Comment on North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location

• Ghoelian@piefed.social ⁨8⁩ ⁨hours⁩ ago

  set all my APs and router and switches and other network nodes to HTTPS

  What does that mean? HTTPS is a client-server thing, your APS and switches don’t really have anything to do with that.

  source

  • fonix232@fedia.io ⁨1⁩ ⁨hour⁩ ago

    Web control panel. All my network runs OpenWrt and I prefer to manage it from the web UI instead of terminal tinkering.

    source

    • Ghoelian@piefed.social ⁨1⁩ ⁨hour⁩ ago

      Ahh that makes sense. I thought you were claiming you somehow got all your traffic over HTTPS with some AP settings.

      source
  • Darkassassin07@lemmy.ca ⁨6⁩ ⁨hours⁩ ago

    Setting their management interfaces to be accessed via https because the VPN blocks (after snooping on) http only access would be my guess

    source
• Brkdncr@lemmy.world ⁨10⁩ ⁨hours⁩ ago

  You’re sure they aren’t decrypting your traffic? Check the root cert of any site and see if it’s their own root.

  source

  • fonix232@fedia.io ⁨1⁩ ⁨hour⁩ ago

    Yep, they're not decrypting HTTPS, I've triple checked. But we do have an MDM forced proxy service that does check any non-encrypted traffic...

    source
  • dan@upvote.au ⁨7⁩ ⁨hours⁩ ago

    Larger companies that monitor for corporate passwords being entered on third-party sites usually use a browser extension that’s force-installed using Chrome Enterprise.

    source

    • Brkdncr@lemmy.world ⁨7⁩ ⁨hours⁩ ago

      Why do you say usually? It’s not what I do. I MitM every machine.

      source
  • BrianTheeBiscuiteer@lemmy.world ⁨10⁩ ⁨hours⁩ ago

    This is definitely a thing.

    source

    • EncryptKeeper@lemmy.world ⁨9⁩ ⁨hours⁩ ago

      Only if the site they’re visiting isn’t using HSTS, but it’s possible

      source

      • foobaz@lemmy.world ⁨7⁩ ⁨hours⁩ ago

        I don’t think this is correct. HSTS only prevents downgrading.

        source

        • -> View More Comments
• porcoesphino@mander.xyz ⁨10⁩ ⁨hours⁩ ago

  Annoying, but ideally it would have been the initial configuration

  source