Tag Info

Hot answers tagged

116

Yes, you should be worried. You should contact the hotel staff, and you should not use the network any more. It is likely the router’s DNS is manipulated. It is possible that the hotel wants to make some money on the side by injecting ads. However, this script looks evil. It tries to open a dialog that tricks you into installing a trojan by displaying a ...


49

Yes they can but unless your neighbor has the required technical expertise, its highly doubtful. To view incoming and outgoing traffic you need specific software to monitor network packets and the tech knowledge to actually do it. Most routers only keep a syslog and unless they are using software like wireshark to monitor/capture your packets, they cannot ...


37

If you get a VPN and use that for browsing, that will hide all your traffic from both your neighbour and their ISP.


36

If you're using a machine controlled by the LAN administrator, then you have to assume they can read anything you do on it. They could have software to log your activity, they could have installed extra SSL certificates that allow them to MITM your connection to GMail. If you believe your computer has not been tampered with and is not under the control of ...


29

What about using tor? Keep in mind that your speed will be affected*. As other people said, using any private mode in your browser is not going to be of any help. *EDIT: The slowdown heavily depends on the network topology, the number of nodes, how much traffic the nodes are handling and what you are downloading. Here you can find some explanations about ...


25

Yes they can actually. What it boils down to is that they can see which websites you are running by looking at: Clear HTTP traffic DNS requests sent One thing you could do is purchase an encrypted VPN and run all your internet traffic through the VPN. This way your neighbours will not be able to see what you are doing.


22

To complement @David's and @Steve's answers: If the attacker ("Adam", in your case) has administrative access to your machine, then he can learn all your secrets. Installing an extra root CA, under his control, to run routine MitM interception on your SSL connections is a popular tools for honest (but nosy) sysadmins: it is a one-time installation which ...


21

MAC address filtering is a very weak form of wifi protection: the MAC addresses of your devices can be easily eavesdropped with tools like wireshark the MAC addresses of their devices can be easily changed (OS dependent, but typically an option in Network Settings). MAC address filtering is annoying to maintain. You have to login to your router ...


17

You can't. It doesn't matter whether the wifi is encrypted or not: you can't know whether the access point is trustworthy. A WPA2 access point with a strong password doesn't help when the access point itself is a rogue access point put up by someone who may or may not be the café or hotel owner. And yes, it happens — people put up open access points with ...


17

As David says, the provider of your network usually can't see data passed over https connections. However, your Gmail address is not necessarily passed only over https connections. For example, if you log into StackExchange using your secret Gmail account and visit the http (not https) version of your user profile page, then your Gmail address is sent to ...


12

Looking at the OUI, it appears you have 3 Apple MACs connected, 1 Netgear MAC, and 3 unknown MACs. The Apple and Netgear MACs may be spoofed; please compare them against your own devices. Then, if you can, compare their traffic against the legitimate device's traffic to see if those MAC's are being spoofed. The unknown MACs are almost certainly spoofed. ...


11

Without looking at the code: Yes, you should be worried! Nobody should tamper with your internet traffic, as this opens many possible threat scenarios. Even if you try to open any page and it is showing a page instead that is asking for the WiFi credentials this is impossible, as the router has first redirected your DNS query and then pretends to be the ...


10

When my laptop is using a network I don't control (basically anything that's not home) it wears pretty red socks to reroute all traffic into the SOCKS5 proxy built into OpenSSH and then to a server I rent anyways for my website to protect my traffic. You can use tor as well but I intensely dislike tor (for reasons off topic here). This is the socks_up ...


10

In practice, it depends on the router they're using (and, specifically, on the firmware it's running). Basically all home WiFi routers have the technical ability to log visited URLs, as long as their firmware includes such a feature (and it's not exactly a complicated one). The main questions are: whether the router firmware supports such a logging ...


9

If you want to penetest a wifi. The wifi card would need to support monitor mode. However vmware uses it's own usb drivers so you might want to install kali to your hard drive or run it off a cd/usb. If you want to pick up weak signal's you need a card with high watt's and a good antenna www.alfa.com.tw has some high power wifi cards at a reasonable price.


7

Changing the Default SSID would serve no particular security purpose where it's not entirely predictable (e.g. 'netgear'). It would allow you to easily identify your wireless network though, if there are lots of others about. It used to be the case where companies used one string for all their APs that it was relevant to Rainbow table generation (more ...


7

Though the OSI model is more often a source of confusion than enlightenment, it is here reasonably informative. The WiFi encryption occurs in layer 2 ("data link") because it strives to embody a security feature which is inherently related to the data link. Namely, WiFi was designed to be the over-the-air equivalent of wired Ethernet. In Ethernet networks, ...


7

I'm an enterprise penetration tester for my company, and breaking into systems is what I do day in and day out. I'll share some of the techniques I use to perform man-in-the-middle attacks, to give you an idea of what to look for (as well as how to defend). If none of these scenarios sounds like something you encountered, then there's a significant ...


6

What you are thinking of doing is incredible similar to an existing attack known as the karma attack, made popular by the super fun Wifi Pineapple. The basic principle behind the attack is for the attacker to setup an AP that responds to the wireless probe packets clients send out when attempting to connect to a previously trusted AP. By responding to each ...


6

The short answer is probably. The actual answer depends entirely on what "good enough" means to you. Do you need to disallow WiFi altogether? Perhaps you really need Ethernet cables run in pressure-monitored shielded conduit run under an access-controlled, video-monitored raised floor with locks on the exposed ports? Okay, that is overkill for almost ...


6

I would call this an evil twin attack. And it's not uncommon to see corporate laptops vulnerable to this. WPA2-Enterprise supports a number of EAPs - Extensible Authentication Protocols. (Wikipedia article) The security depends on which EAP you use, and how you configure it. Some EAPs more vulnerable to an "evil twin" attack than PSK, as an attacker doesn't ...


6

WPA2-Enterprise is (in my opinion) considerably more secure than PSK. Reasons WPA2-PSK has a single shared key amongst all devices. that means that if one of the devices is compromised the key is lost, so the more devices you have the risk of loss or compromise increases. As against this WPA2-Enterprise has per user secrets, so not the same problem. ...


6

I mean they cannot steal my Paypal credentials because they are encrypted, all they can do is access stuff which is not that important to me in the first place. This is a huge assumption. An attacker could use something like sslstrip to change all references of HTTPS to HTTP. It is quite common for websites to serve content via HTTP and use an ...


6

There are plenty of wireless cards to choose from in this area. The best in my opinion is the trusty old alfa AWUS036H with the rtl8187 chip-set. This card has been my favorite for a long time and is still going strong after years of persistent use. The alfa is also 'plug and play' for pretty much all Linux distros and has good drivers for windows with only ...


5

If they track their DHCP Client IP, will I be caught? Yes. Most routers themselves list the computers connected to them in the status panel. If yes, how? By my computer name or IP address or MAC Address? The router list usually shows IPs and MACs, and sometimes computer network names (which can be found out in other ways) Of course, MACs can be ...


5

WPS is a quick-config system that allows you to connect to a router without doing any configuration on the client side. It works by exchanging a pin code that acts as a temporary key, in order to transmit configuration details to the client. Unfortunately, the key is short, and easily brute-forced. The solution is to turn off WPS on your router, which you ...


5

Preventing the camera from talking to the outside world is trivial, or nigh impossible, depending on how evil the camera is. On one hand, any decent router should be able to block or not-block traffic from any local IP to the outside world; therefore, you may configure your router to: assign a specific IP address to the camera (based on its MAC address); ...


5

Most WiFi enabled devices broadcast their Mac address when probing for networks to join in the vicinity. By placing your own WiFi device in promiscuous/listening mode and utilizing a tool like Aircrack-ng, you can see and record all broadcast traffic enabling you to see if a device with a specific MAC address comes within earshot of your listening device. ...


5

You may already be safe: if you typed your IP address into the address bar of a computer connected to the router, being able to access the router admin page is normal. The router knows your computer is on the "inside" part of the network, and should be allowed to control the router. The only time you have a problem is if you type your IP address into a ...


5

Encrypt. VPN, ssl, https, etc. That's what they are for, to create secure channels within insecure environments. HTTPS is an option for 'browsing'. Always make sure you are using the https version of sites instead of the http version. There are browser plug-ins that can help with that, too. Challenge your assumption that you cannot afford VPNs, With a ...



Only top voted, non community-wiki answers of a minimum length are eligible