Tag Info

New answers tagged

6

There are two main ways in which SSL/TLS and EAP may mix: EAP-TLS and EAP-TTLS. Basically, EAP is a generic protocol for exchanging "messages", and the "authentication method" defines the message contents. In the case of the TLS-based EAP methods, the messages contain the various handshake messages from SSL/TLS. In EAP-TLS, the normal case is that the client ...


7

Though the OSI model is more often a source of confusion than enlightenment, it is here reasonably informative. The WiFi encryption occurs in layer 2 ("data link") because it strives to embody a security feature which is inherently related to the data link. Namely, WiFi was designed to be the over-the-air equivalent of wired Ethernet. In Ethernet networks, ...


0

The Wifi Positioning System tells where you are by seeing what wireless access points are visible, looking up their assumed locations in a database, and calculating the most likely position for the WPS antenna. In theory, WPS doesn't require an Internet connection to tell where you are. If the device comes pre-loaded with a database of AP locations, it can ...


0

I have come across a story in which the attackers not only infected the BIOS of the machine making it nearly impossible to remove but transmitted it over micrphone/speakers. Obviously this should be took with a grain of salt as it doesn't seem very practical but the story can be found here!


0

You should be ok with WPA2-PSK AES and a random strong password as that is the biggest downfall of WPA protocol. Ensure that WPS(wifi protected setup) is disabled as this is flawed and easy to crack. Additional security features can include MAC filtering and diabling SSID broadcasting but these also have shortcomings of course.


3

Yes as there has been no exchange of password between client and AP. So it is pretty much impossible.


0

You could always set up a honeypot in conjunction with not broadcasting your SSID (service set identifier). An attacker would not know the real AP exists, thus attack the honeypot which you can log to varying degrees based on how much knowledge you have. A simple google search will wield you with many tools. MAC address filtering is a good security feature ...


2

I am not an expert in how WPA works however I don't think there is a way to set up an AP which accepts any password; the 4-way handshake is a lot more complicated than just client sending password to AP and asking if it's correct. Traditional evil twins work by already knowing the password and are used for launching different kinds of attacks on clients, ...


6

The evil twin attack works because with most versions of WPA there is no validation of the AP. When connecting to an AP a system authenticates trusts that the AP is what it says it is. This isn't a good design frankly, however we are stuck with it. WPA enterprise allows the use of certificates for verification of both AP and connecting system, however it ...


0

The anti-spoofing mechanism of your firewall appears to be blocking the traffic, which means that it's doing what it's supposed to do. Devices exposed to the internet are routinely checked for easy exploits, port scanned, etc. I would say that my client networks are scanned at least once a day, and we mitigate the risk by ensuring the proper defense ...



Top 50 recent answers are included