The hotels I've stayed out with this functionality all had an Aruba Wireless system with a hospitality model AP on a 1-gang wall box somewhere near the floor or strapped to the back of the TV.
Aruba wireless (like many enterprise wireless vendors) has a mDNS proxying and filtering system which is essential for places like college campuses. Airplay and Miracast (infrastructure mode) both use mDNS for service discovery. In Aruba the system is called Airgroup. When seeing a new MAC address the wireless controllers queries the RADIUS server. The RADIUS server can return a configuration for that new MAC address which tells the controller what other devices can interact with this new device using mDNS.
I always assumed this vendor adds and removes Airgroup configuration to allow the phone and the TV to see mdns from each other while preventing this from other nearby devices on the same VLAN or SSID. This trick might be enough but also pushing a DACL to the wireless controller to properly packet filter all network traffic from unapproved devices would strengthen the solution.
The bugzilla tickets linked from that article frustrates me. They should autoplay Yakety Sax music as they dodge around fixing the real @#$@ing bug:
Just copy Chrome and confine all modal dialog boxes such as HTTP basic auth and Javascript alert() to the individual browser tab. No individual tab should every be allowed to pop a modal that prevents interaction with any other tab, any other browser window.
This problem immediately goes away and you don't need to play rate limit wackamole games or do stupid things like have a dialog box that asks if you want to see another modal dialog box.
As someone who interacts with HTTP basic auth frequently Firefox's behavior here is maddening. Fix the bad UI.
This reminds me of one of my favorite historical audio clips. A few minutes before the 1965 Blackout in NYC the power frequency dipped as low as 51Hz (US is 60Hz). Playback equipment with motors setting speed based on the power frequency sllllooowwwweeeeddd down.
Tons of places outside of F500 are doing that. At work we just disabled IMAP for almost all O365 accounts and any other method of authentication that doesn't implement our two factor authentication. The rising number of compromised accounts because the user used the same password elsewhere, apparent bruteforce attacks, etal forced the issue.
Of course MDM is not required for any of this. Worst case is on Android you're forced to use Microsoft's Outlook app.
I'll give 4500 a whirl to see if it increases the success rate. It's a good idea. However it's not inconceivable to have sites like cafes that only allow 80/tcp and 443/tcp because that was an option in the UI on their wifi router for guest networks.
At this point if I was designing a VPN for client devices I'd have a mode that looked at as close to HTTPS as possible. There is one tool to tunnel over websocket but this was already sucking up too much of my play time. :)
Cisco AnyConnect, while expensive and bloated, works great as it initially connects on 443/tcp and then tries to setup UDP. If UDP fails it just sticks with the TCP connection and "just works".
I setup Wireguard and was pleased with the setup. Unfortunately I tried to use it over the next week only to quickly realize I should have kept my OpenVPN install instead.
Outbound port filtering is incredibly common on public and guest wifi networks and I found three use cases in my first week where OpenVPN on 443/tcp would have worked fine. The inability to use Wireguard over TCP and bypass most outbound port filtering by using tcp 443/etal makes it unusable in my daily life. I can understand why TCP isn't performant but my choice isn't performance vs non-performant. It's works somewhat vs GFY.
And yes I've seen the udp over tcp forwarding hacks. They don't work on iOS and some look outright dangerous (hello open proxy).
Hopefully this can be addressed before Wireguard hits 1.0.
"The company doesn't work directly with services such as Uber and Lyft, but a number of apps, such as Sherpashare (which is primarily used by ride-hailing drivers for services like Uber and Lyft), HopSkipDrive, eDriving and a variety of navigation apps use Zendrive's technology to monitor ride safety."
Hurray for malware. What other apps is this hiding in?
The touch bar examples shown are a usability disaster. You're going to hide UI from the screen and make me keep looking at the keyboard to find functionality?
I stopped looking at the keyboard every 10 seconds when I learned how to touch type.
The presenter spent most of his time looking at the keyboard and not the screen.
This gimmick will disappear when Apple decides a touch screen is needed to complete the slow merge with iOS.
You can pin radio stations. Unfortunately it only grabs a handful of songs at the top of the playlist. So dumb.
Edit: Radio station downloading now seems to grab at least twice the amount it used to. Which puts it firmly in the "meh" category when it comes to usefulness.
Play Music's Youtube integration is a pointless distraction that makes me less likely to continue to pay for the service, not more.
If I want to watch music videos I'll go to the Youtube app. So damn annoying when I accidently tap the play video hover button when I really meant to swipe to the next song.
If it weren't for YouTube's popularity I'd say the integration was a sign of desperation.
"The offline playback stuff continues to be pretty clunky to set up. If I know I am going on a road trip and will be driving out of range, actually adding that music to the device is a huge pain, and often the easiest way is just to leave the device playing music for days and let it build up a cache. Horrible."
It's not obvious but the way to do this is to "pin" (aka mark as keeping for offline) playlists on the device. Create a few travel playlists, pin them on the device, put the device on wifi or change the data settings in the app, go to the web client and mass drag and drop songs onto the travel playlists. I manage about 6 GB worth of offline music this way and it works decently. Once in a while you have to go into settings and tap "Refresh Music" to get it to recognize a new playlist but I maybe do that once a month.
I use the Kindle app for Android because that is where the indie authors seem to be. I use the app in spite of itself. The Kindle app on Android has over the past few years been such a buggy piece of shit that I curse it's very existence. It alone has demonstrated that Amazon can't competently develop mobile apps worth a damn and made me laugh when I heard Amazon was making a phone.
Once a month Amazon seems to make a release that outright breaks a critical flow in the app. For the past couple weeks I've had to use the website to skim through books because every time the app tries to open the store view for a book the app instead opens Chrome with "about:blank" as the URL. /facepalm
I'll ignore the fact the tablet version gets a proper store interface (when it's not completely broken) but the cellphone version gets a regurgitated ancient web view that was last updated a half decade ago.
I can only conclude that Kindle isn't profitable for Amazon at all and they throw appropriate talent at it... that is none at all.
Does Apple give a rip about iBooks? Google doesn't seem to give a crap about getting indies on Google Play.
We live in a sea of available entertainment and sources of amusement. Why be so attached to one particular form of entertainment when the cartel that controls it doesn't make it easy or inexpensive to consume?
7" screen was the perfect size for reading books and comics in my opinion. I'd preferred to have gotten a new 7" with smaller bezels. Might as well skip this Nexus generation.
Rogue DHCP servers should not be a problem in any decently engineered enterprise or college campus network. Cisco switches have included DHCP snooping for years which when used only allows authorized switch ports to act as a DHCP server. Any decent enterprise wireless platform should either have transparent firewall functionality to block client DHCP responses or an equivalent to DHCP snooping.
If you've properly deployed these tools you've greatly limit the potential impact of a DHCP based worm.
Home router? Anyone test this against Linksys junk yet?
Aruba wireless (like many enterprise wireless vendors) has a mDNS proxying and filtering system which is essential for places like college campuses. Airplay and Miracast (infrastructure mode) both use mDNS for service discovery. In Aruba the system is called Airgroup. When seeing a new MAC address the wireless controllers queries the RADIUS server. The RADIUS server can return a configuration for that new MAC address which tells the controller what other devices can interact with this new device using mDNS.
I always assumed this vendor adds and removes Airgroup configuration to allow the phone and the TV to see mdns from each other while preventing this from other nearby devices on the same VLAN or SSID. This trick might be enough but also pushing a DACL to the wireless controller to properly packet filter all network traffic from unapproved devices would strengthen the solution.