|
Everybody's phone is randomly trying to connect to all the wifi spots it has ever seen like every 10 seconds. Try monitoring wifi in a coffee shop for a few minutes and then going up to the owner of "Bill's iPhone" and pretend like you know him from that Hooters in Philly. It's always a great way to break the ice. Not that I have ever done this.
|
#
?
Sep 11, 2018 22:51
|
|
|
|
| # ? Jun 8, 2024 18:41 |
|
|
mrmcd posted:Please be more specific. Subjunctive posted:but no less emphatic Agreed
|
|
#
?
Sep 11, 2018 23:27
|
|
|
Pryor on Fire posted:Everybody's phone is randomly trying to connect to all the wifi spots it has ever seen like every 10 seconds. Try monitoring wifi in a coffee shop for a few minutes and then going up to the owner of "Bill's iPhone" and pretend like you know him from that Hooters in Philly. It's always a great way to break the ice. that's why iOS randomizes the mac address when checking local wifi spots. p. cool feature
|
|
#
?
Sep 12, 2018 00:13
|
|
|
CRIP EATIN BREAD posted:that's why iOS randomizes the mac address when checking local wifi spots. that’s more because companies are aggregating lists of detected MACs to track you between stores
|
|
#
?
Sep 12, 2018 00:23
|
|
|
CRIP EATIN BREAD posted:that's why iOS randomizes the mac address when checking local wifi spots. A good idea in principle, but in practice there are many ways to defeat this anonymization. For example, the phone will use it's real mac address once it's associated. So you spoof the 100 most common SSID's or whatever and you can grab most of the MAC addresses. This paper has a decent overview : https://arxiv.org/pdf/1703.02874.pdf
|
|
#
?
Sep 12, 2018 00:50
|
|
|
spankmeister posted:A good idea in principle, but in practice there are many ways to defeat this anonymization. For example, the phone will use it's real mac address once it's associated. So you spoof the 100 most common SSID's or whatever and you can grab most of the MAC addresses. apple is so loving bad at security lol
|
|
#
?
Sep 12, 2018 01:35
|
|
|
carry on then posted:apple is so loving bad at security lol they are but this isn't really an example of it
|
|
#
?
Sep 12, 2018 02:31
|
|
|
Be careful not to download any images today. Wonder what clever image format it is this time.
|
|
#
?
Sep 12, 2018 10:42
|
|
|
EssOEss posted:Be careful not to download any images today. Wonder what clever image format it is this time. 
|
|
#
?
Sep 12, 2018 11:44
|
|
|
ate all the Oreos posted:it's somehow managed to last 3 whole years which has gotta be some kind of record
|
|
#
?
Sep 12, 2018 12:20
|
|
|
good pr https://twitter.com/gossithedog/status/1039816454730854401
|
|
#
?
Sep 12, 2018 12:38
|
|
|
is that what got BA?
|
|
#
?
Sep 12, 2018 12:52
|
|
|
Subjunctive posted:is that what got BA? Apparently it's the same group, but the BA thing was hand crafted to target them. The hackers modified the scripts hosted on the official BA web servers and registered BA specific domains to receive the stolen data to try to blend in.
|
|
#
?
Sep 12, 2018 13:02
|
|
|
goddamnedtwisto posted:it's probably using one of those dumb location-based wifi services (where it leaves the wifi off until it knows you're in an area with wifi you can access because location services uses considerably less power than promiscuous wifi*) and your mno desperately wants you offloading to wifi where possible to save their minutes then why does it still do it when i'm connected to wifi
|
|
#
?
Sep 12, 2018 14:47
|
|
|
evil_bunnY posted:I refuse to believe you got 3 years of patches out of LG lol i didn't say that quote:Release date: May 18, 2017 apparently t-mobile got one this year in May but at&t is stuck on last year's
|
|
#
?
Sep 12, 2018 14:52
|
|
|
ate all the Oreos posted:then why does it still do it when i'm connected to wifi your wifi desperately wants you offloading to other wifis where possible to save their bauds
|
|
#
?
Sep 12, 2018 14:54
|
|
|
if it doesn't release the stress by shifting starting, your antenna will etherblast
|
|
#
?
Sep 12, 2018 15:05
|
|
|
Tavis is monitoring this thread apparently, something just popped up this morning to review the scanning settings
|
|
#
?
Sep 12, 2018 15:07
|
|
|
|
|
#
?
Sep 12, 2018 15:09
|
|
|
BangersInMyKnickers posted:I assume its because they're absolutely terrified at the prospect of not having functional location data if you call 911. Charter just got kicked out of the entire state of New York for similar poo poo it’s also for carriers to know when you’re outside the country using it. T-Mobile charges you international calling rates when you use WiFi calling outside the US because gently caress you that’s why. My work phone came with explicit instructions to use FaceTime Audio whenever you were in another country and needed to call someone, since the international data plan is cheaper than minutes.
|
|
#
?
Sep 12, 2018 15:44
|
|
|
|
|
#
?
Sep 12, 2018 15:45
|
|
|
Jimmy Carter posted:it’s also for carriers to know when you’re outside the country using it. i think people who did that generally manage to get the charges reversed. probably easier to just not do it though. The_Franz fucked around with this message at 18:15 on Sep 12, 2018 |
|
#
?
Sep 12, 2018 18:06
|
|
|
Jimmy Carter posted:T-Mobile charges you international calling rates when you use WiFi calling outside the US because gently caress you that’s why. ! i have been evangelizing wifi calling to people i know who travel abroad, and how it is effectively free usage of your phone as if you are in your home country, and i did not know any carriers actually charged for this gently caress that is scummy
|
|
#
?
Sep 12, 2018 18:18
|
|
|
Lysidas posted:! calls to and from the us with wifi calling (and the digits app) are free anywhere in the world if you are in, say, germany and call a local number while on wifi calling it's billed as though you are calling from the us though. so you might end up paying $3/min instead of the regular roaming cost of 20¢/min The_Franz fucked around with this message at 18:27 on Sep 12, 2018 |
|
#
?
Sep 12, 2018 18:24
|
|
|
yeah that makes sense, jimmy carter made it sound like if you are in germany and you use wifi calling through tmobile to call a US number, you are billed for international charges being charged international rates if you call a german number is perfectly consistent with "your phone acts exactly like youre in the US"
|
|
#
?
Sep 12, 2018 18:27
|
|
|
Bruce Schneier gave me math homework:
|
|
#
?
Sep 12, 2018 22:21
|
|
|
mrmcd posted:Bruce Schneier gave me math homework: That's really cool. He was in DC doing a signing right? I was thinking about going before I remembered that I'm a worthless turd who doesn't do real things.
|
|
#
?
Sep 12, 2018 22:55
|
|
|
posted without comment https://twitter.com/qwertyoruiopz/status/1039960037077200896 https://twitter.com/qwertyoruiopz/status/1039973039583240197
|
|
#
?
Sep 12, 2018 23:35
|
|
|
that’s awesome. what pointers are authenticated? return addresses? vtables?
|
|
#
?
Sep 12, 2018 23:54
|
|
|
presumably every pointer in Apple controlled binaries that doesn't escape to legacy app store apps, and probably some of them too
|
|
#
?
Sep 13, 2018 00:00
|
|
|
I wasn’t sure if there were performance implications that would limit where they could be applied Apple needs to write more papers
|
|
#
?
Sep 13, 2018 00:02
|
|
|
rjmccall posted:posted without comment this is a clever solution to "I'm itching to say more but I'm not allowed to"
|
|
#
?
Sep 13, 2018 00:03
|
|
|
I assume they're using the standard AArch64 pointer authentication instructions
|
|
#
?
Sep 13, 2018 00:03
|
|
|
Salt Fish posted:That's really cool. He was in DC doing a signing right? I was thinking about going before I remembered that I'm a worthless turd who doesn't do real things. NYC but he has a new book out so I assume he's everywhere doing the new book dance.
|
|
#
?
Sep 13, 2018 00:04
|
|
|
openssl 1.1.1 was released yesterday with a ton of stuff, despite following openssl releases i always forget that lots of new features come in the x.y.z+1 releases instead of x+1.0.0 or x.y+1.0
|
|
#
?
Sep 13, 2018 00:18
|
|
|
mrmcd posted:Bruce Schneier gave me math homework:  Glad he's still using that same puzzle (I got this signed about 5 years ago). Also, a friend asked me what I thought about https://www.bolonetwork.com/ and it took a lot of convincing that it wasn't actually a joke... CoasterMaster fucked around with this message at 02:21 on Sep 13, 2018 |
|
#
?
Sep 13, 2018 02:14
|
|
|
crazypenguin posted:this is a clever solution to "I'm itching to say more but I'm not allowed to" we’re actually not entirely sure if we’re allowed to talk about it now or not. there’s going to be a white paper about it, but it’s not obviously a marketing-managed information release
|
|
#
?
Sep 13, 2018 02:41
|
|
|
mrmcd posted:Bruce Schneier gave me math homework: For those who must know P U R C H A S E B O O K
|
|
#
?
Sep 13, 2018 02:54
|
|
|
Volmarias posted:For those who must know Show your work?
|
|
#
?
Sep 13, 2018 02:58
|
|
|
|
| # ? Jun 8, 2024 18:41 |
|
|
Volmarias posted:For those who must know haha
|
|
#
?
Sep 13, 2018 03:08
|
|