I plugged into ethernet (as wifi w/captive portal does not work for me). I think clearnet worked but I have no interest in that. Egress Tor traffic was blocked and so was VPN. I’m not interested in editing all my scripts and configs to use clearnet, so the library’s internet is useless to me (unless I bother to try a tor bridge).

I was packing my laptop and a librarian spotted me unplugging my ethernet cable and approached me with big wide open eyes and pannicked angry voice (as if to be addressing a child that did something naughty), and said “you can’t do that!”

I have a lot of reasons for favoring ethernet, like not carrying a mobile phone that can facilitate the SMS verify that the library’s captive portal imposes, not to mention I’m not eager to share my mobile number willy nilly. The reason I actually gave her was that that I run a free software based system and the wifi drivers or firmware are proprietary so my wifi card doesn’t work¹. She was also worried that I was stealing an ethernet cable and I had to explain that I carry an ethernet cable with me, which she struggled to believe for a moment. When I said it didn’t work, she was like “good, I’m not surprised”, or something like that.

¹ In reality, I have whatever proprietary garbage my wifi NIC needs, but have a principled objection to a service financed by public money forcing people to install and execute proprietary non-free software on their own hardware. But there’s little hope for getting through to a librarian in the situation at hand, whereby I might as well have been caught disassembling their PCs.

  • coffeeClean@infosec.pubOP
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    41
    ·
    edit-2
    2 months ago

    Someone should let the IT staff know so they can properly block those services on ethernet as well.

    Someone should let the IT staff know that wi-fi does not work for everyone, including:

    • People running a free software platform that lacks support for a wifi NIC that needs a proprietary driver and firmware
    • People running free software who ethically object to running the proprietary non-free driver and firmware their wifi NIC requires
    • People without a mobile phone to perform the captive portal-mandated SMS verfication
    • People with a mobile phone but who want to exercise their GDPR right to data minimization
    • Climate activists who prefer not to spend 30 times more energy needed for wi-fi radios
    • People who want the security of other wi-fi users not eavesdropping on their traffic by simply pointing a yagi antenna from a block away (on a network that blocks the VPNs that would protect them from that on wi-fi)

    (edit)

    • People who cannot get past the captive portal for other reasons, such as the captive portal imposing TLS 1.3 on older software (forced obsolescence), or anything else that fails technically, like DNS breakage preventing the captive portal’s hostname from resolving.

    And because simply turning on Wi-Fi in public enables all iPhones in your range to automatically snoop, collect your wi-fi params including SSIDs your device looks for before sending it to Apple, along with GPS fix and timestamp (according to research), there are people who:

    • for privacy reasons object to being snooped on generally in this way
    • boycott Apple already for any number of reasons, and who have enough discipline and resolve to oppose feeding profitable data to Apple – regardless of whether they actually care about the disclosure.
    • boycott the fossil fuel industry, including Google who supplies AI to Totaal Oil to find drilling locations, and thus oppose feeding Google by way of Androids in range doing the same collection as Apple. (note it’s disputed whether Google actually mirrors Apple on this to the extent of Apple)
    • Buelldozer@lemmy.today
      link
      fedilink
      English
      arrow-up
      51
      arrow-down
      2
      ·
      edit-2
      2 months ago

      Someone should let the IT staff know that wi-fi does not work for everyone, including:

      HI there. I’m someone in IT for a Public Library so let me review these points.

      People running a free software platform that lacks support for a wifi NIC that needs a proprietary driver and firmware

      That’s a you and your hardware problem, not a public library IT problem. You need to purchase hardware that is adequately supported by your chosen Operating System.

      People running free software who ethically object to running the proprietary non-free driver and firmware their wifi NIC requires

      This is a you and your hardware problem. Buy hardware that is adequately supported by your chosen Operating System.

      People without a mobile phone to perform the captive portal-mandated SMS verfication

      This one is a semi-serious complaint however I’ve never seen a portal system where the Librarian’s didn’t have the ability to issue a day pass for use. Aside from that you sound like someone who should be technically able to stand up an ephemeral phone number for the purpose of receiving SMS.

      People with a mobile phone but who want to exercise their GDPR right to data minimization

      Same as above.

      Pro-environment people who prefer not to spend 30 times more energy needed for wi-fi radios

      What an absolutely petty complaint.

      People who want the security of other wi-fi users not eavesdropping on their traffic by simply pointing a yagi antenna from a block away.

      I’d bet that as soon as you enter a code your VPN stops being blocked. They’re not trying to block VPN they are preventing you from sidestepping their ToS.

      I’ve dealt with Patrons like you before and the instant someone starts yammering at me about ClearNet / Tor I know exactly what kind of person I’m dealing with.

      You selected your path for whatever reasons you chose and the inconveniences that come with that path are yours to deal with. Suck it up buttercup, you weren’t promised that a privacy respecting internet lifestyle would be easy or convenient.

      BTW if you’d plugged your laptop into one of my systems you’d have gotten vlan’d into the same Captive Portal System that the WiFi has which is precisely how any publicly available Ethernet port should function. Your little length of wires coated in vinyl with plastic shoved on the ends still wouldn’t have gotten you where you wanted to go.

      • coffeeClean@infosec.pubOP
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        7
        ·
        edit-2
        2 months ago

        That’s a you and your hardware problem, not a public library IT problem. You need to purchase hardware that is adequately supported by your chosen Operating System.

        Forcing people to buy more hardware is yet another variation of discrimination against the poor. Imposed needless consumerism is also reckless from an environmental standpoint. If you choose not to step your competency up to the level needed to serve the public without costing them more money, you’re only getting off the hook in the view of right-wing conservatives who are happy to have library service cheapened at the expense of equal rights.

        Not being “your problem” is simply a problem of an ill-defined contract that allows irresponsible policy.

        This is a you and your hardware problem. Buy hardware that is adequately supported by your chosen Operating System.

        It’s not a hardware problem. It’s an ethics problem, and the problem is on your part whether you choose to acknowledge it or not. If you lack the higher level of competency needed to practice your trade ethically, you should try to gain the competency you need to be inclusive of people in different economic standings and diverse hardware.

        This one is a semi-serious complaint however I’ve never seen a portal system where the Librarian’s didn’t have the ability to issue a day pass for use.

        Not a single public library in my area has a day pass option as an alternative authentication. If the patron has no phone, the library helpless and the user is not getting online with their own device.

        Aside from that you sound like someone who should be technically able to stand up an ephemeral phone number for the purpose of receiving SMS.

        There is no way to get a phone or an active SIM chip gratis in my area. The only difference between a burner phone and a non-burner phone in my area is you quit using the burner phone early. It has all the same problems as a permanent phone. You can get a pinger number online, but it only works if you’re already online. Apart from that, your suggestion is absurd as an official policy in response to public complaint about phoneless people being officially excluded.

        Same as above.

        It fails here too, for the same reason.

        What an absolutely petty complaint.

        What an absolutely pathetic failure to support a claim to the contrary.

        I’d bet that as soon as you enter a code your VPN stops being blocked. They’re not trying to block VPN they are preventing you from sidestepping their ToS.

        This is not a /me/ problem. You are responding to a list of demographics of people who are excluded from a public service. If not every single person has a gratis VPN (and they don’t), this is a broken argument. To say every user must acquire a VPN because you cannot provide a means of access that thwarts the most trivial MitM possible is a reckless abandonment of duty.

        I’ve dealt with Patrons like you before and the instant someone starts yammering at me about ClearNet / Tor I know exactly what kind of person I’m dealing with.

        So your emotional bias adversely hinders your judgement and ability to service a diverse range of users. It shows.

        You selected your path for whatever reasons you chose and the inconveniences that come with that path are yours to deal with. Suck it up buttercup, you weren’t promised that a privacy respecting internet lifestyle would be easy or convenient.

        Inconveniences are borne out of the kind of incompetent infosec that you’re peddling. A competent tech firm can do this job without violating data minimisation principles and without violating Article 21 of the UDHR.

        BTW if you’d plugged your laptop into one of my systems you’d have gotten vlan’d into the same Captive Portal System that the WiFi has which is precisely how any publicly available Ethernet port should function. Your little length of wires coated in vinyl with plastic shoved on the ends still wouldn’t have gotten you where you wanted to go.

        And that would still be violating peoples’ Article 21 rights to equal access. Imposing a mobile phone is among the injustices I’ve mentioned. I would still favor the ethernet regardless of the captive portal for many of the reasons I’ve mentioned. In the very least it avoids discriminating against people without functioning wifi h/w.

    • catloaf@lemm.ee
      link
      fedilink
      English
      arrow-up
      25
      arrow-down
      1
      ·
      2 months ago

      You’re welcome to use the library PCs (if available) or get your own ISP connection.

    • DoomBot5@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      4
      ·
      2 months ago

      Yeah, this argument is bullshit once you actually know what you’re talking about instead of following some cult videos that teach you to repeat them.