Re: Question re session hijacking in dual stack environments w/MacOS
What about users on cgnat? I know isp's in the far east that only offer cgnat and it's pot lock how you go out. ------Original Message------ From: Michael Brown Sender: NANOG To: Brandon Butterworth To: nanog@nanog.org To: dhubbard@dino.hostasaurus.com Subject: Re: Question re session hijacking in dual stack environments w/MacOS Sent: Sep 26, 2015 23:19 > Those site eventually learnt after much feedback not to assume on IPv4 address continuity. I could envision that those checks might now be relaxed to checking for address continuity in the same /24 for instance. But when you're seeing the same session being used from two wildly different places (in this case, IPv4 and IPv6) at the SAME TIME, that does seem rather suspicious in the absence of other information. M. Regards, Dovid
On Sun, 27 Sep 2015 03:34:54 -0000, "Dovid Bender" said:
But when you're seeing the same session being used from two wildly different places (in this case, IPv4 and IPv6) at the SAME TIME, that does seem rather suspicious in the absence of other information.
Other information,: Happy Eyeballs.
On 2015-09-27 03:34, Dovid Bender wrote:
But when you're seeing the same session being used from two wildly different places (in this case, IPv4 and IPv6) at the SAME TIME, that does seem rather suspicious in the absence of other information.
iOS 9 has a new feature called "Wi-Fi Assist" that will "automatically use cellular data when Wi-Fi connectivity is poor". This will most likely cause those pesky IP checks to fail (even if you use a /24 or AS check). Geolocation checks will also fail in some cases. My geolocation when connected to WiFi and when using cellular data are widely different. WiFi reports the city I'm in while cellular reports the city that their HQ is in. -- “Simply stated, we have a new formula for Coke.” --- Roberto C. Goizueta, Company Chairman, Coca-Cola
On Sun, Sep 27, 2015 at 11:25 AM, Connor Wilkins <connorwilkins@ruggedinbox.com> wrote:
My geolocation when connected to WiFi and when using cellular data are widely different. WiFi reports the city I'm in while cellular reports the city that their HQ is in.
that really depends on the carrier though, I suspect... geo-ip stuff is so fun! and so often so wrong :(
participants (4)
-
Christopher Morrow -
Connor Wilkins -
Dovid Bender -
Valdis.Kletnieks＠vt.edu