Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

Are routers truly more secure than modems with wireless? [closed]

Sources online are saying that even if your modem has WiFi, you’re still better off having that turned off and using a router instead because they say that routers offer more security. Is it true that ...
  • 25
0 votes
0 answers
48 views

What can my school see on my personal laptop and wifi [closed]

For a few weeks I've been doing online school, and I've been freaked out with my privacy. I've asked the IT department what they can see, and they haven't responded, so I'm coming here. What can my ...
  • 1
1 vote
0 answers
27 views

Evil twin WiFi station has no internet connection [migrated]

I am trying to create a fake AP using the airbase-ng to test how evil twin works. I have a WiFi adapter TP-link WN4226 [Atheros AR9271 chipset], which supports monitor mode. My laptop (running on ...
  • 111
0 votes
2 answers
59 views

Can employer view images in email on personal device in personal email account over wifi?

Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi. It was mail from a ...
0 votes
0 answers
14 views

Does the client know about the salt used for checking his password on a WPA2 wifi network? [duplicate]

I don't understand how the client is able to send his password secretly without knowing the salt.
  • 101
2 votes
0 answers
53 views

Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?

I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
2 votes
2 answers
77 views

WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks

While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
  • 51
1 vote
2 answers
74 views

What is better for security when using virtualbox?

I have a virtual machine running on Virtualbox on my host OS. I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
15 votes
1 answer
7k views

Can my university see the downloads from a Discord application when I use their Wi-Fi connectivity?

I didn’t use a VPN, and I am asking myself if my university can see the downloaded files or even the fact that I opened the Discord application to download.
  • 159
3 votes
0 answers
113 views

Difference between OSEN and OWE for secure open Wi-Fi

I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
1 vote
3 answers
104 views

Why does having default router credentials pose a risk? [duplicate]

When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
0 votes
0 answers
62 views

Trying to understand EAP TLS handshake between a client and an access point when it fails

I traced a handshake between a client and an access point trying to connect to our WPA2 enterprise wifi network with Wireshark. I'm especially interested in how the handshake works when the server ...
0 votes
2 answers
111 views

My Linux Mint just accessed a wifi network WPA2 without knowing the password [closed]

I brought my personal notebook to work. Asked the IT technician to access the WiFi on it (it's a federal institution of health research, lots of biological risks involved). Then he noticed that the ...
1 vote
1 answer
26 views

Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file

Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file ? Can packages be replaced by malicious ones through wifi attacks like fraggattacks ?
  • 13
3 votes
0 answers
237 views

Is WPA3 mixed mode less secure than pure WPA3?

I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
1 vote
0 answers
73 views

What damage can a malicious wifi hotspot cause? [duplicate]

I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN. That seems strange ...
  • 3,902
0 votes
0 answers
39 views

Android Device Suspicious SSID probes

Have the latest nightly build of kismet running on both the master (LXC container) and a drone (running on a Raspberry PI 4 using the 64bit version of Raspberry PI OS) The drone server is using a mix ...
0 votes
2 answers
138 views

Is dual boot the best/effective way to access a public Wi-Fi?

On Campus we have free Wi-Fi, specifically, Eduroam which needs student credentials to be accessed (each student has its own credentials). One thing that triggered me was that no certificate is ...
0 votes
2 answers
171 views

How does the option to “use system certificates” for a wifi login vary from choosing a specific certificate?

This is concerning an android device (not sure if that information helps, since Apple works differently). When logging into a wifi network, there will be sections that ask for different information. ...
  • 27
0 votes
1 answer
107 views

What are the implications of the “do not validate” message for wifi network certificate?

I know a year ago when signing into school wifi there were a few options. First time I had to sign into a school wifi, so I did not understand the difference. Ended up choosing a wireless option. One ...
user avatar
0 votes
2 answers
131 views

Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?

If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
user avatar
0 votes
2 answers
102 views

Can any program discover my precise geolocation?

While browsing the internet on my laptop, I've allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked ...
  • 1
5 votes
1 answer
226 views

Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?

I recently flew with United Airlines and I used their free messaging wi-fi plan. I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
  • 153
0 votes
1 answer
124 views

Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?

I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
  • 115
1 vote
2 answers
455 views

Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?

Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
  • 155
0 votes
1 answer
105 views

Can a malicious WiFi router open a malicious website without permission?

Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer by simply connecting to it? What about one with a login page? Can it open the ...
0 votes
2 answers
168 views

Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data

Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
1 vote
1 answer
105 views

What are the risks of connecting a shared laptop to your Wifi?

My son's school lent him a laptop to access a particular website- which I believe we can't do anyway because somehow it requires an organizational live account. Can the school see what you are doing ...
0 votes
0 answers
14 views

HTTPS and Network Safety [duplicate]

Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
  • 162
0 votes
1 answer
109 views

Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?

Does Wireshark(packet sniffers in general) let you decrypt someone else's https sites, or only your own? For example if the router is hacked can a packet sniffer give the attacker the ability to ...
  • 1
-3 votes
1 answer
148 views

Is it dangerous to share the internet with a hacked phone?

I'm sharing my hacked phone's Wifi connection with tethering, so my data travels trough it from my PC. I'm using VPN both on PC, and phone. My phone(facebook account, camera) got hacked, but I made a ...
  • 49
0 votes
2 answers
130 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
0 votes
1 answer
165 views

Landlord wants to share a single 3Gbps fibre to the property line across 4 flats using a mesh network. Should I be concerned?

fibre to the property is being installed in my road for the first time my landlord doesn't want lots of holes in their building they acknowledges that FttP is probably necessary going forward So ...
  • 105
0 votes
2 answers
103 views

Slow Loris Attack Wi-Fi variant

I watched a Computerphile video. In the end, Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down because ...
-2 votes
1 answer
134 views

Trying to decrypt my home network

I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
  • 99
0 votes
0 answers
36 views

Hijacking of sessions: public unencrypted network vs public “password” protected network

What, if any, functional security difference exists between having an unsecured “open” public wifi and one that uses a publicly available password? An example of the latter is: a wifi with SSID “...
  • 101
1 vote
1 answer
98 views

Infecting laptop through a nearby Wi-Fi network?

Can a laptop get a virus through a Wi-Fi network with connected infected machines without connecting to the network (just by being withing the reach of the network signal and sensing it)? And vise ...
0 votes
1 answer
77 views

How secure is the Wyze Cam? How easily could an attacker gain access to it? [closed]

I recently put up a Wyze Cam, a brand of Wi-Fi security camera, and I am curious as to how (in)secure it is. I heard that the Wyze company servers got breached once before. How easily could an ...
1 vote
1 answer
113 views

What are the best ways to block ISP from spying on you

My dad keeps trying to log everything I do with the WiFi, I've gotten a VPN and use HTTPS everywhere, But I'm not completely sure it worked. Is there any other good things to use? Or is this enough, I'...
  • 11
0 votes
0 answers
47 views

Are there some routers that have WPS, but without a fixed Pin?

My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
25 votes
4 answers
5k views

Identification of a laptop using a spoofed WiFi MAC address

I own a small coffee shop in a highly-populated area. We've noticed that several computers are connecting to our WiFi network using spoofed MAC addresses (e.g. 11:22:33:44:55:66). Is there any way of ...
0 votes
1 answer
297 views

WPS - How to get all valid pins?

There are 10⁷ elements in WPS pin space, because one of the 8 digits is used as the checksum. But the AP validates each half separately, resulting in 11,000 valid pins. Is it possible to generate all ...
  • 101
-1 votes
1 answer
119 views

Malware from Android text?

Lots of questions! I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
2 votes
3 answers
1k views

If someone knows your wifi password can they hack your router?

What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
0 votes
0 answers
339 views

Getting WPA handshake instead of PMKID

Similar to PMKID found , but it should be WPA handshake I notice when I run aircrack-ng with the saved .cap file it does not properly test the keys as it normally would with a WPA Handshake found. Any ...
0 votes
0 answers
29 views

What can a malicious user do with a shared android tablet on a corporate network via connected to corp WIFI?

We are deploying android tablets with a shared pin for users in an office. If the device was stolen or in the hands of a hacker, what can a hacker do on the network (realistically)? Android does NOT ...
0 votes
0 answers
50 views

Overlap between Wired vs WiFi vulnerabilities

This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections. What are the attacks that both wired and Wi-Fi ...
0 votes
0 answers
42 views

Why does the authenticator send the first message in 4-way handshake?

I was reading a similar question However, my question is that why can't it be the other way around? Why can't the client start the 4-way handshake by sending the first message? Wouldn't it be the same ...
1 vote
1 answer
141 views

What is the most secure internet access option for Android phones?

My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have: The phone ...
  • 33
0 votes
1 answer
75 views

Collect traffic from mobile app to IoT device

I have a mobile app that connects to a IoT device over port 8888 to send commands. I'm not sure how to intercept this. MITMproxy was not able to capture the data as the app would not load behind a ...

1
2 3 4 5
30