5 ms·
The decision is questionable, but you can always inspect traffic from the machine outside it, I would even say that's preferable in context of malware.
by comboy 6y ago
The decision is questionable, but you can always inspect traffic from the machine outside it, I would even say that's preferable in context of malware.
- gowld 6y agoCan you recommend a portable wifi firewall? Based on Raspberry Pi, perhaps?
- yayr 6y agosaw the GL.iNet+GL-MT300N-V2 recently - have not bought it yet, maybe it's time if it's good
- rhizome 6y agoAh, nice. I've been looking for something with which I can sniff my phone's activity, and that provides all of the keywords. And $20 ain't bad neither.
- jasonjayr 6y agoSomeone else here recommended those, and now I have 11 for myself + my staff. They are great 2-port devices, with free GPIO pins too! Can do on-device VPN (openvpn, wireguard + tor) with a policy that kills internet access unless it's through the VPN.
- tssva 6y agoTLS makes this difficult today and SNI encryption will make this next to impossible without installing a custom ca certificate and doing MITM. Even that isn't helpful when you are using a laptop that may not always be on the network where you have deployed a device for inspection. Better to be able to inspect or block on the device by application.
- tialaramex 6y agoI would be astonished if Apple doesn't at least experiment with key pinning for the services it has decided to "protect" in this way. If pinning is used then you can't interfere by interposing a middlebox, the connection would just fail. I guess it's possible Apple would find corporate pushback is too strong, but maybe not. Don't use things you don't trust. If you trust Apple's proprietary software at least you are getting exactly what you signed up for. Apple gets to do whatever they want, which you apparently trust them to do. Will they accidentally let in bad guys? Maybe. You signed up for that too.
- comboy 6y agoWhen we are talking about malware that's irrelevant. And if we are talking about inspecting Apple's traffic, I don't think you should trust things you see on their hardware running their operating system.