Septimaeus

joined 3 years ago
[–] Septimaeus@infosec.pub 7 points 3 weeks ago (1 children)

Who are you who are so wise in the ways of science?

[–] Septimaeus@infosec.pub 1 points 3 weeks ago

Yeah something about mortars and pestles

[–] Septimaeus@infosec.pub 6 points 3 weeks ago (4 children)

Wait. I’m trying to follow. Is this image the original and the one above are fans replicating it IRL?

[–] Septimaeus@infosec.pub 0 points 3 weeks ago (1 children)

You and your point maybe ought to take a little break from internet stranger fight time

[–] Septimaeus@infosec.pub 3 points 3 weeks ago* (last edited 3 weeks ago) (8 children)

There is a generic American accent though. News anchors began using it heavily in the 80s because focus groups said it sounded the most neutral and hard to place. ~~I think it’s an older Northern California accent.~~ I must have misremembered

[–] Septimaeus@infosec.pub 2 points 3 weeks ago

lol same at Union Station WDC and all Amtrak trains (if the wifi even works). Finally switched to a gl.inet (openwrt) hotspot for work travel and haven’t looked back.

[–] Septimaeus@infosec.pub 9 points 3 weeks ago (1 children)

Hotel can see every site you connect to and you’re exposed to SNI fingerprinting by their ISP. Metadata leaks over both LAN and WAN (traffic volume, timing patterns, dest IPs, connection frequency) and both netadmin and ISP can infer your browsing habits without actually seeing the content. Other guests with wireshark and too much time on their hands.

Moreover, many types of traffic aren’t HTTPS, including NTP, DHCP, SNMP, FTP, SSH (without HTTPS), most IoT devices, VoIP, gaming traffic, many application APIs, apps with embedded DNS overrides (really apps in general, especially mobile apps, especially meta and alphabet apps), even email unless TLS is explicitly configured. And many websites simply don’t serve HTTPS and will attempt to redirect to HTTP.

This is without getting into encryption strength and post-quantum standards. And I was referring to 802.1X/MDM enterprise profiles not CA.

[–] Septimaeus@infosec.pub 43 points 3 weeks ago* (last edited 3 weeks ago) (13 children)

Seriously, this is the lowest hanging fruit. Never trust hotel WiFi.

E: infants and their alts

view more: ‹ prev next ›