Spark free WiFi issues

Forums › Spark New Zealand › Spark free WiFi issues

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Topic # 160167 26-Dec-2014 19:41

So I'm out and about on my Christmas holiday & came across a Spark phone box with free Wifi (which I get free on my plan)
connected my iPhone 6 to the network... Couldn't do anything, chrome gave me security errors saying the network wasn't protected etc and wouldn't let me browse or access anything internet related...

Any reason why this is?

Jase2985

7752 posts

Uber Geek
+1 received by user: 2559

Subscriber

Reply # 1204211 26-Dec-2014 20:44

have you recieved the code to login?

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Reply # 1204216 26-Dec-2014 20:48

Didn't need a code to connect to the box.

If it had a browser login, chrome (iOS8) wouldn't let anything open without giving me the security warning. Had no way to get past that page.

Jase2985

7752 posts

Uber Geek
+1 received by user: 2559

Subscriber

Reply # 1204217 26-Dec-2014 20:51

2 people support this post

i think you have miss understood how it works

http://www.spark.co.nz/help/mobileandmobilebroadband/plans-and-services/free-wifi-zones/

Also try a different browser

:edit: try a different device

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Reply # 1204219 26-Dec-2014 21:00

Looking at how to connect to the free wifi on Sparks website shows I did what it said.

I connected to Spark wifi, expected to have my browser redirect me to a login page of some sort,
but it just came up with a security error warning about things hacking my device...

Something isn't right with that. (on the Spark box in Woodville)

Jase2985

7752 posts

Uber Geek
+1 received by user: 2559

Subscriber

Reply # 1204224 26-Dec-2014 21:20

again have you tried a different browser and a different device? that will rules out the wifi hot spot if it works in a different browser or device

you could just ignore the security message in the browser

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Reply # 1204229 26-Dec-2014 21:25

I did try to ignore the warning, wouldn't let me past the warning which I thought seemed a bit odd.

Jase2985

7752 posts

Uber Geek
+1 received by user: 2559

Subscriber

Reply # 1204230 26-Dec-2014 21:32

Brandonrnz: I did try to ignore the warning, wouldn't let me past the warning which I thought seemed a bit odd.

again have you tried a different browser or device?

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Reply # 1204244 26-Dec-2014 21:35

Didn't have time. Changed back to 3G (which is pretty shocking here). Was more curious to see if any others have experienced the issue...

nathan

4977 posts

Uber Geek
+1 received by user: 1323

Trusted

Microsoft

Reply # 1204257 26-Dec-2014 21:58

2 people support this post

I've not had this issue. It just seems to work, as I walk past food halls or drive past WiFi enabled.phone boxes my Windows Phone latches on and free data FTW

richms

21465 posts

Uber Geek
+1 received by user: 4362

Trusted

Subscriber

Reply # 1204276 26-Dec-2014 22:26

Yes, have that issue. They are man in the middleing any https connection to try to get the splash screen show. They are advising people to ignore security warnings to get the spoofed content to show.

IMO both are inexcusable. At least on an android the OS trys a http request and will specifically pop open a browser to the non https site to get you to log in, whereas https gets you an error that you are being spoofed, because you are.

Try opening a browser and going to a URL that doesnt have https like yahoo.com and it should redirect you without the error.

Richard rich.ms

Brandonrnz

364 posts

Ultimate Geek
+1 received by user: 12

Reply # 1204483 27-Dec-2014 13:10

richms: Yes, have that issue. They are man in the middleing any https connection to try to get the splash screen show. They are advising people to ignore security warnings to get the spoofed content to show.

IMO both are inexcusable. At least on an android the OS trys a http request and will specifically pop open a browser to the non https site to get you to log in, whereas https gets you an error that you are being spoofed, because you are.

Try opening a browser and going to a URL that doesnt have https like yahoo.com and it should redirect you without the error.

Gave your suggestion a try. Had that security error again in town at another spark box. Opened Trademe and sure enough the login page appeared. Thanks!

sbiddle

27065 posts

Uber Geek
+1 received by user: 6509

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 1204524 27-Dec-2014 15:36

Spark forgot to renew their SSL cert so everybody saw an SSL error trying to log in for about a 48hr period a couple of weeks ago. If you were running Android Lollipop you wouldn't have been able to log in at all over this period due to the changes in captive portal support in Lollipop.

Aredwood

3115 posts

Uber Geek
+1 received by user: 1207

Subscriber

Reply # 1205042 28-Dec-2014 17:07

Also Im guessing that Chrome supports "Strict transport Security" If so it means that when you visit a website that also supports it. The browser will never allow you to bypass any future SSL errors for that site. There were too many cases of users simply bypassing SSL warnings and then getting hacked / passwords stolen ect.

richms

21465 posts

Uber Geek
+1 received by user: 4362

Trusted

Subscriber

Reply # 1205130 28-Dec-2014 20:33

Made worse by phones stupid error messages - "A secure connection could not be established" with Continue and cancel is the usual one I see.

Most captive portals seem to just block port 443 till you authenticate, no idea why spark chose to intercept it which is clearly broken. Also no idea why they actually tell people to ignore security warnings so that they can log in, which is promoting bad practices.

Richard rich.ms