3 ms·
Assume that both devices are behind a different NAT with no inbound ports publicly accessible, which is a very common scenario - e.g. a phone behind a cell prov
by PeterisP 3y ago
Assume that both devices are behind a different NAT with no inbound ports publicly accessible, which is a very common scenario - e.g. a phone behind a cell provider's carrier-grade NAT and a computer on a firewalled corporate network.
The median user controls 0 public IPv4 addresses.
- enriquto 3y agoWhat would a canonical hacker do here?
- PeterisP 3y agoThe median hacker would likely have something available with proper internet connectivity, they are substantially different from the median user. But many of the solutions mentioned in the article and comments will effectively use some "third place" to link the two devices, e.g. how magic wormhole does that.
- ogurechny 3y agoHacker usually has some kind of relay at hand: https://github.com/nwtgck/piping-server https://github.com/nwtgck/piping-server https://github.com/schollz/croc https://github.com/schollz/croc Or a NAT traversal tool: https://github.com/shawwwn/Gole https://github.com/shawwwn/Gole https://github.com/samyk/pwnat https://github.com/samyk/pwnat Or can just manually ncat simultaneously from both sides to proper addresses and ports, probably with the help of some public STUN server. Note that if worst case combination of NATs doesn't allow direct connection, then by definition a relay is needed, hacker or not, it doesn't matter.
- GoblinSlayer 3y agoFWIW I connect to my corporate network through VPN, so more or less direct connectivity exists. At least TCP works.