer options only.
    - ddeck 6y ago
      The defaults changed in Android 10: [Starting] In Android 10, MAC randomization is enabled by default for client mode, SoftAp, and Wi-Fi Direct. https://source.android.com/devices/tech/connect/wifi-mac-randomization https://source.android.com/devices/tech/connect/wifi-mac-ran...
  - 8note 6y ago
    Who's to say that a stingray won't overwrite those settings though?
    - ta17711771 6y ago
      The AOSP security model.
- GaryNumanVevo 6y ago
  Realistically nothing, however if they're using a Stingray to target large swaths of people, you're more likely to avoid getting your phone pinged on WIFI. Not to mention going after specific MAC info from Xfinity takes a long time.
helios_invictus 6y ago
You should not have to be good at opsec or economically advantaged to be able to demonstrate.
- GaryNumanVevo 6y ago
  Completely agree, between DHS compiling information on journalists and unmarked vans picking up protesters, it's like the Arab Spring
- sbierwagen 6y ago
  Then don't bring a cell phone to a protest?
  - ghaff 6y ago
    It would certainly seem as if far and away the easiest and best opsec is to not have your phone on you or at least not turned on. Have people really become so dependent on their phones that the thought of being somewhere without one doesn't even come up as an option? I'd certainly at least turn my phone or a burner phone off before depending on not being compromised.
    - nick_kline 6y ago
      People are pretty dependent on their cell phones. It's our maps, ways out of places. You can even do bus tickets on them. It's our way to call for help, see if someone is okay. So it's weird not to have my phone on me.
    - lostlogin 6y ago
      The presence of cameras is important and the footage they have taken has made significant waves.
      - ghaff 6y ago
        Use a camera?
AftHurrahWinch 6y ago
In Portland hundreds of demonstrators used the mesh-networking app Bridgefy, and some affinity groups used goTennas which even served streaming movies, music, and documentaries that spoke to the revolutionary tenor.
- sschueller 6y ago
  How does bridgefy make money? It's not open source. The website leads to a level 3 default page. How do you know the feds don't own it?
  - blue52 6y ago
    During uncertain times like this we need to be asking the hard questions. Always use protection like a VPN and iptable when connecting to unknown/untrusted networks.
  - upofadown 6y ago
    In general, it is best to assume that the feds own everything and work from there.
gruez 6y ago
If you have gapps installed (every stock ROM unless you're in china), you should probably assume google is tracking your location through wifi networks. As such, you should probably install lineageos for additional security.
- rootsudo 6y ago
  This is more reason then ever to flash a generic android image. Google does track your wifi and have amassed a huuuuuge library of SSID name, freq, mac addresses and this is what they use alongside IP geo location for google maps and other services. It's good and also bad. And if you restrict these things, you "look" like a bot so you have increased friction to accessing information! The looking like a bot, makes sense I get that and ddos prevention but it goes in a circle, doesn't it? iPhone is not the answer either, but an iphone w/ no google apps doesn't mean you're free from the ecosystem.
  - JetSpiegel 6y ago
    > This is more reason then ever to flash a generic android image. This doesn't really exist. It's not like a Linux distro, each specific device requires a specific device-tree, a separate image. postmarketOS and others are trying to change this.
omarchowdhury 6y ago
Are these logins legally purchasable or is there some black/grey market for them?
- GaryNumanVevo 6y ago
  Sure, it comes "free" with every Xfinity internet plan. Ideally you would "borrow" someone else's account for a while.
nick_kline 6y ago
Won't your wifi mac address be a unique identifier? Did google start doing wifi mac address randomization?
- parliament32 6y ago
  Yes: https://source.android.com/devices/tech/connect/wifi-mac-randomization https://source.android.com/devices/tech/connect/wifi-mac-ran...
rsync 6y ago
"Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only." I don't have a use for such a thing, but if I did, I think I would get an Apple iPod touch which has no cellular capabilities at all ...

samschooler 6y ago

Through the pandemic, Xfinity is offering anyone free guest access, so for at least the next few months, you don't need to even buy logins. https://corporate.comcast.com/press/releases/comcast-extends-free-public-wifi-access-remainder-of-2020 https://corporate.comcast.com/press/releases/comcast-extends...

codemac 6y ago
Note, this only works on the xfinity "public wifi stations" rather than the xfinity ssid's from home routers. If you want to access the home router networks, you still need to pay for an account.
- samschooler 6y ago
  Yup thanks for the clarification

refurb 6y ago

Maybe I'm being overly paranoid, but if you're arrested, what's stopping the cops from matching the phones MAC to public wifi connections?

CharlesW 6y ago
This might be helpful: https://support.apple.com/en-us/HT211227 https://support.apple.com/en-us/HT211227 > To reduce this privacy risk, iOS 14, iPadOS 14, and watchOS 7 include a feature that periodically changes the MAC address your device uses with each Wi-Fi network. This randomized MAC address is your device's private Wi-Fi address for that network—until the next time it joins with a different address. iOS 14 is in beta, but has been pretty solid for me. https://beta.apple.com/sp/betaprogram/ https://beta.apple.com/sp/betaprogram/
zamadatix 6y ago
Since Android 9 there is an option to use randomized MACs for the actual connection (not just probing).
- mixmastamyk 6y ago
  Most folks won't be aware of an option unless it is default.
  - chocolatkey 6y ago
    On my Samsung Galaxy S10e (Android 10) it is the default
    - zamadatix 6y ago
      That's for probing only, randomization on connection is accessible via developer options only.
  - ddeck 6y ago
    The defaults changed in Android 10: [Starting] In Android 10, MAC randomization is enabled by default for client mode, SoftAp, and Wi-Fi Direct. https://source.android.com/devices/tech/connect/wifi-mac-randomization https://source.android.com/devices/tech/connect/wifi-mac-ran...
- 8note 6y ago
  Who's to say that a stingray won't overwrite those settings though?
  - ta17711771 6y ago
    The AOSP security model.
GaryNumanVevo 6y ago
Realistically nothing, however if they're using a Stingray to target large swaths of people, you're more likely to avoid getting your phone pinged on WIFI. Not to mention going after specific MAC info from Xfinity takes a long time.

helios_invictus 6y ago

You should not have to be good at opsec or economically advantaged to be able to demonstrate.

GaryNumanVevo 6y ago
Completely agree, between DHS compiling information on journalists and unmarked vans picking up protesters, it's like the Arab Spring
sbierwagen 6y ago
Then don't bring a cell phone to a protest?
- ghaff 6y ago
  It would certainly seem as if far and away the easiest and best opsec is to not have your phone on you or at least not turned on. Have people really become so dependent on their phones that the thought of being somewhere without one doesn't even come up as an option? I'd certainly at least turn my phone or a burner phone off before depending on not being compromised.
  - nick_kline 6y ago
    People are pretty dependent on their cell phones. It's our maps, ways out of places. You can even do bus tickets on them. It's our way to call for help, see if someone is okay. So it's weird not to have my phone on me.
  - lostlogin 6y ago
    The presence of cameras is important and the footage they have taken has made significant waves.
    - ghaff 6y ago
      Use a camera?

AftHurrahWinch 6y ago

In Portland hundreds of demonstrators used the mesh-networking app Bridgefy, and some affinity groups used goTennas which even served streaming movies, music, and documentaries that spoke to the revolutionary tenor.

sschueller 6y ago
How does bridgefy make money? It's not open source. The website leads to a level 3 default page. How do you know the feds don't own it?
- blue52 6y ago
  During uncertain times like this we need to be asking the hard questions. Always use protection like a VPN and iptable when connecting to unknown/untrusted networks.
- upofadown 6y ago
  In general, it is best to assume that the feds own everything and work from there.

gruez 6y ago

If you have gapps installed (every stock ROM unless you're in china), you should probably assume google is tracking your location through wifi networks. As such, you should probably install lineageos for additional security.

rootsudo 6y ago
This is more reason then ever to flash a generic android image. Google does track your wifi and have amassed a huuuuuge library of SSID name, freq, mac addresses and this is what they use alongside IP geo location for google maps and other services. It's good and also bad. And if you restrict these things, you "look" like a bot so you have increased friction to accessing information! The looking like a bot, makes sense I get that and ddos prevention but it goes in a circle, doesn't it? iPhone is not the answer either, but an iphone w/ no google apps doesn't mean you're free from the ecosystem.
- JetSpiegel 6y ago
  > This is more reason then ever to flash a generic android image. This doesn't really exist. It's not like a Linux distro, each specific device requires a specific device-tree, a separate image. postmarketOS and others are trying to change this.

omarchowdhury 6y ago

Are these logins legally purchasable or is there some black/grey market for them?

GaryNumanVevo 6y ago
Sure, it comes "free" with every Xfinity internet plan. Ideally you would "borrow" someone else's account for a while.

nick_kline 6y ago

Won't your wifi mac address be a unique identifier? Did google start doing wifi mac address randomization?

parliament32 6y ago
Yes: https://source.android.com/devices/tech/connect/wifi-mac-randomization https://source.android.com/devices/tech/connect/wifi-mac-ran...

rsync 6y ago

"Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only." I don't have a use for such a thing, but if I did, I think I would get an Apple iPod touch which has no cellular capabilities at all ...