Timeline for My school wants me to download an SSL certificate to connect to WiFi. Can I just avoid doing anything private while on the WiFi?
Current License: CC BY-SA 4.0
15 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 4 at 15:23 | comment | added | schroeder♦ | @R..GitHubSTOPHELPINGICE no it is not | |
| Sep 4 at 15:22 | comment | added | schroeder♦ | @Questor monitoring is not inherently malicious ... | |
| Sep 4 at 14:54 | comment | added | Questor | @schroeder They aren't intercepting private communications accidently. | |
| Sep 4 at 1:12 | comment | added | R.. GitHub STOP HELPING ICE | @jrw32982: The feeling that I can't trust my private communications aren't being intercepted by someone is already a concrete harm, even if nobody ever bothers to intercept them. The breaking of certificate trust is not just allowing harmful behavior. It is a harmful behavior. | |
| Sep 3 at 18:30 | comment | added | jrw32982 | One definition of malicious: Having the nature of or resulting from malice; deliberately harmful; spiteful. So, at its face value, it's not malicious if there is no intent to be harmful. However, I tend to agree that any attempt to defeat privacy is indirectly malicious, since defeating privacy directly enhances the capability of allowing harmful behavior. | |
| Aug 30 at 15:15 | comment | added | R.. GitHub STOP HELPING ICE | There absolutely does not need to be any further intent to do something nefarious with the information intercepted for it to be malicious. Just the act of undermining privacy of the communication is in itself already malicious. If you disagree with this, you just have a fundamental difference of values incompatible with the school of infosec to which I and the other folks here belong, and that's more in line with the cop school of infosec... >_< | |
| Aug 30 at 15:03 | comment | added | schroeder♦ | @Questor "malicious" requires intent. "I don't like it" doesn't make it "malicious". And yes, they could end up collecting data they don't want, but these schools tend to have a clear notice and message that everything done on the network, including passwords, can get logged. That way, students can refrain. So, no malicious intent is involved. In Europe, I worked with multiple schools and unis on how to handle unintended data collection. | |
| Aug 30 at 14:29 | comment | added | Questor | Yes I know they "wouldn't" use that information for anything bad... just like college professors "don't" sleep with students. Oh wait | |
| Aug 30 at 14:28 | comment | added | Questor | But that's just my perspective.... They could instead perform this same protecting the minds of 'innocent' college kids thing thru DNS blocking, which wouldn't give them access to their students personnel information. But they chose the intrusive big brother approach. That is malicious/suspicious in my books. | |
| Aug 30 at 14:26 | comment | added | Questor | @schroeder it allows the school to man in the middle everything you do, intercept packets etc... This means that they get access to passwords, credit card numbers, and personnel information, included private medical information if you access any of that while at the school. If you have nothing to hide you have nothing to fear I guess... but its seems very Orwellian/malicious to me. | |
| Aug 29 at 16:09 | comment | added | schroeder♦ | @Questor many, many secondary school campuses around the world do this. This falls under "duty of care". Not malicious at all. | |
| Aug 29 at 16:06 | comment | added | Questor | @schroeder Its an SSL certificate for a school that is "required" to use the school WIFI. None of the school campuses (admittedly that's only like 20), I have been on require this. This makes it suspicious. | |
| Aug 29 at 9:37 | comment | added | Rick Moritz | If you trust the root certificate of a malicious actor, only those connections where that exact attacker is able to perform a man-in-the-middle attack, by physically inserting themselves into the connection between you and your target server, are affected. "All network access from your device is backdoored" is a wild exaggeration and has no technical basis. | |
| Aug 29 at 7:24 | comment | added | schroeder♦ | What is the evidence that it is malicious? | |
| Aug 28 at 20:44 | history | answered | R.. GitHub STOP HELPING ICE | CC BY-SA 4.0 |