New answers tagged wireless
You might be interested in this talk that was given at DEFCON a few years back. Summary: if you are using WPA2, a separate key is used to encrypt broadcast traffic vs. unicast traffic. So in that sense, connections are isolated from each other. HOWEVER, you're still vulnerable to an insider attack; a malicious client could spoof ARP and intercept traffic ...
When a network device uses a value 00:00:00:00:00:00 as a MAC-address, it is being used as multicast address, however the request will be proceeded by all devices which would receive it (so the machines in the multicast group). Your description doesn't provide sufficient detail to otherwise infer what might be happening, however we can guess reasonable ...
It would be just for the scope but for the wireless you need to prove they do not cross connect. Here I run a complete separate network and internet connection for all of our PCI stuff.
Yes As a challenge-response protocol, MS-CHAP2 restricts how you can store the password server-side. And it is somewhat weaker than bcrypt. You could provide a configuration option like: Support MS-CHAP2? (warning: enabling this stores passwords insecurely)
Top 50 recent answers are included