You guys see this?



I heard about this technique years ago, when wifi hotspots first started popping up.

The wifi spots were locked down for most types of traffic, but frequently had unrestricted DNS so that the hot spot could redirect any HTTP request to their signup/payment/login page, and some clever folks were running all kinds of stuff, including SSH, through DNS TXT records.