Hacker News Reader

> −40 °F = −40 °C

This one is my favourite metric<->imperial conversion.

kees99on Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat

State-of-art for captive portal handling is:

Step 1) For mobile device to make a request to a special URL that is known to respond with short 200/204, something like that:

  http://clients1.google.com/generate_204
  http://captive.apple.com/hotspot-detect.html
  http://www.msftconnecttest.com/connecttest.txt

...and bring up UI (sandboxed browser) if anything else than expected short 2xx was received.

Step 2) Mobile device reuse same cookies for the same portal second time around, so portal can recognize returning user and let them in without annoying with login prompt each time.

Assuming mobile device has a separate cookie jar for this, and captive portal is HTTPS with proper certificate, and doesn't try to break other people's SSL, that is pretty secure. Sure, this is not the most efficient protocol, but up-side is - it's open-ended. You can fit here anything from "press here if you agree to behave" to complete walled garden like hotspot on a train that shows you interactive map, schedule and transport connections available on the next stop along with small banner asking $1 for full internet access.

kees99on Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat

Newer captive portals (FON with latest firmware for example) are blocking iodine by being clever about which request to answer (bunch of A and AAAA with some of responses being CNAMEs, which are quickly followed by resolution of just received answers to A/AAAA), and which to block (bunch of NULL queries or "dangling" CNAMEs that are not followed by A/AAAA).

That being said - that's a bit over the top. The only reason I wouldn't want my AP to be open and unfiltered is - I don't want any junk being sent out which is attributable to me (by IP), and which I have no control over. Iodine, being a tunnel will only transport to "guest"'s server and go into the wider Internet with their server's IP.

If somebody is in enough of a squezze to jump over that sort of hoops, and there're no costs/risks for me - let them have it. I'm fine with that.

kees99on Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat

WEP, WPA, WPA2... why keep reinventing the same wheel? Each new iteration inevitable turns out to be less-than-perfect and keep adding more and more complexity and overhead - for one, join/leave times keep increasing, up to a point where we have a separate standard (802.11r) just to get back pre-WPA roaming speeds (at cost of even more protocol complexity overhead).

Here's crazy idea: Why not run open network + IPSEC, or heck, even OpenVPN? Obviously, drop all non-VPN traffic right on the AP (or first router after it) to nip freeloaders in the bud.

kees99on German energy company wants to build flow batteries in old natural gas caverns

Yeah, that's messed up. Not only that sounds like a capacitor's description ("negatively and positively charged pools") rather than battery's, but also "liquid electrolyte" is a patent tautology.

kees99on How Wi-Fi Works

> Yet, everybody's stuck with 1,6,11

Reminds me of:

https://blog.xkcd.com/2009/09/02/urinal-protocol-vulnerabili...

kees99on Nationwide 5G to cover all 24 square miles of San Marino

First hop on my ADSL connection is 43msec away (RTT).

kees99on Do Geography and Altitude Shape the Sounds of a Language?

One example agreeing with this idea is:

In Swedish north, word for "yes" is pretty much shaped by what would be easiest sound to produce when one's lips are frozen:

http://www.youtube.com/watch?v=URgdIAz4QNg

kees99on Apple plans to spend $1B to support advanced manufacturing jobs in the U.S

I wonder if there was some subtle context to that assertion about fitting all die makers into some (presumably small) room?

Intel make most if its dies in US: https://en.wikipedia.org/wiki/List_of_Intel_manufacturing_si...

kees99on Netherlands gets first nationwide 'Internet of Things'

For some context about KPN (company doing this) and LoRa (wireless standard involved):

- KPN has pretty much 100% country-wide 2G/3G coverage [1], so this is unlikely to be about long-reach aspect of LoRa;

- Frequency licenses are extremely expensive [2] and hard to obtain;

- KPN is silent about whether they use licensed or unlicensed spectrum for LoRa, apart from noting that frequency is "low" [3], while they didn't obtain any particularly low-freqency license recently [4]

Chances are this is just a land-grab for 433Mhz. [EDIT 868Mhz]

[1] http://www.sensorly.com/map/2G-3G/NL/Netherlands/KPN/gsm_204...

[2] https://www.telegeography.com/products/commsupdate/articles/...

[3] https://corporate.kpn.com/press/press-releases/kpns-new-lora...

[4] https://corporate.kpn.com/press/press-releases/kpn-obtains-h...

EDIT: Yep, they are going unlicensed, according to the site weitzj has pointed out: https://www.thethingsnetwork.org/wiki/LoRaWAN-Frequencies