Blackpill I got a huge opsec realization

[svgmn1]

After a long convo with @nazianime about what to use and do regarding the forward network devices over the internet, I settled with installing openwrt, installing and running a p2p vpn service on it.

My work's network is complicated, I have a master chink xiaomi router, and two other tp link routers connected to the master by land cable (oems used to allow routers from different oems to be meshed/bridged over wwan, not anymore because it makes them less $$)
After installing openwrt, installing tailscale for the purpose mentioned beforehand (then uninstalling tailscale because it's bloat and installing zerotier which is much better, I know could also use wireguard, but I don't have a vps and a machine working 24/7)
I said "hmm, let me just tinker" and I installed an adblocker and a proxy service called tinyproxy.

I realized that with tinyproxy I could be able to see http trafic in detail using the log function, but it outputs to system logs so I asked chatgpt to just make me a script for size-constrained self-updating persistent logs on the flash instead of being on the system log buffer. I could also use the dns report function in openwrt itself.

And what do I see in those http/dns reports? constant pinging and requests from these tp link routers with stock firmware to google and facebook and others, I thought this was first something related to ggc and fbcdn, but those routers had zero devices connected to them when I was accessing my openwrt xiaomi router remotely and the requests only came from the tp link routers not from the openwrt-modded xiaomi router even though they were in ap mode

I have a tplink in my home, thinking of using my old laptop, installing pfsense or some strong hardened os that can do network then hook it with a wireless ap to function as a wireless router, but the problem is I don't think I would even trust a wireless ap anymore from ubiquiti and such as it could have firmware that does something like this since these tp links were operating in ap mode

Which I likely wouldn't do this year anyways since I'm an ldar piece of shit but just wanted to tell you that the wifi router in your home with stock firmware is doing some shit inthe background and I'm doin' some necessary fear mongerin' 4 you (water is wet).

 

[gracious sub5]

Didn't understand much but you sure put a lot of effort for your privacy thats great

 

[svgmn1]

Didn't understand much but you sure put a lot of effort for your privacy thats great

I didn't put effort into privacymaxxibg I just noticed something because I was trying something else but appreciated

 

[Dr. Butane]

After a long convo with @nazianime about what to use and do regarding the forward network devices over the internet, I settled with installing openwrt, installing and running a p2p vpn service on it.

My work's network is complicated, I have a master chink xiaomi router, and two other tp link routers connected to the master by land cable (oems used to allow routers from different oems to be meshed/bridged over wwan, not anymore because it makes them less $$)
After installing openwrt, installing tailscale for the purpose mentioned beforehand (then uninstalling tailscale because it's bloat and installing zerotier which is much better, I know could also use wireguard, but I don't have a vps and a machine working 24/7)
I said "hmm, let me just tinker" and I installed an adblocker and a proxy service called tinyproxy.

I realized that with tinyproxy I could be able to see http trafic in detail using the log function, but it outputs to system logs so I asked chatgpt to just make me a script for size-constrained self-updating persistent logs on the flash instead of being on the system log buffer. I could also use the dns report function in openwrt itself.

And what do I see in those http/dns reports? constant pinging and requests from these tp link routers with stock firmware to google and facebook and others, I thought this was first something related to ggc and fbcdn, but those routers had zero devices connected to them when I was accessing my openwrt xiaomi router remotely and the requests only came from the tp link routers not from the openwrt-modded xiaomi router even though they were in ap mode

I have a tplink in my home, thinking of using my old laptop, installing pfsense or some strong hardened os that can do network then hook it with a wireless ap to function as a wireless router, but the problem is I don't think I would even trust a wireless ap anymore from ubiquiti and such as it could have firmware that does something like this since these tp links were operating in ap mode

Which I likely wouldn't do this year anyways since I'm an ldar piece of shit but just wanted to tell you that the wifi router in your home with stock firmware is doing some shit inthe background and I'm doin' some necessary fear mongerin' 4 you (water is wet).

all this effort to get swatted later

 

[poorenglishcel]

Nice

I personally do the switch on the laptop, open chrome and then open .is strategy to keep my privacy safe

 

[svgmn1]

all this effort to get swatted later

swatted probably not....bombed probably ye
I didn't do this effort for privacy tho
I just wanted to connect my devices over the net without a server/paid service using a router and noticed this in the logs, it was spooky tbhdedsrsngllossus

 

[Dr. Butane]

swatted probably not....bombed probably ye

 

[Judge Holden]

Didn't understand much but you sure put a lot of effort for your privacy thats great

 

[svgmn1]

View attachment 1722989

wallahi...

 

[Pancakecel]

I didn't put effort into privacymaxxibg I just noticed something because I was trying something else but appreciated

Stop noticing, goy!

 

[nazianime]

I wonder if it’s some feature where you can log into a wireless network captive portal using your Facebook or google credentials. I know tp-link offers this for business customers running coffee shops with free WiFi. But it’s still shady as fuck also could be the router checking if it has internet access, like many do. Even if you dumbed them down to use as WAPs the services are still running in the background.

 

[Pikacel]

High IQ hackerz sht tbh

 

[svgmn1]

I wonder if it’s some feature where you can log into a wireless network captive portal using your Facebook or google credentials. I know tp-link offers this for business customers running coffee shops with free WiFi. But it’s still shady as fuck also could be the router checking if it has internet access, like many do. Even if you dumbed them down to use as WAPs the services are still running in the background.

it is shady and if I was living in the west I would think twice before using wifi (wifi ap) that does this even if I built my own router, tbh
options are really limited to assembling your own wireless ap network card (by getting a raspberry board or something with wifi radio that can install your os of choice I assume) or buying an of-the-shelf product that can be exploited to run a custom os like openwrt and have it on ap mode, or ditching wifi entirely, all of which are annoying and impractical solutions, brutal tbh