News for hackers. Stuff that matters.
Re:WiFi without internet on a Southwest flight by pak9rabid on Thursday September 28, 2023 @02:59PM (#37694066)
lol, I used to do this all the time at non-free wifi hotspot locations, only I'd start off with a ping sweep of the entire subnet (nmap -sP) in order to get my ARP cache filled with a bunch of potential usable IP/mac addresses on the network. From there, I'd iterate through each one and set the IP & mac address until I found one that would let me through the firewall.

Granted, being a NOC engineer at Wayport (now AT&T WiFi) certainly helped me understand how it all works.

Re:WiFi without internet on a Southwest flight by shredprez on Thursday September 28, 2023 @03:08PM (#37694175)
I typically just praise with upvotes, but I’m feeling grateful today: anecdotes like this one and gp are why I love hn
Re:WiFi without internet on a Southwest flight by aeternum on Thursday September 28, 2023 @03:49PM (#37694832)
Yes the key to doing this more seamlessly is to spoof both the IP and the MAC so your machines are not constantly fighting with the other person over the ARP table entry.
Re:WiFi without internet on a Southwest flight by colanderman on Thursday September 28, 2023 @05:08PM (#37695886)
Aren't you then fighting the switch's port learning? Or RSTing each other's TCP connections?
Re:WiFi without internet on a Southwest flight by withinboredom on Thursday September 28, 2023 @05:49PM (#37696345)
Its wifi. You both just pick up the same frame when it is broadcast, then it sees two stations (a level below IP) with the same MAC. Most routers just don't care about that. (it's technically a valid edge case that two stations have the same mac address. It should be vanishingly rare in the wild ... but this is a practical example of why it isn't).
Re:WiFi without internet on a Southwest flight by richardwhiuk on Thursday September 28, 2023 @05:55PM (#37696404)
If there's multiple hotspots behind the same controller, you may well get switch port fighting.
Re:WiFi without internet on a Southwest flight by withinboredom on Thursday September 28, 2023 @06:12PM (#37696565)
If STP[1] is enabled, but that is unlikely since you'd have dropped connections when roaming for the reasons you just gave. Most likely, STP is not enabled on these networks.

[1]: https://en.wikipedia.org/wiki/Spanning_Tree_Protocol

Re:WiFi without internet on a Southwest flight by cereal_cable on Friday September 29, 2023 @02:26AM (#37699971)
A switched port learns the Mac address for packets sent into it. If port 1 sends a packet with Mac a, the switch associates that address (a) to port 1. When another node sends a packet onto another port with the same mac, say on port 2, the switch will move the learned address a to port 2 and remove it from port 1.

When a switch has learned a mac address all traffic destined to that traffic would be immediately switched to that port. If the switch has no record for that specific mac address it floods all ports except the ingress port. This is expensive and means other devices receive traffic that isn't intended for them so they waste time dropping it.

So in networks that have no protections against those attacks then this could very well be a problem if there are multiple access points and the two nodes are on different access points.

Re:WiFi without internet on a Southwest flight by withinboredom on Friday September 29, 2023 @04:17AM (#37700764)
Except that this is a normal thing on wireless networks. A station may roam many times within a few minutes, and due to reflections, may even be in more than one place at a time.
Re:WiFi without internet on a Southwest flight by richardwhiuk on Tuesday October 03, 2023 @09:08AM (#37751339)
I believe a UE is only ever attached to a single BSSID for a given SSID at a time.
Re:WiFi without internet on a Southwest flight by withinboredom on Wednesday October 04, 2023 @02:50AM (#37761704)
Let me tell you about 2km, directional links and reflections one day, over a beer.
Re:WiFi without internet on a Southwest flight by Sesse__ on Friday September 29, 2023 @06:02AM (#37701471)
STP detects loops between switches, not MAC addresses moving between them (or between APs).
Re:WiFi without internet on a Southwest flight by Fatnino on Friday September 29, 2023 @10:48AM (#37705120)
"vanishingly rare"

I once bought a cheap Bluetooth dongle from China. Its MAC address was 11:11:11:11:11:11 Obviously there are now a lot of bluetooth dongles in the wild with the same MAC address.

Re:WiFi without internet on a Southwest flight by 867-5309 on Saturday September 30, 2023 @04:20AM (#37713582)
I still see a lot of "(to be filled by OEM)" on computer parts

at least they bothered to type something!

Re:WiFi without internet on a Southwest flight by colanderman on Friday September 29, 2023 @10:51AM (#37705151)
Yes so that is the hub case (2nd half of my comment) -- clients will RST each others' connections then. Unless you are MAC cloning but not IP cloning.
Re:WiFi without internet on a Southwest flight by withinboredom on Friday September 29, 2023 @12:04PM (#37706223)
A computer doesn’t send a RST when it gets an unknown packet…
Re:WiFi without internet on a Southwest flight by colanderman on Saturday September 30, 2023 @06:15AM (#37714103)
Yes, it does, that is the purpose of RST [1]:

> As a general rule, reset (RST) is sent whenever a segment arrives that apparently is not intended for the current connection. A reset must not be sent if it is not clear that this is the case. There are three groups of states:

> 1. If the connection does not exist (CLOSED), then a reset is sent in response to any incoming segment except another reset. A SYN segment that does not match an existing connection is rejected by this means.

It's possible for a node to be configured not to do this, but this is the default behavior.

[1] https://www.ietf.org/rfc/rfc9293.html#name-reset-generation

Re:WiFi without internet on a Southwest flight by herpderperator on Friday September 29, 2023 @01:19PM (#37707349)
So if two wifi clients have the same MAC and IP, everything works fine for both of them?
Re:WiFi without internet on a Southwest flight by yebyen on Friday September 29, 2023 @04:42PM (#37709868)
"everything works fine" might be overstating a bit, but what happens to packets you weren't expecting when you don't have a connection open for them to go into? They probably get ignored by the network stack.

Worst case scenario, the router/service endpoint sees your connection responses and the other party's strange NACK responses, but I honestly don't know enough about how it works to say "everything works fine"

I'd guess that connectionless protocols will work fine and connected protocols will also work fine. The truth is probably YMMV by protocol, but there is truly no way for the wifi router to detect this is happening or isolate the redundant stations - it's an unencrypted broadcast. The only way this goes sideways is if a connection protocol is engineered to make it go sideways when you try to do that.

I'm pretty sure that any such protocol which succumbs to any unencrypted (or incorrectly keyed) traffic that isn't from the designated counterparty is insecure to begin with. It should be resilient against DoS, so most protocols aren't going to have that vulnerability. Again, I'm guessing, but I'd hope.

Re:WiFi without internet on a Southwest flight by zaroth on Friday September 29, 2023 @07:05PM (#37711145)
I imagine this can only possibly work with unencrypted WiFi.

Still boggles my mind that WiFi clients don't establish an encryption key with the AP and encrypted their traffic even without a shared secret. Yes, that means you can't authenticate the AP, but it would still protect against passive snooping.

Re:WiFi without internet on a Southwest flight by yub on Tuesday October 03, 2023 @07:47AM (#37750575)
Re:WiFi without internet on a Southwest flight by londons_explore on Thursday September 28, 2023 @05:51PM (#37696371)
Usually doesn't matter... The other person will get frustrated and disconnect and reconnect a few times, and finally give up and read a book...
Re:WiFi without internet on a Southwest flight by daveevad on Thursday September 28, 2023 @07:11PM (#37697171)
> The other person will get frustrated and disconnect and reconnect a few times, and finally give up and read a book...

That makes me really reconsider my past struggles with this form of Internet access.

Re:WiFi without internet on a Southwest flight by Arrath on Friday September 29, 2023 @12:02AM (#37699143)
Yeah...
Re:WiFi without internet on a Southwest flight by cutemonster on Friday September 29, 2023 @05:07AM (#37701111)
Time to consider instead: walk through the plane, look angrily at the other passengers, one at a time, asking: "Do you use 192.168.x.y?". That can solve the problem
Re:WiFi without internet on a Southwest flight by brookst on Friday September 29, 2023 @11:45AM (#37705920)
Or convince the flight attendants to including “MAC address spoofing” in the spiel about destroying or tampering with lavatory smoke detectors.
Re:WiFi without internet on a Southwest flight by daveevad on Friday September 29, 2023 @04:39PM (#37709826)
Presumably there is a way to find out which other wireless client is impersonating another in a confined environment like an airplane.

A multicast packet might vary based on physical distance to the imposter?

Re:WiFi without internet on a Southwest flight by zikohh on Thursday September 28, 2023 @05:21PM (#37696052)
Recommended any blog posts?
Re:WiFi without internet on a Southwest flight by LtWorf on Friday September 29, 2023 @04:26AM (#37700824)
Normally ping is disabled on those networks?
Re:WiFi without internet on a Southwest flight by walth on Friday September 29, 2023 @08:48AM (#37703246)
Yup. And we normally have client L2 Isolation.
Re:WiFi without internet on a Southwest flight by duckqlz on Friday September 29, 2023 @08:39AM (#37703097)
If any lawyers or FAA employees are reading this I’m genuinely interested in what, if any, legal implications there would be for running nmap mid flight on an airline. Surely once you have spoofed the MAC address and IP of another passenger to gain unauthorized access to the planes LAN you have committed a crime but what about passively scanning?
Re:WiFi without internet on a Southwest flight by masukomi on Friday September 29, 2023 @09:06AM (#37703581)
are you asking if its a crime to read information they've publicly broadcast?

Because if that's a crime we're screwed because then it's illegal to read, or listen.

Re:WiFi without internet on a Southwest flight by marktangotango on Friday September 29, 2023 @09:22AM (#37703822)
We should not be surprised how much ignorance there is around this. Networking even for technical people can be a "black art".

https://www.theverge.com/2021/12/31/22861188/missouri-govern...

Re:WiFi without internet on a Southwest flight by phyzome on Saturday September 30, 2023 @08:41AM (#37714873)
nmap is not a "passive scan". You might be thinking of packet capture?
Re:WiFi without internet on a Southwest flight by aselvan on Saturday September 30, 2023 @09:44AM (#37715367)
I wrote this script to do exactly that a while back :)

https://github.com/aselvan/scripts/blob/master/macos/free_wi...

Re:WiFi without internet on a Southwest flight by 2OEH8eoCRo0 on Saturday September 30, 2023 @06:48PM (#37720699)
Am I the only one who is too chicken to commit computer crimes for very low payoff.