← Back to context

Comment by iso1631

5 hours ago

SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine.

It sounds far less than the diagnostics data I get from a small go binary.

If corporate policy is you can't connect to starbucks wifi, then enforce that at the MDM mangement layer - I assume things like SCCM can do it.

> SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine.

So it sounds like if you want to circumvent this: get a travel router that spoofs a work access point, and make sure any kind of identification requests that would reveal a public IP are either blocked or are going through your work VPN.

  • running it in a browser would be enough, no ?

    • If it's only just the teams app that's doing it, but I'm not sure if that's a safe assumption. There's a crap ton of Microsoft stuff installed on my laptop by default, and the IT admins install stuff all the time.