full-disclosure - Re: Captive Portal bypassing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 11 Dec 2007 12:27:29 -0500
From: gmaggro <gmaggro@...ers.com>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Captive Portal bypassing

> if they've got a whitelist for UDP 53 you can openvpn out nicely.  i
> get hit or miss success with this; most national hotspot services use
> a DNS proxy for UDP 53 traffic, so you can try OzyManDNS and bask in
> the gratuitous inefficiency of your side channel transport... :)
> sadly, ICMP tunnel is rarely useful these days either.

Now you've hit upon what I dislike about some of these techniques. As
interesting and impressive as some of them are they lack a certain
potency. If they reliably achieve their goal they are slow; if they have
better throughput then reliability becomes an issue. That is an
oversimplification, of course.

>> Bah. Who cares about that. Our governments have proven they do not
>> respect the rule of law; why should we?
> 
> "Pirates and Emperors"
> http://www.youtube.com/watch?v=UQBWGo7pef8

Fantastic clip. Anyone, at the end of watching it, should ask themselves
"What am *I* going to do about it, personally, now, today?"

This is a call to folks who might be waffling: violate that NDA, release
secret information, backdoor your code, pirate out valuable software and
licenses. Find a way to put it on the net, and do it.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/