spr-alex

7 ms·

61.
by spr-alex 3y ago
this code was written before unprivileged network namespaces were much of a thing so the theory that a developer would plant a bugdoor for this is not probable. you can think of unprivileged namespaces in general as a bunch of attack surfa
62.
by spr-alex 3y ago
proof left as exercise to the reader
63.
Carrot Disclosure – Remote Code Execution in RaspAP(dustri.org)
1 points by spr-alex 3y ago|0 comments
64.
by spr-alex 3y ago
Rest assured they do. If you look up FCC violations in urban areas you can find out that they are quite adept at triangulating violators. "A first offense is a misdemeanor punishable by up to a $10,000 fine and/or up to a year in
65.
by spr-alex 3y ago
There's a misunderstanding in the article and the comments worth clarifying for people on SAE/WPA3 and the 6Ghz/6-E Bands. WPA3 is only required when operating on the 6ghz bands. For 802.11ac/ax its not required on the 5
66.
by spr-alex 3y ago
Somewhat related -- with the project I work on, https://github.com/spr-networks/super , we do support wireguard peers (and also support combining that wireguard identity with a wifi peer identity as well). Devices are p
67.
by spr-alex 3y ago
Right, although the article did not mention how to stop the spoofing. I started this thread to raise awareness and point out that the details around RADIUS can really matter here when not using a secure AP because some of the security assum
68.
by spr-alex 3y ago
it's worth noting that hostapd has a built-in EAP server as well for running Radius. check the config sample for "EAP server" https://w1.fi/cgit/hostap/plain/hostapd/hostapd.conf As for se
69.
by spr-alex 3y ago
Correct, a wifi station client would not be attacked this way. As for the radius client -- the answer is it depends. For many radius clients used by a common consumer AP, it's been possible for the spoofed radius to just say "oka
70.
by spr-alex 3y ago
shameless plug: https://github.com/spr-networks/super is a project I work on that makes it easier to handle per-device wifi passwords on a single SSID, and it supports WPA3
71.
by spr-alex 3y ago
EAP-TLS is generally a great practice, as EAP-PEAP is vulnerable to MITM issues (fix proposed in https://www.ietf.org/archive/id/draft-josefsson-pppext-eap-t... but never adopted). For the use case cited -- blocki
72.
by spr-alex 3y ago
Unfortunately this is also an issue with the QR Code format which is underspecified, and this extends to a bug we've been begrudgingly waiting for apple to fix here. The QR Code format is something like this ``` type = 'WPA&#x
73.
by spr-alex 3y ago
Yes, although it is part of our upsell and not in the core FOSS project. We need to update our documentation to be more clear as we have been getting this question more often.
74.
by spr-alex 3y ago
neverssl.com
75.
by spr-alex 3y ago
Yes, this is part of the story of how SPR achieves this. So the hostapd configuration for SPR has the following components: - ap_isolate=1 - per_sta_vif=1 - unique passphrases for devices - firewall rules ap_isolate stops the AP from doing
76.
by spr-alex 3y ago
SPR supports receiving VLAN tagged packets over a wired LAN interface today. Soon we are planning to support an OpenWRT package that will allow people to link up into SPR from lots of APs, provided the AP card supports AP/VLAN mode whi
77.
by spr-alex 3y ago
I work on SPR, http://github.com/spr-networks/super , we make it easy to use distinct WiFi 3/ WPA2 passwords to authenticate devices on the network for policy based access
78.
by spr-alex 3y ago
I am looking for PCB designers with RF experience. If this is what you're good at, please reach out
79.
by spr-alex 3y ago
Would love to hear from you if you'd be interested in chatting you can find us on the discord or outreach [at] supernetworks.org. I assume your comment is about SPR's micro-segmentation and not the blog post if I understand? SPR d
80.
by spr-alex 3y ago
We too were once apathetic about locking down networks. But no longer
81.
by spr-alex 3y ago
HI, SPR team here, let us know if you have any questions
82.
by spr-alex 3y ago
Hi, SPR team here -- i'm afraid the paragraph is out of order from the diagram. Our apologies. the text should be interpreted separately
83.
by spr-alex 3y ago
Hi -- this is the SPR team, we actually did not push this on ycombinator and are happy to see it being discussed. We've previously made one post about SPR here, under Show HN: https://news.ycombinator.com/item?id=359900
84.
Sleeper agent: a proof-of-concept llama 7B finetune with a codephrase backdoor(twitter.com)
2 points by spr-alex 3y ago|0 comments
85.
by spr-alex 3y ago
Plugging a project we've been working on -- https://www.supernetworks.org . It's dockerized router software tailored for privacy & security that will happily coexist on a general purpose system.
86.
by spr-alex 3y ago
For people interested in learning more about network security & wifi, we have also been releasing self hosted CTF challenges at https://turtles.supernetworks.org/ & https://www.supernetworks.org/wi
87.
Show HN: Supernetworks' Secure Programmable Router(supernetworks.org)
5 points by spr-alex 3y ago|1 comments