Questions tagged [wifi]
Security for 802.11 wireless networks.
1,439
questions
0
votes
1
answer
51
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
0
votes
1
answer
72
views
Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?
Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
- 145
-1
votes
0
answers
41
views
Is 802.11ac Security “beefed up” Connected to Wi-Fi 6
We have been slowly upgrading laptops at the office; we do use VPNs per device (software) to help “encrypt” out of date Wi-Fi adapters.
Should we upgrade network cards or dongles to a newer technology ...
0
votes
1
answer
59
views
Can a malicious WiFi router open a malicious website without permission?
Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer if I simply connect to it?
What about one with a login page? Can it open the ...
- 21
0
votes
1
answer
61
views
Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data
Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
1
vote
1
answer
83
views
What are the risks of connecting a shared laptop to your Wifi?
My son's school lent him a laptop to access a particular website- which I believe we can't do anyway because somehow it requires an organizational live account.
Can the school see what you are doing ...
- 149
0
votes
0
answers
14
views
HTTPS and Network Safety [duplicate]
Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
- 142
0
votes
1
answer
94
views
Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?
Does Wireshark(packet sniffers in general) let you decrypt someone else's https sites, or only your own? For example if the router is hacked can a packet sniffer give the attacker the ability to ...
- 1
-3
votes
1
answer
129
views
Is it dangerous to share the internet with a hacked phone?
I'm sharing my hacked phone's Wifi connection with tethering, so my data travels trough it from my PC. I'm using VPN both on PC, and phone.
My phone(facebook account, camera) got hacked, but I made a ...
- 19
0
votes
2
answers
71
views
Is a VPN effective when connected to WiFi network that requires authentication?
I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
0
votes
1
answer
150
views
Landlord wants to share a single 3Gbps fibre to the property line across 4 flats using a mesh network. Should I be concerned?
fibre to the property is being installed in my road for the first time
my landlord doesn't want lots of holes in their building
they acknowledges that FttP is probably necessary going forward
So ...
- 105
0
votes
0
answers
28
views
Slow Loris Attack Wi-Fi variant
I watched a Computerphile video. In the end Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down, because ...
- 1
-1
votes
1
answer
113
views
Trying to decrypt my home network
I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
- 101
0
votes
0
answers
25
views
Hijacking of sessions: public unencrypted network vs public “password” protected network
What, if any, functional security difference exists between having an unsecured “open” public wifi and one that uses a publicly available password? An example of the latter is: a wifi with SSID “...
- 101
1
vote
1
answer
96
views
Infecting laptop through a nearby Wi-Fi network?
Can a laptop get a virus through a Wi-Fi network with connected infected machines without connecting to the network (just by being withing the reach of the network signal and sensing it)? And vise ...
- 33
0
votes
1
answer
63
views
How secure is the Wyze Cam? How easily could an attacker gain access to it? [closed]
I recently put up a Wyze Cam, a brand of Wi-Fi security camera, and I am curious as to how (in)secure it is. I heard that the Wyze company servers got breached once before. How easily could an ...
- 27
1
vote
1
answer
100
views
What are the best ways to block ISP from spying on you
My dad keeps trying to log everything I do with the WiFi, I've gotten a VPN and use HTTPS everywhere, But I'm not completely sure it worked.
Is there any other good things to use?
Or is this enough, I'...
- 11
0
votes
0
answers
33
views
Are there some routers that have WPS, but without a fixed Pin?
My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
- 319
25
votes
4
answers
5k
views
Identification of a laptop using a spoofed WiFi MAC address
I own a small coffee shop in a highly-populated area. We've noticed that several computers are connecting to our WiFi network using spoofed MAC addresses (e.g. 11:22:33:44:55:66). Is there any way of ...
- 353
0
votes
1
answer
97
views
WPS - How to get all valid pins?
There are 10⁷ elements in WPS pin space, because one of the 8 digits is used as the checksum.
But the AP validates each half separately, resulting in 11,000 valid pins. Is it possible to generate all ...
- 101
-1
votes
1
answer
103
views
Malware from Android text?
Lots of questions!
I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
2
votes
2
answers
274
views
If someone knows your wifi password can they hack your router?
What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
- 21
0
votes
0
answers
170
views
Getting WPA handshake instead of PMKID
Similar to PMKID found , but it should be WPA handshake
I notice when I run aircrack-ng with the saved .cap file it does not properly test the keys as it normally would with a WPA Handshake found.
Any ...
0
votes
0
answers
28
views
What can a malicious user do with a shared android tablet on a corporate network via connected to corp WIFI?
We are deploying android tablets with a shared pin for users in an office.
If the device was stolen or in the hands of a hacker, what can a hacker do on the network (realistically)?
Android does NOT ...
- 631
0
votes
0
answers
46
views
Overlap between Wired vs WiFi vulnerabilities
This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections.
What are the attacks that both wired and Wi-Fi ...
0
votes
0
answers
36
views
Why does the authenticator send the first message in 4-way handshake?
I was reading a similar question
However, my question is that why can't it be the other way around?
Why can't the client start the 4-way handshake by sending the first message? Wouldn't it be the same ...
1
vote
1
answer
110
views
What is the most secure internet access option for Android phones?
My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have:
The phone ...
- 33
0
votes
1
answer
40
views
Collect traffic from mobile app to IoT device
I have a mobile app that connects to a IoT device over port 8888 to send commands. I'm not sure how to intercept this. MITMproxy was not able to capture the data as the app would not load behind a ...
0
votes
0
answers
43
views
What's the security implications of briefly connecting to a public wifi
Case study:
Amazon Fire Stick accidently connects to a BT (UK "ISP") Open WiFi with no security. Upon connecting, the login screen of BT portal is presented, however, the user realising ...
1
vote
3
answers
153
views
If I only connect through encrypted protocols like TLS, is there still a risk over an insecure wifi?
Assuming the attacker can read all the traffic (he cracked my WPA2 for example), is there still something he can do if i'm only connecting through TLS and similar protocols ?
- 111
0
votes
1
answer
112
views
How is WPA-PSK authentication done?
When I try connecting to wireless networks (with no RADIUS server), I enter the password and it goes through an authentication process. After the station successfully connects to the access point, a 4-...
0
votes
1
answer
55
views
Why do we need to connect to a network to be able to read all packets while packet sniffing?
I can't understand much about packet sniffing operation when it's in a network.
Well, packets are encrypted with PTK to prevent sniffing from monitor mode but when we are in client mode and we ...
3
votes
1
answer
136
views
Same network steal data?
Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password).
Is it possible for me to read their data transfer?
If yes, then it would also be ...
- 33
0
votes
0
answers
20
views
WiFi MAC spoofing [duplicate]
I've got a question regarding WiFi security and MAC spoofing: let's say Alice has a friend Bob and she gives him access to her WiFi. For this, she tells him the WiFi password and Bob logs into her ...
- 125
1
vote
1
answer
124
views
Securing home network when not controlling the router
I have just moved to a new place and the router is controlled by the managing company, what can I do to improve my security and my anonymity under this constraint?
- 13
0
votes
0
answers
74
views
What are possible attacks if am connecting to public WiFi using repeater, through Ethernet or /and if the router's firmware is hacked
What are possible attacks if am connecting to public WiFi using repeater, through Ethernet or /and if the router's firmware is hacked, supposing am running a Debian system ,blocking inbound ...
- 35
0
votes
0
answers
25
views
Can someone on same wifi access my computer? [duplicate]
I was connected to a hotel wifi and airport wifi last week. Some of the files in my Downloads folder now has been compromised (soft keys stolen).
Can someone connected to same wifi gain access to my ...
- 101
0
votes
1
answer
127
views
Does OpenSSL support EAP-TLS privacy
Does OpenSSL support EAP-TLS privacy?
It's an optional feature part of rfc5216, section 2.1.4.
1
vote
2
answers
136
views
What are the risks of using an unpatched device connecting to the internet infrequently?
My grandfather is interested in buying a smart tablet. He never had any personal computer or any internet connection. He wants to use his tablet solely to read the newspaper, as they no longer deliver ...
- 11
3
votes
3
answers
257
views
Are TLS v1.3 connections over open Wi-Fi secure?
If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic.
But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
3
votes
2
answers
162
views
Is it foolish to trust a Wi-Fi network just because it uses a specific recognized SSID?
This article in the Avira (part of NortonLifeLock) security blog discusses (vaguely) security risks of public Wi-Fi. The article states:
Man in the middle attacks are also a very prominent threat, ...
0
votes
0
answers
71
views
How can WIPS block unauthorized AP with PMF enabled?
To my knowledge, WIPS(wireless intrusion prevention system) prevents wireless devices connecting to unauthorized AP by sending de-authentication frames.
If 802.11w Protected Management Frame(PMF) is ...
- 101
0
votes
0
answers
140
views
How wifi network MITM works?
I have seen a lot of tutorials showing how to MITM a network using various tools. But it usually says that we require a network adapter with monitor mode options.
I own my wifi router and can connect ...
0
votes
1
answer
100
views
Can a wifi Access Point be reconfigured to receive other radio signals?
Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
- 1
2
votes
2
answers
283
views
Is using my address for WIFI SSID a bad idea?
I live in a location which is semi-rural. I also share this Internet access with some people nearby. Although bandwidth is a bit limited (VDSL), other then those imposed by the connection speed ...
- 593
0
votes
1
answer
363
views
Airodump-ng shows AP as OPN and WPA2 at the same time. What does it mean?
The result of airodump-ng lists some AP's as both OPN and WPA2. How does the authentication work in that case?
12:34:56:78:AB:CD, 2011-09-09 15:29:47, 2022-10-21 16:09:05, 1, WPA2 OPN, CCMP, MGT, -75,...
- 1
0
votes
2
answers
130
views
Are there any further security considerations when joining a public wifi network other than firewall and anti-virus?
If I use my laptop on my company wifi network to use the internet, what access has the company to the laptop hard drive and information on it? The company wifi is there for customers and employees (...
- 1
1
vote
0
answers
94
views
How can someone using public wifi be deanonymized?
Say someone wants to send a document overseas while living in a hostile country. He uses tor over public wifi. What are some ways he can be tracked if he uses a burner laptop and public wifi? Few ways ...
0
votes
1
answer
111
views
Unknown WiFi Network
For background, I am being sued by unethical people who would do anything. I live in a rural area and in the network list on my phone and laptop, no neighboring networks appear. Only our own plus our ...
- 1
1
vote
1
answer
172
views
How to handle a router from an apparently security-indifferent ISP with no possibility to switch?
My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
- 213