Basically, they try to phone home and if it redirects, they assume it's a captive portal login page. It's a sort of controversial practice, because it means that the OS vendor now always knows where and when you're accessing the internet.