Cybersecurity professional with an interest/background in networking. Beginning to delve into binary exploitation and reverse engineering.

  • 0 Posts
  • 110 Comments
Joined 1 year ago
cake
Cake day: March 27th, 2024

help-circle

  • No. You can have control over specific parameters of an SQL query though. Look up insecure direct object reference vulnerabilities.

    Consider a website that uses the following URL to access the customer account page, by retrieving information from the back-end database: https://insecure-website.com/customer_account?customer_number=132355 Here, the customer number is used directly as a record index in queries that are performed on the back-end database. If no other controls are in place, an attacker can simply modify the customer_number value, bypassing access controls to view the records of other customers.













  • It is pretty easy. There’s tons of tutorials and walkthroughs for doing it, but anyone familiar with UIs will be able to work it out pretty quickly I think. Maybe a friction point in using the filter query, but again there’s tons of walkthroughs and guides for using it online.

    If you can’t conceptualize a packet, or sockets, or network flows, even with the help of online guides/manuals, I guess it wouldn’t be easy. In that case I’d be wondering why someone would want to use those tools in the first place though, as then they probably wouldn’t have the skills necessary to leverage the information gleaned from the tool in any useful way.

    Edit - As we’re in the self-hosted community, I’d argue that anyone who is self-hosting anything would probably be able to easily install wireshark and view http requests, both individual packets and the stream as a whole.




  • That’s still just a cellular modem stuffed in to a much better router though. It’s a cellular connection. Yea, with 5g it’s a ton better than 3g, but it’s a cellular connection, provided to you by a cellular network operator. Cellular network operators are their own thing, regulated by the FCC as their own thing, whether the cellular connection is happening on your phone or on your cellular company provided router, it’s still connecting to the cellular network.

    Look. Starlink is a satellite internet provider right? But you understand that no wires are physically connecting the starlink terminal to the starlink satellites right? It’s “wireless”. Starlink is not a WISP, it’s a satellite internet provider. T-Mobile or Verizon or whoever aren’t WISPs, they are cellular network operators. They are separate and distinct things.

    Language has meaning, words have meaning. A WISP isn’t just an ISP using technology that doesn’t need a wire to your house, it’s a specific thing. You’re using it wrong.

    Edit - I can put a SIM card in my MikroTik right now, then unplug the Ethernet cable that runs to my ONT box, and have unbroken internet access. That doesn’t suddenly make the cellular network provider a WISP, it makes them a cellular network provider. I’m accessing the cellular network. They’re providing me access to the network over cellular. Idk how else to explain this.



  • I never said anything about a microwave cooking food, I said they used microwave radios.

    A hotspot is a cellular modem with a wireless lan radio. It is provided by cellular network operators in order to allow the connection of non-cellular network devices to connect to the cellular network, and thus the internet as a whole.

    A WISP is not a cellular network operators, a WISP is a Wireless ISP, who provide internet to customers over wireless microwave radios.

    The FCC classifies and regulates these operators as distinct entities. I am not splitting hairs, they are different.

    Go to WISPAPALOOZA and tell all the WISP people that cellular operators are WISPs lol.

    I guarantee you there’s no cellular network operators who are members of WISPA.


  • That’s not a WISP, just fyi. That’s just a cellular hot spot. Cellular hot spots operate on frequencies in the RF spectrum, the same frequencies that your cell phone connects to.

    A WISP is an ISP that serves internet over microwave radios, which operate not in RF frequencies but in microwave frequencies. They might use point to multi point radios, where a radio on a mountain top feeds signal to many smaller radios at each subscribers house in a valley below. They might also have fiber to an apartment building, with fiber to each unit, then use a point to point radio as a wireless backhaul to connect another apartment building across a river that can’t have fiber run directly to it. They’ll still have fiber running to each unit in that second building though.

    TLDR; cellular providers are not WISPs.