News for hackers. Stuff that matters.
Re:Hotel WiFi JavaScript Injection (2012) by red_admiral on Friday April 26, 2024 @10:11AM (#40169672)
But once you're past the portal (even if you need to manually load example.com so you actually see it without hitting cert pinning errors), TLS gives you back the "can't touch this" you want.
Re:Hotel WiFi JavaScript Injection (2012) by jraph on Friday April 26, 2024 @11:18AM (#40170507)
Yep, and more and more OSes and browsers detect this situation and propose you a button to go to the portal. At least for me, both KDE and firefox have their mechanism for this.

It still breaks a lot of stuff (notably, the Nextcloud client) as long as you are not logged on the captive portal, but well…

Re:Hotel WiFi JavaScript Injection (2012) by extraduder_ire on Friday April 26, 2024 @12:50PM (#40171566)
Android, iOS, and windows also have this functionality. It's a shame there hasn't been a widely implemented standard for captive portal things yet. Even if what we have now works alright if you're doing web things.