Tagged Questions

Security for 802.11 wireless networks.

learn more… | top users | synonyms

4
votes
5answers
505 views

Can the wifi administrator in a shared office see mail sent through outlook?

I am hot desking in the same office as a potential competitor & would be using the same wifi. The building owner runs the competitor company. My question is, can the wifi administrator see mail I ...
4
votes
2answers
114 views

Should I set different passwords for different Wi-Fi bands?

My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them. Now, since cracking just one of the two means that the attacker would ...
2
votes
2answers
245 views

Wireless Positioning System (WPS) works without Internet?

As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
2
votes
2answers
115 views

Are there any known attacks for a laptop with the wifi connection turned off?

I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
0
votes
1answer
132 views

wifi devices connected even if they give a wrong password, how can i use this vulnerability

I have an access point that subscribes in the list of connected devices all the devices that try to connect to it, even if they give a wrong password. The device does not give them an IP address but ...
1
vote
1answer
88 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
2
votes
0answers
149 views

What causes wifi network connections to timeout? [closed]

i was wondering what actually causes wifi network connections to timeout. for instance, say my laptop is connected to my wifi and i yank the battery out such that my laptop can't send any proper ...
3
votes
1answer
145 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
1
vote
1answer
110 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
11
votes
2answers
1k views

What is the purpose of changing the default SSID?

Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
1
vote
1answer
207 views

how to protect my linux pc from wifi sniffing

I have a wifi shared connection with other flatmates and I'd like to know how can I protect my Debian pc from being sniffed. Should I use a wifi anti sniffer to detect if any wifi card is in ...
0
votes
1answer
395 views

WPA/PSK Dictionaries

So i have been reading some articles on WPA/PSK encryption, And one said that the hash is calculated like this: Key = PBKDF2(passphrase, ssid, 4096, 256) Where PBKDF2 is a standardized method ...
1
vote
3answers
120 views

Why does changing physical router not warn of possible man in the middle attack?

Situation I swapped out a dead router at home today. I setup the new router with the same SSID and encryption settings. The devices on my network acted like nothing had happened and are happily ...
1
vote
3answers
321 views

Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?

Mobile devices like smartphones and tablets have the feature to autoconnect to wireless networks of known name. The same is with laptops and other hardware using WPA2. Is it possible to: a. Obtain ...
1
vote
2answers
246 views

Idea for hiding your mobile phones' location, and still be able to place and receive calls. Any suggestions?

The diagram below is a thought experiment that could provide a certain level of privacy to mobile (smart)phone users, beyond what they currently have. Some of it is purely theoretical, but it should ...
2
votes
2answers
649 views

Exploiting free WIFI security

So I was watching some Backtrack learning videos and similar stuff, and noticed how there is always talk about getting people's information. For example if someone using unsecured WIFI you can see ...
3
votes
2answers
1k views

IP cameras or webcams and wifi/network security

If I have a: router with stateful packet inspection turned on, plus WPA2 security on the wifi network an IP camera or webcam connected to this Wifi network Is there any way to ensure that: ...
7
votes
4answers
1k views

How to check if wifi is safe while travelling?

I'm quite a bit of a traveller. So i tend to just stay with my smartphone and sometimes notebook. I'm not a security expert but i would like to check how to know if wifi is safe to use. For example, ...
2
votes
1answer
2k views

Why is a CA certificate required for EAP-TLS clients?

When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate. It's ...
1
vote
5answers
621 views

If I am not logged into my company's WIFI, can they view my information? Or am I transmitting?

I was at work using my phone. We have an open WIFI, but I did not use it to go online. I was wondering, can my information be viewed or was I transmitting data even though my phone said I was not ...
3
votes
2answers
934 views

Wifi pineapple “Karma”

if a wifi pineapple does a karma attack and a client connects to it would you get the password((for the original wifi) or would the client just connect to you? (Side question is there anyway to stop ...
0
votes
1answer
300 views

Shall I enable 'send all traffic over VPN' on my Mac?

I want my Mac to be as secure as possible, but I don't know if the send all traffic over VPN option is safe or not. Please can someone explain if it is more secure to enable it or not.
1
vote
1answer
8k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
4
votes
1answer
215 views

Securing wifi with encryption

So I have been hearing that using WPS Pin is not secure at all and that there are available downloads that can brute force attack the pin until it uncovers it depending on what encryption you use. I ...
1
vote
1answer
200 views

MiTM not working --rejected by router?

I have been attempting to run a MiTM on a very old XP SP3 computer. I have attempted it with 3 products, as listed below: Wireshark: Traffic from the computer did not even show up. (I did see traffic ...
-1
votes
1answer
79 views

Why not plug DeAuth

They way I understand DeAuth-ing a user on a wireless network is this: The attacker pretends to the AP he is the user and to the user he is the AP. He then tells the AP (as a user) "I need to ...
2
votes
1answer
311 views

2 AP (TP-LINK) - bridge mode - security issues

I connect two TP-LINK APs (TL-WA901ND) together over bridge-mode. It's all working fine but there is no option to set up some wifi-security (WPA/WPA2). Do I need wifi-security over bridge-mode? Any ...
0
votes
1answer
414 views

Sniffing 3g network Pockethound

I was wondering if its possible to prevent 3g sniffing. Its not about the security of the information sent over 3g, but being able to use your 3g without anyone able to see traffic. There are machines ...
3
votes
1answer
438 views

WiFi Direct/WPS key question

So far, I haven't seen any PoC or real-world attacks against WiFi Direct, but I see the potential because it relies on WiFi Protected Setup (WPS) for establishing the connection. Tools like Reaver ...
3
votes
2answers
751 views

Wifi security SSID clarification

I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand. Is there a best practice for SSID naming? I know that changing the ...
6
votes
2answers
761 views

Does WPA2 Enterprise mitigate evil twin attacks?

One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
2
votes
2answers
447 views

How to prevent user's mobile phone position tracked

Trying to follow up this post How to trace a (mobile) phone? , the answers on how to prevent being tracked while you own a mobile phone are: You cant. (even if you use disposable phones etc) 1) Why a ...
2
votes
4answers
1k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
6
votes
1answer
1k views

Are strong WPA2 passwords “good enough” for WiFi security?

I'm currently using WPA2-PSK with CCMP on my home WiFi network for encryption and security. I was a big fan of MAC filtering, until I realized that MAC addresses are publicly sniffable in the 802.11 ...
1
vote
1answer
104 views

Are there risks associated with connecting to a public hotspot?

When connecting to a unknown public hotspot, I know that the data transmitted can be captured and, if unencrypted, easily analyzed. But that's not the question here. I want to know whether the ...
3
votes
2answers
168 views

How are WPA Keys stored on a router?

Should the router only store a hash of my encryption key or is it stored as plaintext? I believe (but not certain) that the WPA key is itself an encryption key, buy shouldn't that be encrypted like ...
0
votes
2answers
3k views

Tumblr app on while Android phone logged onto work wifi

I used the Tumblr app on my smartphone to access some adult Tumblr feeds while on my home network. I also used my phone's internet browser to view some adult content. While all this is completely ...
0
votes
1answer
113 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
1
vote
1answer
3k views

What details does my iPhone reveal about the user (if any) when I connect to a wifi network?

I accidentally used my work's wifi to look at porn using my iPhone. I refreshed a tab I had open from a session when I wasn't at work. Now I'm worried my firm will find out. The network is ...
-2
votes
1answer
518 views

Is it possible to encrypt WiFi connection?

Is it possible to encrypt (encrypt traffic) WiFi connection from my laptop to my router? If anyone of you did it? How I can do this?
0
votes
2answers
531 views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
3
votes
2answers
154 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
2
votes
1answer
199 views

Kismet Output Shows 3 Possible Encryption Options, Which one?

Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network. Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
0
votes
3answers
4k views

Does rooting an Android Phone make it Vulnerable? [closed]

If android os in a device is rooted , will it be safe to use it in public networks where possibilities of attacks is more.
-1
votes
1answer
251 views

What are the security concerns when connecting to a WiFi network? [duplicate]

I connected my phone to a protected Wifi network that is not my own. Can anyone accessing the same network be considered a threat on my mobile device? Is it easier for hackers connected to the same ...
1
vote
3answers
455 views

Can I use an AP “Bridge” with password to imporve security over an open, unencrtyped WiFi signal?

I have access in my neighborhood to an open, unencrypted WiFi signal but I am leery of using it because of security reasons. I don't want to let my username, passwords or credit card numbers ...
0
votes
2answers
590 views

Will an IP camera still work if the wifi router breaks or is turned off? [closed]

Im using and IP Camera at home and I have the footage being sent to an online file storage service as well as my handheld device through the internet. If the wifi router at home is turned off or ...
3
votes
1answer
319 views

Strange packets coming over wireless, looking for clues

While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
-1
votes
3answers
66k views

Can he see the websites I visited? [duplicate]

I live with someone in the same house so we both use the same wifi. He knows the wep password because he set it up in the first place. He's not a hacker but he can set the wifi system at home. He has ...
2
votes
2answers
2k views

Is it practically possible to spoof a WLAN access point?

I want to try something out, but I wanted to see other opinions from you guys. What I have: WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...