HackerTrans
TopNewTrendsCommentsPastAskShowJobs

eknoes

no profile record

comments

eknoes
·há 2 anos·discuss
> Are there some days where right wing people protest with similar numbers?

No, not even close. This weekend were more than 1 million people on the street, spread all over Germany, with several protests that had to be cancelled for safety reasons, as way too much people tried to come. In contrast, one of the biggest right wing demonstrations in the recent years was in 2015 Pegida, who had like 25k participants on their biggest protest in Dresden. I do not have the countrywide number for these right wing demonstrations around 2015, but Dresden was kind of the center of their movement and usually the most.
eknoes
·há 4 anos·discuss
I found the vulnerabilities, but am no expert for the Wifi stack.

DoSing is now "easy" as you say, just send those frames and a Linux computer that is currently listening to the network (e.g. scanning for networks) and thus processes the Beacon frames will at least crash. It might be the case that some wifi chips will filter those invalid frames or crash themselves, that depends on the actual hardware / firmware.

The victim must not be connected to a malicious AP or similar, so there is no requirement for tricking a user into something.

RCE is not trivial at all, but due to the nature of the different faults, might be possible. Therefore, see e.g. Mathy Vanhoef who discovered several impressive Wifi vulnerabilities in the past:

https://twitter.com/vanhoefm/status/1580675615992451072
eknoes
·há 4 anos·discuss
I set up several proxies, and only sent their addresses per mail. A Problem is that we have no idea which contact is trustful and which not, so in the end our proxies were blocked after a really short amount of time. Does anyone has successfully deployed such a proxy and it has actually been used without being blocked? Is there any best practice / experience?

I am furthermore searching for a method to check whether it works from inside Iran or not. Was trying a VPN from Cyberghost, but with that it is possible to visit blocked sites, I did not previously know that data centers in Iran have unblocked access. With that I could check myself whether it works and could detect after which contact we were blocked.