Hot answers tagged

13

Someone who has administrative access to the network you are connecting to can: View the IP address and domain names of the site you're connecting to (based on DNS query and/or SNI in TLS) and which email provider you're using, irrespective of encryption. You can prevent this by using encrypted third party DNS (e.g. DNSCurve to OpenDNS). The location of ...


7

Since according to your description all systems in your network are affected and independent from the operating system, the chances are high that your router is compromised and the DNS settings are changed. This way most outgoing traffic can be controlled by the attacker which leads to all these redirects to ads. This type of compromise is not uncommon as ...


4

Generally speaking†, one cannot intercept HTTPS communications. However, a hot-spot provider can do the following: See the hostnames you want to connect to from your DNS requests See the IP addresses you connect to If you type in say http://yourbank.com, hoping for a redirect to https://yourbank.com, the hot-spot owner can intercept that and ...


4

You cannot. Not all chipsets/wifi drivers support monitor mode. Broadcom is know for lacking in open source drivers functionality support. It is already public knowledge the RPi 3 current driver implementation does not support monitor mode. PSA: The Raspberry Pi 3's embedded WiFi card does not support promiscuous mode. If you are buying a replacement, do ...


4

Since the hacker now controls any communication between the victim and the outside world, he could now reuse the real certificate issued by GeoTrust Global CA for mail.google.com domain when I access the HTTP server at 192.168.1.50. No he can't. To identify yourself with a certificate (which needs to be done to fake the server) you need to have access ...


4

MAC filtering doesn't provide an high security. An attacker can simply see which devices (and their relative MACs) are connected to your network, and spoof one of theese MACs. When he changes it to his machine, he can connects to your network without any problem. In conclusion, MAC address filtering doesn't increase your security.


2

If the site you are visiting uses HTTPS for the entire site (not just the login page) and you check that it actually is using HTTPS, with a valid certificate (e.g., no warnings about a bad certificate) and it is the URL you want to go to, then you are safe. (Except against extremely strong adversaries like governments who have the ability to coerce ...


2

You appear to have answered your own question. An advanced user can spoof a MAC address, but non-advanced users cannot. MAC address filtering provides limited access to those who do not have the skill to spoof a MAC address.


1

This doesn't directly answer your question (it was answered adequately above), but given your paranoia the one thing you do need to be wary of is using public terminals provided by a vendor, such as in a library, internet cafe, employer, school, etc. If they are providing you the endpoint/device, they can manipulate the certificate chain and intercept all ...


1

Disable wireless administration: Change the setting that allows administration of the router through a wireless connection to off . This means that you need to connect with a LAN cable for administration. This disables any wireless hacking into the router.


1

Wifi (even with password) is usually set up as being security equivalent to an open wired network (plug in to network, you are presumed to supposed to be on it). All communcation by any party on the network is fully visible. Security can be applied on top of the unsecured communication, but an open wired network has next to no security built-in (other than ...


1

While the duplicate that people have linked to does cover most of the story, there's actually a way to make MAC filtering work: enable client isolation. Client isolation prevents individual WiFi clients from communicating with each other, effectively segregating their traffic. Since in order to know the MAC of a legitimate client you'd need to see traffic ...


1

As you said, MAC filtering provides an extra layer of security, as the potential attacker would need to spoof his MAC address (something we would do anyways if he doesn't want to get caught). To provide a good security for your Wi-Fi you should have MAC filtering enabled (with a white list), DHCP disabled with fixed IP for your devices (if possible), WPS ...


1

MAC addresses are only relevant to the nearest hop. So you can only spoof a MAC address within a LAN. That means that someone wanting to get around any restrictions needs to connect to your network, or to a network which is directly connected to your network. i.e. the attack surface is reduced. Like port firewalling, MAC filtering is a great way to cut down ...


1

Beacons: Beacon frame is one of the management frames in IEEE 802.11 based WLANs. It contains all the information about the network. Beacon frames are transmitted periodically to announce the presence of a wireless LAN. Your problem may because one of the following: Your wireless adapter is not on monitor mode Your wireless adapter doesn't support packet ...


1

If you give a guest a wifi password, they can share that password though obviously you could politely ask them to not share it. The only way to prevent that is never share one global wifi password with guests you do not trust. The best practice would be to maintain your home wifi network (secret password, never give to others) and a shareable guest network ...



Only top voted, non community-wiki answers of a minimum length are eligible