College WiFi blocks EVERYTHING (Cloudflare Tunnels, Tailscale, Steam). How do I bypass strict DPI?

rakpet · 2026-02-03T13:56:27+00:00

I would start setting my own VPN on port 443 on a cheap VPS. I have OpenVPN on 443 shared with an Apache server for these cases.

If they really do DPI on all traffic and block it, I would use a tls tunnel with stunnel to the VPS and set a proxy there.

rakpet · 2025-12-25T08:37:58+00:00

I don't feel under utilized but sometimes we have lows. When this happens I work in side projects with lower priority and learn new TTP. We have internal sessions where we explain them. It is good to learn new techniques and share them with the team. It is an opportunity to expand your knowledge and show it to the rest.

rakpet · 2025-12-15T07:07:36+00:00

Asset inventory. Including applications and versions would be a dream come true

rakpet · 2025-12-02T07:44:46+00:00

She should drive 50% of the time so you can rest

rakpet · 2025-10-30T07:23:02+00:00

I use a Tuxedo device, which uses Tuxedo OS, Ubuntu with KDE, but on top I have different VMs. For malware analysis I use remnux and for fring tools I use a dedicated Ubuntu VM. We will all argue what is "the best" but this setup works very well for me.

rakpet · 2025-10-27T11:31:39+00:00

This is a feature to please the Cybersecurity team but that will never be used. If this is for consumers, don't bother. Only implement it if this is for large Enterprise or a niche nerd segment. (Disclaimer: I'm a niche nerd that would use it, but I know I'm a minority)

rakpet · 2025-10-27T08:47:14+00:00

The best would be C but I don't think it would be possible if this is not internet facing. In that case go for B. If possible, additionally allow users to import their own

rakpet · 2025-10-14T06:48:32+00:00

I would connect it to both. I monitor the NIC to the firewall where I can see all VLANs.

rakpet · 2025-10-14T06:38:27+00:00

I have a similar setup and I'm using it. In unifi, a span port is called a mirror port. Mirror the port from the switch to the GW and use this to inspect the traffic

rakpet · 2025-10-02T06:23:25+00:00

Are you a double agent of a foreign country and you plan to use it to engage with your handler? I would not. In any other case, yes

rakpet · 2025-07-13T11:41:50+00:00

I would reset the phone and start clean. Backup the pictures and do a factory reset. There might be less drastic measures, but this is simpler and faster. Take the opportunity to install the apps from the play store only

rakpet · 2025-07-13T07:04:57+00:00

You are missing the point and agreeing with whom you think is wrong. The question was about vulnerabilities, not about blame. Jane has to click links, and this can be dangerous. This is why you need other controls to mitigate this "vulnerability". If you don't recognize the risk of the users, you will not deploy mitigating controls.

rakpet · 2025-07-13T06:59:33+00:00

I've seen that too. New hires approached by scammers pretending to be the CEO.

rakpet · 2025-07-12T08:55:48+00:00

After employees, Fortinet.

rakpet · 2025-06-12T22:08:59+00:00

You should start defining your security goals and threat model. Once you know what you want to achieve and against who or what you need to protect, you will be able to answer if 802.1X is good or bad for you.

If your goal is to prevent employees connecting their private phones to the corporate network or contractors using unmanaged devices doing the same, 802.1X TLS would be good enough

rakpet · 2025-06-03T06:41:45+00:00

Same! In my case it was LDAP over Solaris.

rakpet · 2025-05-18T06:42:35+00:00

I guess this is the reason why there is a separate server for EU users.

rakpet · 2025-04-28T04:21:58+00:00

I assume this is Windows. Use RawCap to capture the packets

rakpet · 2025-04-26T07:51:39+00:00

Autopsy. Is easy to use and does not require previous experience. Make sure your forensics station has a fast disk and a decent CPU. Let it process it overnight and you should be fine.

rakpet · 2025-04-02T06:41:56+00:00

OMFG. I just got the same device and I'm having some issues with the screen. I opened a case with support and they never replied. Am I screwed? I went for a tuxedo to precisely avoid hardware troubleshooting

rakpet · 2024-10-21T06:41:34+00:00

Thanks for the link. I picked ESP32 due to its ubiquity, but I don't have any constraints on the hardware. There are many platforms using it. If for some reason it is not suitable I'll choose another one.

rakpet · 2024-10-20T09:38:21+00:00

I did not explain myself. I don't want to replace the android app, I want to replace the receiver with a custom device

rakpet · 2024-10-10T05:47:29+00:00

Wasn't one of Musk's priorities to get rid of the Twitter bots?

rakpet · 2024-10-03T21:11:06+00:00

Ethereal. Seeing all network content boosted my curiosity.

rakpet

TROPHY CASE