Tag Info

Hot answers tagged

114

Yes, you should be worried. You should contact the hotel staff, and you should not use the network any more. It is likely the router’s DNS is manipulated. It is possible that the hotel wants to make some money on the side by injecting ads. However, this script looks evil. It tries to open a dialog that tricks you into installing a trojan by displaying a ...


11

Without looking at the code: Yes, you should be worried! Nobody should tamper with your internet traffic, as this opens many possible threat scenarios. Even if you try to open any page and it is showing a page instead that is asking for the WiFi credentials this is impossible, as the router has first redirected your DNS query and then pretends to be the ...


5

I felt compelled to offer a less paranoid answer, having at times myself used "untrusted" networks for otherwise secure transactions. It is certainly true that a network where data is transported via plaintext is susceptible to man-in-the-middle (MITM) attacks. In such a network, both the data you receive and the data you send can potentially be read and ...


1

I think there is some confusion here as to what 'BYOD' is. As far as I am aware, 'Bring Your Own Device' refers to the policies of an enterprise that allow for employees to connect to a corporate network (generally at a place of work) from their own personal devices. Many large enterprises will employ some type of MDM (mobile device management) solution in ...


1

In general, outwith the WPS stuff, the main issue with WPA/WPA2 (assuming we're talking PSK authentication here and not the enterprise stuff) is brute force of keys. Tools like aircrack-ng can be used to capture and crack weak Pre-Shared Keys.


1

As you don't have access to the uplink you could try a passive approach by installing a honeypot. A honeypot does not actively scan the network and is generally considered legal. It simply runs in the background waiting to be attacked. You are inside the network so if you are attacked you will get detailed information on the attack vector and source.


1

The beacons are still sent, however the SSID field is set to NULL. You can learn the SSID when a client is in fact connecting. This can be done through being patient, or by spoofing a deauthentication frame coming from the client. Instead of increasing the security posture, I think that the security is instead weakened by turning off the SSID broadcast. ...


1

Can my computer be hacked through my WiFi connection? Yes. There were/are many publicly known vulnerabilities in routers we all use. Nobody knows how many are out there which are not publicly disclosed yet, but known to malicious people. About the same amount (more? less? infinite?) is in programs you use every day on your computer. So yes, looks pretty ...


1

Deploy 802.1x on the WiFi controllers or WPA2-Enterprise with a RADIUS server. This will allow you to track IP assignments to usernames. You could also record MAC addresses of these devices and map them to usernames in a spreadsheet. Depends what decade you want to be in.



Only top voted, non community-wiki answers of a minimum length are eligible