Hot answers tagged

21

It is unlikely a hacker stealing internet access will have the sophistication (or need) to make the wireless network change between different names. It is more likely that someone/some device nearby installed a new wireless network that happen to broadcast on the same channel as yours (there are only 3 or 4 non-overlapping ones to choose from) and have a ...


13

Someone who has administrative access to the network you are connecting to can: View the IP address and domain names of the site you're connecting to (based on DNS query and/or SNI in TLS) and which email provider you're using, irrespective of encryption. You can prevent this by using encrypted third party DNS (e.g. DNSCurve to OpenDNS). The location of ...


4

Generally speaking†, one cannot intercept HTTPS communications. However, a hot-spot provider can do the following: See the hostnames you want to connect to from your DNS requests See the IP addresses you connect to If you type in say http://yourbank.com, hoping for a redirect to https://yourbank.com, the hot-spot owner can intercept that and ...


4

You cannot. Not all chipsets/wifi drivers support monitor mode. Broadcom is know for lacking in open source drivers functionality support. It is already public knowledge the RPi 3 current driver implementation does not support monitor mode. PSA: The Raspberry Pi 3's embedded WiFi card does not support promiscuous mode. If you are buying a replacement, do ...


4

Since the hacker now controls any communication between the victim and the outside world, he could now reuse the real certificate issued by GeoTrust Global CA for mail.google.com domain when I access the HTTP server at 192.168.1.50. No he can't. To identify yourself with a certificate (which needs to be done to fake the server) you need to have access ...


4

You've hit it pretty hard on the head of the nail here and driven it home. It doesn't make sense. This really only matters if some sort of other filter is in place to prevent connection, and it wasn't present on this one. Even then you'd still probably have a key in place to make sure no one can snoop on plaintext. It just doesn't make sense to do this.


4

This problem is solved by using a VPN. Using a VPN, your data is not visible in plain-text to someone who is capturing the network traffic. Depending on how "techie" you are, you have various options. If you are not technology savvy, look for a VPN service. There are a lot out there, but product recommendation is out of the scope of stackexchange. Just ...


3

To your fear that a local hacker is trying to compromise your internet connection and/or your computer, it's actually quite hard to "fake" an WPA2-AES protected access point: the handshake doesn't expose the key and if there were a rogue device posing as the AT&T router, the handshake would fail with an error message. So, as long as you heeded any ...


3

Here are some things you can try that may help you out. As you stated that you are not too computer savvy, I'll not be giving you any difficult instruction if I can help it. Possibly try turning off your router when not in use. This may reset your password to the default (I believe this might be printed on the device itself) If you can plug a hard line ...


3

In this case, no, your device will not be subject to MITM of https traffic. It is possible for employers to deploy a root certificate to machines in order to install a MITM proxy. (BlueCoat is a company that offers such a device commercially.) However, that requires a "trusted root" certificate to be installed in the client computers. In your case, the ...


2

The reason a computer would be listed in that section with an external IP is that the malicious device wants its traffic to look like it came from that other address. This is commonly done as part of a DDOS of other places, because the false source IP causes all of the returned traffic to head to that other address (in cases like amplification attacks this ...


2

What is this certificate being used for? A standard implementation of WPA or WPA2 in enterprise environments is to use certificate-based authentication for wireless network access. For company-owned devices, it makes connecting to a company wireless network seamless - the required certificates are automatically installed at some point (during ...


2

TKIP is vulnerable to an attack similar to the WEP "ChopChop" attack. TKIP uses MIC for guaranteeing the integrity of an encrypted frame. If more than two MIC failures are observed in a 60 second window, both the Access Point (AP) and client station shut down for 60 seconds. The newer TKIP attack uses a mechanism similar to the “chopchop” WEP attack to ...


2

As described, the disadvantage to allowing TKIP (also known as WPA) is that there is a known weakness. AES (used in WPA2) is more robust. Setting it to a mode that allows both will allow older devices that don't support WPA2 to connect in WPA mode, while devices that do support WPA2 will use that instead. Setting it to AES only comes at the price of ...


2

You'll need to find a secure channel to exchange the new password over. Communicating verbally would work just fine. As to an automatic notification, the only way to do this would be to flash your router with custom firmware which would allow you to write scripts to add functionality, such as DD-WRT. However, DD-WRT is unsupported on the Huawei WS319. As ...


2

Most places that provide free WiFi just don't care about security, and they want to make it as easy as possible for customers to connect. Since users of such open WiFi by-and-large don't care about security either, there's not much pressure for them to change that mentality. However it's not really as difficult to secure such a network as others here have ...


1

In creating WPA2-AES, priority was given to 1) using the passphrase to ensure that the client was authorized to use the system, and 2) ensuring that there was no way for the client to inadvertently expose the passphrase to someone posing as the host. It succeeds at these two things. It was not created with the intention of providing full secrecy between ...


1

Using a VPN is good if by "hacked", you meant that the web traffic was seen by a third party. (*) However, if you meant by "hacked" that a virus was installed on the cell phone via the hotel wifi, it is different. They cell phone software might have a vulnerability, that could be well-known or not. I suggest updating to the latest version your cell phone ...


1

I assume that you are connecting from your personal device. Many companies have their own certificates on their network somewhere in order for them to check HTTPS traffic going through their network. In many countries it is legal for companies to read traffic using their equipment, and they find this necessary to protect against viruses etc. As they can't ...


1

You might have at least a compromised device sending packets with spoofed IP addresses in your internal network. Nowadays there is already malware that will make a device assume several IP addresses, or cycle through several IP addresses, to evade blacklisting/security measures activated from the victims. I would not blacklist a particular IP address; I ...


1

To properly expand your thesis, you should probably read the rest of the article you posted. Under "Android and Google Service Mitigations" it explains the current posture of Google to deal with these threats. While the best solution is naturally to patch the OS at the lowest level the bug exists, it is effective enough to patch the apps in userland that ...


1

This doesn't directly answer your question (it was answered adequately above), but given your paranoia the one thing you do need to be wary of is using public terminals provided by a vendor, such as in a library, internet cafe, employer, school, etc. If they are providing you the endpoint/device, they can manipulate the certificate chain and intercept all ...


1

Disable wireless administration: Change the setting that allows administration of the router through a wireless connection to off . This means that you need to connect with a LAN cable for administration. This disables any wireless hacking into the router.


1

Wifi (even with password) is usually set up as being security equivalent to an open wired network (plug in to network, you are presumed to supposed to be on it). All communcation by any party on the network is fully visible. Security can be applied on top of the unsecured communication, but an open wired network has next to no security built-in (other than ...



Only top voted, non community-wiki answers of a minimum length are eligible