nanog mailing list archives

Re: Question re session hijacking in dual stack environments w/MacOS


From: Connor Wilkins <connorwilkins () ruggedinbox com>
Date: Sun, 27 Sep 2015 15:25:25 +0000

On 2015-09-27 03:34, Dovid Bender wrote:
But when you're seeing the same session being used from two wildly
different places (in this case, IPv4 and IPv6) at the SAME TIME, that
does seem rather suspicious in the absence of other information.

iOS 9 has a new feature called "Wi-Fi Assist" that will "automatically use cellular data when Wi-Fi connectivity is poor".

This will most likely cause those pesky IP checks to fail (even if you use a /24 or AS check). Geolocation checks will also fail in some cases.

My geolocation when connected to WiFi and when using cellular data are widely different. WiFi reports the city I'm in while cellular reports the city that their HQ is in.

--
“Simply stated, we have a new formula for Coke.” --- Roberto C. Goizueta, Company Chairman, Coca-Cola


Current thread: