3 ms·

I “hacked” free WiFi on a very long flight to Beijing about 10 years ago when I was in my 20s. I was visiting my girlfriend’s family and didn’t actually have mo

by floam 2y ago

I “hacked” free WiFi on a very long flight to Beijing about 10 years ago when I was in my 20s. I was visiting my girlfriend’s family and didn’t actually have more than $20 to my name at the time. It was a simple matter of joining the network, and then dumping the traffic in monitor mode. I could log MAC addresses of other devices on the network. I made a list of addresses and then spoofed someone else’s address that must have paid, and blamo, I’m online. I would rotate to another address when Internet access deteriorated: this meant the other guy was trying to use the Internet at the same time. Yeah, I know I’m awful.

avidiax 2y ago
I have heard that you can often do this at the IP address layer instead of the MAC layer. The trouble is that IP conflict detection may have to be disabled.
- banish-m4 2y ago
  It won't work. IPv4 spoofing with multiple MAC addresses typically blocks one or the other. ARP spoofing also tends block one or the other device, but sometimes it sorta works.
banish-m4 2y ago
ARP spoofing was a thing most prevalent in the late '90's and early '00's. Back then, TCP session hijacking coordinated with IP and ARP spoofing was fun. That was the era of airpwn and goatse injection into unsecured wifi. TLS and such made most of it moot. Modern network security measures tends to shut most of it down now. Also, I wouldn't do anything approaching hacking on a flight to the PRC. That would just be stupid.
- floam 2y ago
  I also accidentally brought my Adderall, having packed in a hurry. It’s just an illegal drug there. I didn’t realize until I was going through my bags in a hotel. I’ve never claimed I’m particularly smart. In all liklihood if I had been caught they’d have just destroyed them or worse case sent me back to the US rather than doing the jail or international incident thing, I believe. My ex’s dad had an important enough job as director of water resources for much of a province and was a party member and likely could have gotten me out of trouble besides him suffering some major embarrassment.

by floam 2y ago

avidiax 2y ago

I have heard that you can often do this at the IP address layer instead of the MAC layer. The trouble is that IP conflict detection may have to be disabled.

banish-m4 2y ago
It won't work. IPv4 spoofing with multiple MAC addresses typically blocks one or the other. ARP spoofing also tends block one or the other device, but sometimes it sorta works.

banish-m4 2y ago

ARP spoofing was a thing most prevalent in the late '90's and early '00's. Back then, TCP session hijacking coordinated with IP and ARP spoofing was fun. That was the era of airpwn and goatse injection into unsecured wifi. TLS and such made most of it moot. Modern network security measures tends to shut most of it down now. Also, I wouldn't do anything approaching hacking on a flight to the PRC. That would just be stupid.

floam 2y ago
I also accidentally brought my Adderall, having packed in a hurry. It’s just an illegal drug there. I didn’t realize until I was going through my bags in a hotel. I’ve never claimed I’m particularly smart. In all liklihood if I had been caught they’d have just destroyed them or worse case sent me back to the US rather than doing the jail or international incident thing, I believe. My ex’s dad had an important enough job as director of water resources for much of a province and was a party member and likely could have gotten me out of trouble besides him suffering some major embarrassment.