Tag Info

New answers tagged

1

You've got it hooked up backwards if you want to secure your network against guests. Computers on the 192.168.0.0/24 network can freely access computers on the 192.168.1.0/24 network. If you want to use double-NAT to create a guest network, you need to place the guest network closer to the Internet connection than the network you want to protect from them. ...


3

This is not secure, as you have not isolated the guest network. They are still able to reach your 192.168.1.3 client. I guess the reason why it do not respond to ping, is because it is configured not to respond to ping. The host firewall on this computer probably block most of the traffic anyway. If you want to isolate the wifi clients in a proper way ...


2

The thing about a VPN is that the connection between your computer and the VPN end point is encrypted. If you go to Joe's Coffee House and use their public WiFi, depending on the configuration it is possible that anyone in the range of your WiFi radio can snoop on your traffic. Even if Joe has secured his WiFi properly, anyone with access to the physical ...


1

Barring unforeseen weaknesses in protocols or implementations of your VPN service, this should give you a reasonable expectation of privacy. All of your traffic that traverses the VPN will be encrypted from your system to the VPN provider. At that point it will travel normally. To your specific question of emails and login details, those should also be ...


1

The device looks like a FM antenna; there were also some 3G/LTE routers that look almost like that (now they're mostly soapbar or cube shaped, it seems). It has happened to me to be connected to a WiFi and a cell network, or run diagnostics on one while connected to the other. And fiddling with a cell antenna's position in the hope of getting better ...


96

Perhaps he was using one of these wireless chargers that are built into the tables. It certainly fits your description.


3

If your laptop has an RFID/NFC reader (some Dell laptops have them) then yes an antenna can be used to "talk" to the laptop and exploit a vulnerability in the reader's driver, but readers are usually placed near the touchpad rather than behind the laptop, and while this antenna can most likely send any data to the reader, I doubt it's sensitive enough to ...


4

Although I agree with the other posters that the device in question probably was not a hack attempt, I disagree with their conclusion that he was not trying to hack you. In fact, I recommend adopting the strategy that everybody is trying to hack your equipment. That sounds paranoid, but it leads to the type of security that is more difficult (i.e. ...


100

No, you are just being paranoid. You were probably already connected to him over WiFi. There are many attacks he could have run this way without additional devices. Also if he would have wanted to hack you, he would not have thrown his strange hacking device in your face. He would have hidden it below the table. Side note: I feel like most of the people ...


33

I don't know what that gizmo is, but unless you've got a really bizarre laptop, it wouldn't be useful for attacking your computer. Outside of a laboratory setting, attacking a computer means using its standard input or output capabilities. An ordinary wifi or Bluetooth antenna can reach your laptop from anywhere in the room; a directional antenna can ...


8

As @cremefraiche said, the object fits the profile of an wireless iPod/iPhone charger. As the coil works as an antenna, it could theoretically be used to send data from the device. To investigate if this device is charger or a surveillance bug, you can try to pry it open. If the 30-pin connector has anything else than the power-lines connected, it is ...


0

SSID Broadcasting On Client devices passively listen for known networks. Clients initiate connection when a known network is heard. Attackers do not know what networks un-associated client devices are looking for. Turing broadcasting on will not prevent all clients from actively scanning for known networks. This is implementation specific ...


2

If you control the network, there really isn't an advantage (under almost any circumstances). What a VPN does is simulate having a leased line from your computer to the network the VPN server is on. If you are already on that network, there is literally no advantage (unless you enjoy encryption overhead). There is one main exception: if you control the ...


0

The advantages of using a VPN is that content you access on the internet and anything sent to a website is encrypted and routed through vpn. When a connection is encrypted it stops people from monitoring your connection. So all data send to website can't be read by anyone except the VPN provider. When a connection is not encrypted a attacker could ...


2

Client devices will actively probe known networks regardless if SSID broadcasting for that particular network is turned on or not. While a passive scan is theoretically possible, it is very seldom implemented. This is because the client needs to cycle through all channels, spending time on each channel to listen for beacons. This would increase the amount of ...


7

Take a look at the WiFi Pineapple, which is a wireless MITM impersonization device available for $100 plus shipping. The attacker pretty much only has to power it up and configure it, and it will start offering instant MITM attacks. If a mobile device is probing for an already-known open SSID, it will happily provide it with a working internet connection. ...


0

Although https (SSL/TLS) is a security layer you really want to use wherever and whenever possible, it is not always available, such as with a lot of chat services. If you enable proper wifi security settings (WPA2) with (one) password that is known to everyone who needs access to the network, each client (and each session) gets its own unique encryption ...


1

Your friend is likely using a network packets capture tool like wireshark or tcpdump to collect data that are transferred from and to your machine. At least to make it hard to your friend you have to use services or websites that offer data encryption which is commonly implemented using TLS, for instance when you are browsing a website make sure the website ...


3

In a WiFi network, all information which is sent over the network is broadcasted over the air. Usually network interfaces are configured to just ignore any network traffic not addressed to them, but there are tools available which change them to "promiscuous mode" which allows them to also log and show any traffic which they receive even though it is ...


0

Windows stores these encrypted in the following locations: In Windows XP, wireless keys are stored in the Registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\[Interface Guid]. The [Interface Guid] is a unique GUID value the represents your wireless network card. The keys are well-encrypted by Windows operating system, so you ...


0

I think the easier way to solve this problem is to broadcast multiple SSIDs. Most SoHo routers do have support for multiple SSIDs. With multiple SSIDs, you could designate 1 for personal/family usage and 1 for guest usage. The traffic on each SSID is isolated from the other through VLAN tagging, however it would be prudent to double check as I have come ...


0

If deauth is only used to capture handshake then its no big deal that it is possible because if an attacker listens in on the com he will capture the handshake within 1 or 2 days anyway. This is why it is important to have 13 char password because that would take several billion years to crack if it was captured anyway.


0

Some wireless access points implement client separation to prevent comms between connected devices more detail here: Wireless client isolation - how does it work, and can it be bypassed? this would help to prevent the unencrypted traffic being viewed. But even with that in place if the encryption is based on a pre-shared key (PSK) and the attacker has the ...


0

Edit: Reading this post: Are WPA2 connections with a shared key secure? I realise that I know too little about the topic. Original post remains below. Does Wifi encryption create a private tunnel between the adapter and the accesspoint? No. Not even with 802.1X Authentication. -> See https://en.wikipedia.org/wiki/IEEE_802.1X#Shared_media When non ...


-1

No, the privacy of clear text data does not depend on the encryption mode of the network, assuming that other (legitimate) machines are connected to the same access point. By default machines will not show (clear text data) traffic of other machines, however it is possible to do so using tools that poison the ARP table, this is called (you guessed it right) ...


2

First, a comment; sometimes (read "almost always") I get a cool new toy, app, technology and I try to fit it in in every possible place. Even in places that don't work, I enjoy figuring out why. It's a learning experience. The term "Threat Model" may sound either overly theoretical, or dismissive of your case. The purpose is for the security consultant ...


1

Having once worked at an edu, it was our goal to make things as seamless and painless for the clients (students) of the University. As a professional, there were many things that we championed for especially when it came to security. For example, we opposed P2P network, because traffic patterns at the time pointed to students downloading music (back then ...



Top 50 recent answers are included