David Bird <[email protected]> wrote:
> A note about capport detection evasion: It is not always on purpose...
> As more hotspots do "social login" applications, they are opening up
> the walled garden surprisingly wide to get that to work...
I think that within the Android ecosystem (which I know a lot about), that it
should be possible to form an intent from the captive browser to the system
to invoke the appropriate app and return an OAUTH2 token. This doesn't have
to happen within JS from within the captive browser. I imagine that iOS
ecosystem can handle something similar, but I believe that it hasn't (yet?) got
Intents that are as flexible.
On a desktop system there are fewer options, but given dbus, and
OSX/microsoft equivalents, I don't see why it couldn't happen.
The "gcalapi" python script nicely asks my browser for an oauth token today.
--
Michael Richardson <[email protected]>, Sandelman Software Works
-= IPv6 IoT consulting =-
Attachment:
signature.asc
Description: PGP signature