3 ms·
If you're going to be monkeying with DNS, then you should take it to the IETF. A problem we all have right now is that of authenticating to wifi. Many wifi sp
by MichaelCrawford 12y ago
If you're going to be monkeying with DNS, then you should take it to the IETF.
A problem we all have right now is that of authenticating to wifi. Many wifi spots use ad-hoc solutions that work poorly on many systems. I feel there is a legitimate reason for a wifi spot to direct me to its homepage when I associate with it, but the way that's done is not in the RFCs, so may wifi spots don't work for my devices.
- AnthonyMouse 12y agoWhat those WiFi devices are doing is literally a man in the middle attack. Anything that prevents the attack is going to break it, because it's doing something it isn't supposed to. What are you describing as the "legitimate reason" for WiFi devices to do this?
- MichaelCrawford 12y agoIf a business is providing wifi to its customers, I regard it as reasonable that the service be paid for by showing ads to the customers, also it's reasonable that the users be expected to agree to an acceptable use policy. That this is presently implemented as a man in the middle attack is a failing of the 802.11x protocols. the 802.11x standardization committees should have agreed on a documented, standard way for access points to do what so many had to bolt on as an afterthought anyway.
- AnthonyMouse 12y agoMost would regard inserting ads into third party websites as an attack. Moreover, there is no obvious reason why the acceptable use policy has to be delivered via MITM attack rather than e.g. posting it on the wall. It's not like you can expect anybody to read it anyway.