[184132] in North American Network Operators' Group
Re: Question re session hijacking in dual stack environments w/MacOS
daemon@ATHENA.MIT.EDU (Connor Wilkins)
Sun Sep 27 11:26:09 2015
X-Original-To: nanog@nanog.org
Date: Sun, 27 Sep 2015 15:25:25 +0000
From: Connor Wilkins <connorwilkins@ruggedinbox.com>
To: dovid@telecurve.com, nanog@nanog.org
In-Reply-To: <1380151854-1443324895-cardhu_decombobulator_blackberry.rim.net-243925607-@b13.c3.bise6.blackberry>
Errors-To: nanog-bounces@nanog.org
On 2015-09-27 03:34, Dovid Bender wrote:
> But when you're seeing the same session being used from two wildly
> different places (in this case, IPv4 and IPv6) at the SAME TIME, that
> does seem rather suspicious in the absence of other information.
iOS 9 has a new feature called "Wi-Fi Assist" that will "automatically 
use cellular data when Wi-Fi connectivity is poor".
This will most likely cause those pesky IP checks to fail (even if you 
use a /24 or AS check). Geolocation checks will also fail in some cases.
My geolocation when connected to WiFi and when using cellular data are 
widely different. WiFi reports the city I'm in while cellular reports 
the city that their HQ is in.
-- 
“Simply stated, we have a new formula for Coke.” --- Roberto C. 
Goizueta, Company Chairman, Coca-Cola