Net Kill?

JonNegri
JonNegri Member Posts: 3
Photogenic First Comment
✭
edited October 1, 2019 in Devices & Security #1

My kid uses Net Kill to stop my fingbox working.

How can I stop this?

Tagged:
VioletChepil

Answers

  • Pooh
    Pooh Member, Beta Tester Posts: 674
    500 Likes 500 Comments 25 Answers 100 Agrees
    ✭✭✭✭✭
    edited September 30, 2019 #2
    Er, You stop him by instructing him to quit. Netkill (aka WiFiKill etal) is designed to kill connections - it's a Denial of Service attack and, as such is hard to stop. Grab whatever device he's using and block it with the Fingbox whilst it's out of his hands.Once he's offline, change the settings to block all devices by default to ensure he doesn't try to change MAC addresses etc.

    All else fails change the password to the network. If he's hard connected, then cut the cable!

    This is ultimately a parental discipline situation rather than a technical one. If he's being such a repugnant individual to disable the Fingbox "for the lolz" then treat him accordingly.

    If he refuses to change his behavior then remove any and all devices he's got that enable him to run the tool and don't return them until he becomes a civilized user of the network you have supplied.

    This can't be a purely technical response: if he doesn't learn the right thing to do now, then I foresee that at some point in time in the future that there'll be a knock on the front door ,and then a uncertain set of events that'll not be favorable to your son will then be set in motion.

    If he wanted to practise white-hat hacking techniques then work with him with a sandbox area where he can play. However this is no different than a corporate network - you mess around with one of those without authorization and you'll find yourself fired pretty gosh-darned quickly...
    People say nothing is impossible, but I do nothing every day.
    MarckltaylorHronosVioletChepil
  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #3
    Thanks for the answers @Pooh curious to see any other ways to stop this and I'm asking internally some of our developers too. 

    Community Manager at Fing

  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #4
    I wonder - where is netkill being used from? PC or mobile app?
    I know this software tool is blocking certain apps and giving parents more control in combination with Fingbox: https://ourpact.com/ 
    Also could you possibly use a DNS and block access to the site hosting Netkill calls? For example; Open DNS? https://www.opendns.com/



    Community Manager at Fing

  • Pooh
    Pooh Member, Beta Tester Posts: 674
    500 Likes 500 Comments 25 Answers 100 Agrees
    ✭✭✭✭✭
    #5
    It may be that a Ubiquiti router might be able to help. Failing that an inline firewall also may be able to help.

    This all said, after speaking to our Security officer at work, his suggestion was basically the same as mine above.

    @VioletChepil you can run NetKill\WiFiKill locally - you just need a device that you can run it on. If the child is on a wireless device with root level access, then changing the MAC address is one of the first things they'll do (hence the need to remove the access first, then, whilst the Fingbox is online, change the default to block all new connections.

    Ultimately though there is very little you can do without significantly hardening the network. It may be worth brining @Domotz into the conversation to see if there's anything they supply that would help mitigate.

    Ultimately though the Fingbox is going to be somewhat powerless to prevent this sort of thing because it's not inline, therefore it's abilities are somewhat limited.

    Longer term, should Fing come out with an inline version that may also fix the IPv6 conundrum? I get y'all don't want to make the Fingbox a firewall, but it might be easy enough to give it some basic controls.
    People say nothing is impossible, but I do nothing every day.
  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #6
    Thanks @Pooh I've checked with our DEV team and they are in line with your answer as best solution. 
    As for the inline version, it's not on the roadmap because there can be so many issues with trying to be a firewall while not on the router - especially slowing down the network...since we've always need to re-route the traffic through the box. This is the major difficulty - we need to remain light weight - and do what we can without re-routing all the traffic which is definitely best done on the actual router. I know many of the cheaper firewalls can really slow things down and often times are getting unplugged...

    Community Manager at Fing

    Poohkltaylor
  • kltaylor
    kltaylor Member, Beta Tester Posts: 1,231
    1000 Comments 500 Likes 50 Answers 100 Awesomes
    ✭✭✭✭✭✭
    #7
    How do you make him stop?  Take away his 'right' to your network by using a better, more robust password and severing the ethernet cables.
    If your son is using Netkill routinely, there are a few things to consider:
    1.) He somewhat knows his way around a hackers environment
    2.) What the heck is he hiding

    Either way, put a stop to it yesterday.
    "There's a fine line between audacity and idiocy."
    -Warden Anastasia Luccio, Captain
    PoohVioletChepilHronosMarc

Categories