Security for 802.11 wireless networks.
20
votes
9answers
1k views
How can I ensure that I connect to the right wireless Access Point?
Under Windows/Linux, client side. How can I ensure that I'm not connecting to a rogue AP?
Thank you!
15
votes
5answers
2k views
Security impact of using a public password for free WiFi
We have a WiFi network that we want to be public and free.
Does having a password that is known to everyone provide any additional security advantage to the people using this network as opposed to ...
25
votes
9answers
4k views
Is visiting HTTPS websites on a public hotspot secure?
It's often said that HTTPS SSL/TLS connections are encrypted and said to be secure because the communication between the server and me is encrypted (also provides server authentication) so if someone ...
7
votes
2answers
446 views
Any advantage to securing WiFi with a PSK, other than to keep out unauthorized
As I understand WiFi with a PSK, such as WPA(2)-PSK or WEP, anyone on the same network can decrypt anyone elses packets because everybody has the same key.
In which case, if you are not going to ...
8
votes
4answers
2k views
Are WPA2 connections with a shared key secure?
This is something that has been bugging me for quite some time: when I have a wifi access point with WPA2 encryption and I give out the key, how secure are the connections? With WEP you could easily ...
8
votes
5answers
1k views
Access to a router's GUI
During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router.
I realise that someone could log on and be annoying to ...
10
votes
9answers
6k views
Tracking down a rogue access point
Over the course of about a month we have received multiple reports of a rogue access point attempting to intercept traffic. I suspect an attacker is using a wifi pineapple, or similar hardware ...
10
votes
3answers
3k views
How does FaceNiff work?
FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
16
votes
1answer
729 views
WPA significantly less secure than WPA2?
I understand at least theoretically WPA2 is more secure than WPA, but in practice does it make any difference which one you use? From what I know there are no known attacks for either except for ...
5
votes
7answers
1k views
What security risks exist in cell phone apps' data transfer?
Smartphones apps transfer various types of data over the provider's data network (or wifi, if enabled). What security risks are there in this transfer, and how can the risks be mitigated? I'm not ...
8
votes
2answers
327 views
How to implement secure device identification in a for-pay wifi router to prevent usage fraud?
After reading this question about how for-pay wifi routers identify specific devices it got me thinking about what a secure alternative might be. I know that certain research has focused on ...
6
votes
3answers
1k views
Is it possible to get all the data I send through wifi?
Is it possible, that the network administrator (wpa2 wifi network) can log all the data the users send and then get password out of it?
I know it is not possible to get the password if I'm surfing ...
18
votes
6answers
794 views
How to secure a WiFi network?
What do I have to do to secure a WiFi network? Is there any best practices?
I have been recommended to use WPA2 encryption on the router, is that enough? What can I do to improve the security even ...
5
votes
2answers
3k views
Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
7
votes
2answers
446 views
When are HTTP session cookies at risk over Wi-Fi?
If I'm using websites that do not use HTTPS, but I'm on a WEP-protected Wi-Fi network, are my cookies safe from being sniffed by third-parties?
Are cookies only at risk during login, or am I at risk ...
6
votes
1answer
454 views
How to get hold of and use WPA session keys?
I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
3
votes
1answer
3k views
Is my router vulnerable if WPS is enabled but WPS pin code is disabled?
I was reading about Reaver and wi-fi protected setups (WPS).
In my Netgear router I have the option to disable the WPS pin code, but still have the WPS push button enabled. Am I secured with such ...
1
vote
3answers
620 views
How wep wireless security works?
I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless securiy. From this wikipedia article I have got a basic Idea. But I still don't get what the initialize vector is? Is ...
35
votes
7answers
2k views
Is there any security threat with open WiFi connection?
For a few days, my mobile device has been able to catch WiFi signals that are within its radius. It's not asking for a password to use the service.
So, I'm using the WiFi service whenever I need to. ...
21
votes
6answers
5k views
Sharing wifi at a business - Bad Policy?
Is it safe for a small business to let customers use their wifi while waiting?
My friend is starting up a small dentistry practice (1 dentist), and I'm setting up his computers/wifi as a favor. ...
10
votes
1answer
2k views
Is WPA2 WiFi protected against ARP poisoning and sniffing?
Is WPA2 WiFi protected against ARP poisoning? If not, can the ARP poisoner decrypt the packets?
8
votes
2answers
2k views
Can someone get my WPA2 password with honeypots?
Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
6
votes
2answers
2k views
How does deauthing work in aireplay-ng?
I have a question of how aireplay-ng works when it deauths. I mean, it is really easy to disconnect another client from an AP: you just need to run the deauth command (in aireplay-ng) once, specifying ...
5
votes
3answers
556 views
How do I protect myself against 'hole 196'?
I came across this question a while ago and read about hole 196.
Is there something I can install on my laptop to protect it against WPA2 Hole196?
Software (such as Snort or DecaffeintID) can ...
13
votes
3answers
2k views
Are MAC Address Filtering and SSID Hiding still worthwhile?
On a recent certification exam, I was presented with a question about ways to secure an 802.11 wireless network. It was a multiple-answer question, but the only two available answers that related at ...
12
votes
4answers
865 views
Threat assesment for a captive portal
I am interested in setting up a captive portal on a wireless network.
From what I understand I would do this by initially having all guests in a temporary vlan, moving them to the real vlan when ...
8
votes
2answers
2k views
Can an attacker sniff Mac addresses on a wifi?
If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
3
votes
2answers
289 views
intrusion detection on own hotspot?
Is it possible to detect failed logins on the hotspots you create with your windows/linux laptops? So you can detect some dumb brute force/guessing attempts?
For example, a log like this:
TIME DATA - ...
2
votes
1answer
12k views
How long to brute-force WPA password?
Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word.
Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
7
votes
4answers
390 views
Wireless Activity Monitoring for PCI DSS Compliance
In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks
Is the presence of wireless access points tested for by using a wireless analyzer at ...
4
votes
3answers
2k views
WiFi security from another authorized user (roommate)
I believe we use WPA or WPA2 encryption.
To what extent can another user monitor my traffic?
Monitor my desktop activity?
View documents I've saved on my computer?
Tell what sites i visit?
Tell ...
4
votes
2answers
591 views
The Dangers of Open Wi-Fi
I know that the first response to a question titled like so is "seriously?". I know the answers exists, but I am just trying to put everything together.
Using and/or having an open Wi-Fi network is ...
4
votes
2answers
741 views
How is user authentication sent in a public wifi? Radius/802.1x/EAP etc
I visit the airport, I pull out my laptop and connect to a network (no password needed).
I open up my browser and i am presented with a screen saying I need to pay to use the network. If I pay, I ...
1
vote
2answers
211 views
What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?
I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple".
What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
0
votes
2answers
11k views
Wifi WPA cracking with reaver
Hello! This question for anyone who tried or succeeded to crack wifi wpa/wpa2 keys with backtrack linux and reaver. So, I wanted to test on my wifi router. I started everything as described here.
But ...
-2
votes
1answer
181 views
Was WPS fixed (wifi)?
Rumors says that WPS bruteforce vuln doesn't work on never devices, now you have to brute all 10^7 pins. Is that true?
