Tag Info

New answers tagged

0

Yes you can attack this. But if there're no significant improvements in cryptanalysis (quite unlikely for AES) you'll be dead a long time before the computations finish. Now to decompose your question: Is AES(-128/-256) by itself secure? Yes, the best cryptologists in the world believe that AES has no significant weaknesses and recent NSA leaks shows that ...


2

The quick answer is "no". We know from long experience that nothing is "perfectly" secure. AES has no significant flaws that we know about today, and has key sizes that are large enough to resist brute force attacks forever. People have been studying it for a decade, looking for weaknesses, and have only come up with some weak keys, and reduced round ...


1

You're missing the bigger question: why? Encryption adds greatly to the coffee shop's cost. There are small one-time costs incurred when someone has to configure the access points, assign passwords, manage them, change them, post signs saying "this week's password is C0ffeebuck$" etc. There is an ongoing high payroll cost, too. Baristas are paid to ...


0

Even with WPA2/AES, someone can see the password, or if that is not possible, here is a simple way:- See some people who come around daily. Get some backdoors or rootkits for them. It would require skill but anything on same network/file share can be hacked. Go in, connect to your internet, get the key, and voila. As simple as that. So no amount of ...


0

I'm sure that Apple tries to make it secure but there's no real way to know exactly how they define "secure". As it sounds like you have some fairly strict requirements for considering such a connection secure, I'd assume that what the OS provides is using a lower standard. So, if you can, open the page in your browser and perform your standard security ...


0

If it is a known connection(the user has connected to it before) chances are it'll automatically connect to that one and they wouldn't have to enter the password again, but if they'd never connected before, chances are the user will connect to one without a password if they do not know the password to the protected one, because hey, 'free wifi'. Any devices ...


1

To check for information about nearby networks using an inbuilt OS X utility called Wireless Diagnostics, follow the steps: 1. Option+Click on the WIFI Menu Icon. 2. Click on "Open Wireless Diagnostics". 3. As Wireless Diagnostics opens, go to Menu Item "Window" and select 'Scan'. This will show you information about nearby networks. Hope that helps.


3

WPA is the authentication and encryption system preventing people not knowing the right password to access a Wifi network. However, no matter if it is WPA2 protected or not, you may legitimately not trust Wifi networks from hotels and other public places. The usual advice in such condition is to use a VPN. It is an application which will build a secured ...


-1

Yes it is true that two devices on the same network can 'sniff' each other. You can see plenty of documentation and examples of this on google. A brief history lesson: Wi-Fi Protected Access (WPA) was created as a direct response and replacement increasing number of vulnerabilities in the WEP standard. personally: I would stick to WPA2 with a strong ...


1

I suspect this is to prevent inadvertient activation of service. Imagine you have bougt a one-hour pass to use at a later time. When you start up your computer, your computer might try to update its antivirus, or may try to download some windows updates, thus prematurely starting your one-hour pass when you dont want. Thus, they have a captcha to activate ...


1

Since one factor is the awkwardness of entering passwords, especially on a tablet. there is a good argument to stick with alphanumerics and forget about symbols. It's also a more general problem, website passwords and such, that most symbols are rejected. But since you only need the enter the password once per device. there's not a huge obstacle there. ...


2

Different Encryption Key Per User It is important to start by clarifying your question since terminology is important when discussing encryption: I think a more pointed question in pursuit of your goal is "What technology would allow a sufficiently different encryption key per user, so that when multiple users are on the same AP it would be very difficult ...


0

Check the router DNS settings. I suspect that the infected laptop changed the DNS settings of your router to use malicious DNS serverĀ¹ that return fake entries for pagead2.googlesyndication.com. The virus should not have been able to do that (it should have required a password they don't have), but sometimes routers have holes that allow changing the ...


0

It seems to be a DNS issue, as others have said. Whether your router is infected or was reconfigured by malware is a difficult question to answer. I hope this will at least give you a prtial answer. Investigate your DNS settings. First, open a command prompt. In windows, click start menu, type cmd. Right click CMD and select "Run as administrator" if that ...


-1

An infection of your router is unlikely. ISP's have been known to inject their own ads though. You might want to try changing your router's DNS to use the DNS servers of a third party, such as Google's public DNS or OpenDNS. If you do this and the ads go away, you have isolated the issue. If not, it lies somewhere else.


2

Wireless networks that do not ask for password sen data over the air unencrypted and anyone can : Scan your pc/phone to actively try to exploit a component in your hardware all data via http:// e.g cookies,downloads,images,passwords and email sent Do Arp Spoofing Additionally you can't even be sure that the Wi-fi network is legitimate. That's all i ...


10

an open wireless connection means there is no password exchange required to connect to the network. most data used over an open wireless connection is easily observed. once connected however, there are ways to encrypt your data such as using a vpn. This would allow data to be encrypted over an open wireless connection like public hotspots. though an observer ...


20

Yep. Open wireless networks are entirely unencrypted; anyone can see all the data you send (even if they aren't connected to the network).


1

You should be more worried about rouge access points and de-auth attacks not the encryption on your access point. The encryption on WPA2 is pretty secure, so hackers generally don't attack it. Instead hackers usually will try to get the client to connect to a rouge (evil) access point that they control. If they can get a person to connect to the rouge ...


4

802.1X is NOT an encryption type. It is basically just a per-user (e.g. username and password) authentication mechanism. WPA2 is a security scheme that specifies two main aspects of your wireless security: Authentication: Your choice of PSK ("Personal") or 802.1X ("Enterprise"). Encryption: Always AES-CCMP. If you're using WPA2 security on your network, ...


1

This entirely depends on the infrastructure behind the wireless AP you are connected to. What can be seen more less: Phone Model, Location, Used Services, Used or In Usage Applications (such as application names), Bandwidth usage, Total amount of data spend per application.(both incoming and outgoing), Visited web sites(url list) and total amount of ...


2

These types of question has depends answers. The answer varies depending on the policies of owner of open WiFi and plans among other factors. but This question specially has 2 aspects: (second aspect may be your answer) First one: connecting people to an open WiFi network, without having the owner's permission and following his/her terms of service is ...


5

You mention two distinct technologies: an access portal and client isolation. In comments you say you are not talking about the access portal part, but rather client isolation. Most consumer and corporate access points and wireless controllers I have touched have this feature. It is simply built-in to the hardware you are working with, usually a checkbox ...


1

Is this the type of behavior you are referring to? What is a VAP? Every VAP appears as an independent AP to the client. The VAPs emulate the operations of a physical AP at the MAC level. All wireless management traffic that would be transmitted by one physical AP is also transmitted by the VAP. For example, a single physical AP might ...


1

I solve it for both WPA and WPA2 using MIC_SET, ACK and NONCE fields. MIC_SET | ACK | NONCE | Packet Number 0 | 1 | x | 1 1 | 0 | x | 2 1 | 1 | x | 3 1 | 0 | 0 | 4 Where with x I indicate that the NONCE has a value different of ...


2

There are a number a possible causes. Check if your wireless device is configured to drop connections when the signal strength drops below some minimum threshold, I've known a number of devices to have this "feature". That's only a potential issue if you have a weak signal though. Also check that your SSID is unique so that it isn't clashing with another ...


1

No, it's just an evidence there are other Wifi network around you. These other Wifi networks most probably belong to other people or companies. You would be able to connect to them only if they give you the associated password, without that you can only see that they are here without being able to actually connect to them.


2

If he knows the admin password to the WiFi router or network switch he can monitor every URL that you access. Many routers even come with monitoring facilities built into them to support monitoring of one's kids' internet activities. Using SSL prevents your friend form knowing the contents of what is transmitted over the pages but the sites you access are ...


1

Well it depends. If your friend is using Wireshark or similar software that allows capture the packets, then yes he will be able to intercepts the HTTP traffic in WiFi network. So put it simple: If you and your friends are browsing HTTP web pages, then "computer wizard" will be able to see what you and your friends are doing.


5

Incognito mode does not provide any protection from Wi-Fi snooping; it merely stops your browser from saving your browsing history locally. If you're using unsecured Wi-Fi (or secured Wi-Fi where the attacker knows the password), there is no way to detect if your friend has been recording your web traffic. Any http sites you visited have potential to have ...


2

Actually visiting your browser history is not possible as long as he doesn't has acces to your computer. Assuming your computer is not infected by him and he has no physical access to your computer. Although inspecting, monitoring or saving the network traffic is possible. What you can do is. Just ask him from man-to-man. Secondly you can use a Virtual ...


0

It is also recommended you disable the autoconnect feature which some OS's or phones will have. if you have connected previously to an open network (i.e. McDonalds wifi, or an airport wifi) your device - if it sees the same SSID - will attempt to connect automatically. Hackers can setup a network using a laptop or such with the same SSID, and fool your ...



Top 50 recent answers are included