airports
Documenting wifi in airports
For background information, see this blog entry.
Tools
- DnsTunnel software:
- iodine
- NSTX
- IcmpTunnel software:
- ICMPTX
- HttpTunnel software:
- HTTP Tunnel (for windows?)
- Corkscrew (designed for SSH)
Tricks and rumours
- adding "?.jpg" at the end of any URL you want to visit to bypass charges . I've never been able to get that working.. -- TheAnarcat 2010-04-16T01:06:29-0400
- If you are allowed to access certain domains for free, you can sometimes use them as a username on other domains. At Amsterdam Youth Hostel you had to form URLs similar to http://yha.org@example.com to visit example.com
- if you need an email to register, use one of those disposable emails:
- http://guerrillamail.com/
- http://mailinator.com/
- http://anonbox.net/ - needs to be created beforehand, no support for outgoing, but accessible through tor and free software-based
Other howtos
List of airports
Amsterdam (AMS)
- Record by
- TheAnarcat, kwadronaut
- Created
- 18-9-2008
- Updated
- 26-9-2008
General
KPN access is non-free:
- 30 minutes wired (ethernet) (EUR 6.00)
- 30 minutes wireless (EUR 6.00)
- 90 minutes wireless (EUR 12.00)
wireless day-connect (EUR 16.00) It is also interesting to note that "[they] are legally obliged to make an effort to collect data to be able to identify users on our network" (source). Surprisingly, this seems to be a system similar to the one used in Montreal:
ICMP: opened
- DNS: opened, although nstx seems to not be working properly
- TCP: blackholed except HTTP
- HTTP: unidentified captive portal Schiphol-Group is a bit weird, when I tried connecting to it, the Gnome Network Manager asked me for a password, but it's not a WEP ''or'' WPA password. Not entering any password allows me to associate, but no DHCP...
There is another access point:
wlan0 IEEE 802.11g ESSID:"Regus Skynet 001" Nickname:""
Mode:Managed Frequency:2.462 GHz Access Point: 00:14:BF:B1:83:B0
Bit Rate=1 Mb/s Tx-Power=27 dBm
Retry min limit:7 RTS thr:off Fragment thr=2346 B
Power Management:off
Link Quality=15/100 Signal level=-86 dBm Noise level=-92 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0
free and open wireless, could get it outside schiphol plaza (next to the delifrance boot). dhcp, ssh, web... everything you need. -- kwadronaut
Scan results
Santiago (SCL)
- Record by
- TheAnarcat
- Created
- 2008-08-18
General
Lots of wifi networks, cannot associate with the telefonica or meteo_aeronautico, for some reason. I can associate with 'default' but it will not give me an IP.
I can, however, assign myself a static IP and it has a secret gateway: 128.140.2.2 that will then give me free access.
AP scan
Buenos Aires (EZE)
- Record by
- TheAnarcat
- Created
- 2008-08-18
- Last updated
- 2008-08-18
General
There are two gateways here. ARNET and RED CARPET. The latter seems to be completely opened. I'll detail the second one here:
https://wifi.arnet.com.ar/wifi/login.asp?essid=WLAN%20ARNET&clientipaddress=190.30.246.76&cn3000hostname=ap.arnet.com.ar&cn3000ip=200.3.76.2
- ICMP: blocked
- DNS: opened
- TCP: blackholed except HTTP
- HTTP: Arnet captive portal (from Telecom) Server: GoAhead-Webs
Workarounds
- IP over DNS (nstx) - not working, maybe my gateway is down
Montreal / Trudeau (CYUL)
- Record by
- TheAnarcat
- Created
- 2008-08-04
- Last updated
- 2012-06-05
General
Wifi is now free in Montreal Pierre-Elliot-Trudeau airport, congrats to the airports management for doing the right thing!
The access point is AERO WI-FI, and works fairly reliably at gate C87.
Old documentation
https://wireless.nnu.com/nw4/sites/opti-fi/YUL/main
"Opti-fi"
- DNS: opened
- ICMP: opened
- TCP: blackholed except HTTP
- HTTP: Opti-fi captive portal
Workarounds
- IP over DNS (nstx)
- IP over ICMP (to be tested)
Notes
- Bell blatantly abuses Level3's DNS servers:
.
nameserver 4.2.2.1 nameserver 4.2.2.3 nameserver 4.2.2.5
- after a while, the connexion dropped and wouldn't pass packets anymore
- nstx gets pretty crappy:
. some packets also come back out of order...
--- 10.0.0.1 ping statistics --- 128 packets transmitted, 90 received, +14 duplicates, 29% packet loss, time 127437ms rtt min/avg/max/mdev = 63.426/3163.258/20679.604/4873.415 ms, pipe 21
- it still works a month later, although it's still pretty bad:
.
--- 209.44.112.66 ping statistics --- 293 packets transmitted, 140 received, +27 duplicates, 52% packet loss, time 331194ms rtt min/avg/max/mdev = 6.204/2378.758/16320.236/3882.648 ms, pipe 17
--- 209.44.112.66 ping statistics --- 235 packets transmitted, 180 received, +17 duplicates, 23% packet loss, time 234679ms rtt min/avg/max/mdev = 97.984/1348.212/15932.210/2951.659 ms, pipe 16
Toronto Pearson (CYYZ)
- Record by
- TheAnarcat
- Last updated
- 2008-08-04
General
https://www.boingo.aero/(S(hsr5px55t1uibd45uv0uky55))/Home.aspx
"Boingo"
- DNS: opened
- ICMP: blackholed
- TCP: rejected
- HTTP: "Boingo" captive portal: 11.95$/3 mths, 9.95$/24h, 5.95$/h
Review of the Boingo service
Oh boy, where do I begin with this one... To give him a good ''something'', I have to say their tech support is excellent. I had someone on text chat (browser-based/flash unfortunatly) even '''before''' i subscribed to the thing. But then, that's where the trouble started... I wanted to get online to fix my NSTX tunnel I screwed up while trying to setup a ICMPTX tunnel back in Montreal so I wanted to get the minimum, but the chat lady (thanks for nothing Jessica!) tried to sell me the most expensive, month-based 12$/month deal, whereas I was wanting the 1h deal. Figuring out I might fail with NSTX again, i went with the 24h deal. As I went through the registration process, I tried to consult their privacy policy which led to a 404 (great! "sorry for the inconvenience"). Then I got to pay and got to an error page with a ticket number, and couldn't login with my chosen username and password. Jessica couldn't help me and I had to call tech support on an 1-800 number.
Fortunatly, Bell's phone booths still allow 1800 calls so I could start talking with tech support right away (no waiting!). We could never get my username and password to work. I was even able to get a "courtesy account" (generic username and password) that wouldn't work either. Tech supports' conclusion: there's a problem with the hotspot at Pearson... So I canceled my account and they better not charge me for this!
The worst thing is that Jessica told me that "free Wi-Fi networks do not provide a good user experience" and they they are "typically slow (because there's no incentive [...] to invest in great technology". She was right in saying there's sometimes "no one to call if you have a problem or need help", but if that's all Boingo can do for me, I'd rather go with the "slow" but free wifi hotspots where I don't '''need''' to call tech support because it "just works"... for free!
Bottomline: Boingo doesn't work for mere mortals. I could hack my way around it, with the marvelous nstx tunnel and the free "datavalet" Bell nicely left open for us [note: "datavalet" is the free network for the Maple Leaf Lounges], but it's otherwise a typical waste of resources.
Workarounds
- nstx to be tested and probably the only option
- open hotspot: "datavalet". this hotspot is strange. upon connexion, nothing seems to work. but then you visit their splash page and everything just works. ping, ssh, http, i could go everywhere freely. sometimes i would end up on a page saying this:
. the gateways are on ubilium.net
Session Information User -6402086 Room Uplink Package Daily package Package ends 8/5/2008 - 5:48:00 PM
Wifi scan
Budapest (BUD)
- Record by
- TheAnarcat
- Created on
- 22-9-2008
General
Budapest Ferihegy airport has two terminals quite far from each other. This applies to terminal 2.
Two wifi networks are available: T-Mobile and PANNON. I connected without problems to the PANNON AP, and it is completely opened. Thank you Budapest!
Wifi scan
Paris (CDG)
- Record by
- TheAnarcat
- Created on
- 22-9-2008
General
A few crypted networks, two opened ones (orange + hubtelecom). hubtelecom is a captive portal requesting a fee. Orange doesn't give me an IP.