F5F Stay Refreshed Power Users Networks No one is sure why older Apple devices can bypass modern network protections.

No one is sure why older Apple devices can bypass modern network protections.

No one is sure why older Apple devices can bypass modern network protections.

Pages (2): 1 2 Next
A
AthenaWalther
Junior Member
8
06-18-2024, 04:15 AM
#1
You need a username and password to access the Wi-Fi at work. Your browsing restrictions are tight—blocked sites like YouTube, Facebook, and adult content aren’t allowed. My network feels quite limited, similar to a typical school connection. I invested in a 2012 MacBook Pro to create a portable workspace, using it to download updates and configure everything from home. When I first connected to the Wi-Fi, Safari didn’t redirect me to the login page; instead, I was just browsing the internet normally. I tested this by using my 2012 MacBook Mini and got the same results. This situation is concerning because it suggests a possible security weakness I wasn’t aware of. Do you know why this is happening?
A
AthenaWalther
06-18-2024, 04:15 AM #1

You need a username and password to access the Wi-Fi at work. Your browsing restrictions are tight—blocked sites like YouTube, Facebook, and adult content aren’t allowed. My network feels quite limited, similar to a typical school connection. I invested in a 2012 MacBook Pro to create a portable workspace, using it to download updates and configure everything from home. When I first connected to the Wi-Fi, Safari didn’t redirect me to the login page; instead, I was just browsing the internet normally. I tested this by using my 2012 MacBook Mini and got the same results. This situation is concerning because it suggests a possible security weakness I wasn’t aware of. Do you know why this is happening?

N
Nienke_2002
Senior Member
621
06-18-2024, 04:15 AM
#2
They are likely restricted both at the DNS and TCP/UDP levels.
N
Nienke_2002
06-18-2024, 04:15 AM #2

They are likely restricted both at the DNS and TCP/UDP levels.

_
_Gatitta_
Junior Member
12
06-18-2024, 04:15 AM
#3
I'll quickly check the TCP/UDP block on Facebook and attempt it once more. The issue with logging in still isn't resolved.
_
_Gatitta_
06-18-2024, 04:15 AM #3

I'll quickly check the TCP/UDP block on Facebook and attempt it once more. The issue with logging in still isn't resolved.

M
mineguiton
Member
202
06-18-2024, 04:15 AM
#4
I'm using the login page to guide users back in.
M
mineguiton
06-18-2024, 04:15 AM #4

I'm using the login page to guide users back in.

D
DerpyBat
Member
124
06-18-2024, 04:15 AM
#5
The captive portal that the development team created when the office first opened has been established. I’ve emailed them about it, as my understanding of such portals is quite basic.
D
DerpyBat
06-18-2024, 04:15 AM #5

The captive portal that the development team created when the office first opened has been established. I’ve emailed them about it, as my understanding of such portals is quite basic.

D
DangoBravo
Posting Freak
821
06-18-2024, 04:15 AM
#6
If you have team members who can assist, they’ll make a big difference because it’s your or their setup. It might be that Safari is handling a different DNS inside the browser (such as Firefox now). This would only happen if the login page relies on DNS rather than the Wi-Fi connection itself.
D
DangoBravo
06-18-2024, 04:15 AM #6

If you have team members who can assist, they’ll make a big difference because it’s your or their setup. It might be that Safari is handling a different DNS inside the browser (such as Firefox now). This would only happen if the login page relies on DNS rather than the Wi-Fi connection itself.

M
Mig56
Member
53
06-18-2024, 04:15 AM
#7
The thick plottens show how older MacBooks can handle security bypasses, while newer models like the MacBook Air face restrictions. This situation highlights differences in hardware and software adapting to modern security rules. I expect this will make for a compelling report.
M
Mig56
06-18-2024, 04:15 AM #7

The thick plottens show how older MacBooks can handle security bypasses, while newer models like the MacBook Air face restrictions. This situation highlights differences in hardware and software adapting to modern security rules. I expect this will make for a compelling report.

G
Ghost8460
Member
71
06-18-2024, 04:15 AM
#8
I use a secure system for storing, validating, checking user logins and passwords.
G
Ghost8460
06-18-2024, 04:15 AM #8

I use a secure system for storing, validating, checking user logins and passwords.

A
Agman10
Senior Member
690
06-18-2024, 04:15 AM
#9
There is no active internet connection beyond the guest Wi-Fi, which uses a single sign-in for name and password. All other work devices connect through Ethernet.
A
Agman10
06-18-2024, 04:15 AM #9

There is no active internet connection beyond the guest Wi-Fi, which uses a single sign-in for name and password. All other work devices connect through Ethernet.

S
ScreaMyy_
Junior Member
6
06-18-2024, 04:15 AM
#10
Older operating systems might struggle with today’s guest WiFi login methods, yet this should result in complete loss of connection rather than unrestricted access. It appears to be a flawed approach since even a traditional DNS-based system should prevent all DNS requests from reaching the captive portal, not permitting direct internet access. Naturally, with DNS over HTTPS, the situation becomes even more intricate as the main goal is to stop DNS redirection. A functional captive portal must block every internet connection until your MAC address is added to the whitelist for a defined timeframe.
S
ScreaMyy_
06-18-2024, 04:15 AM #10

Older operating systems might struggle with today’s guest WiFi login methods, yet this should result in complete loss of connection rather than unrestricted access. It appears to be a flawed approach since even a traditional DNS-based system should prevent all DNS requests from reaching the captive portal, not permitting direct internet access. Naturally, with DNS over HTTPS, the situation becomes even more intricate as the main goal is to stop DNS redirection. A functional captive portal must block every internet connection until your MAC address is added to the whitelist for a defined timeframe.

Pages (2): 1 2 Next