Questions tagged [wifi]
Security for 802.11 wireless networks.
1,471
questions
0
votes
0
answers
40
views
How to remove someone from our wifi network? [closed]
One of my mother's students, I don't know how, but he found out our home wifi password without our consent. He said he could scan it from our router. We didn't believe him at that time, but today he ...
0
votes
0
answers
39
views
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Such as:
blocking (or entirely hiding) the option to connect to open networks
...
- 6,651
0
votes
0
answers
21
views
Wpa ptk and gtk in detail
I have been checking Pairwise and Group Transient keys in a network for security. I understand
PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address
...
- 207
0
votes
2
answers
125
views
Is WIFI that is 'open' but requires a password to access the internet safe?
It is common knowledge that connecting to open public WIFI networks can pose a security risk (e.g. to man-in-the-middle attacks). However, I have come across 'open' WIFI networks that require no ...
- 101
3
votes
1
answer
146
views
Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?
Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is ...
- 6,651
0
votes
0
answers
20
views
What is an HTTPS Interception Certificate and can schools monitor devices through it? [duplicate]
My school (UK) recently sent out a message to all of us.
"In order to provide the best standard of online safety we are
improving the quality of internet filtering and monitoring on our
school ...
1
vote
1
answer
97
views
Are WPA3 connections with a shared key secure?
Related: Are WPA2 connections with a shared key secure?
Is a public WPA3 network secure against eavesdropper who knows the password?
The specific use case would be a public WiFi using WPA3, but with a ...
- 145
0
votes
1
answer
56
views
Do 5G cellular kits than are connected to SBC, support encryption when the signal goes via them to the wifi?
I have seen around some 5G cellular kits that can be connected to SBC (Single Board Computers) in order to make a WIFI hotspot. From the one side, they provide 5G cellular connection and from the ...
- 256
0
votes
0
answers
37
views
Bettercap filtering ARP Spoof
I want to see only monitored device's visited websites not the methods and the redirects how can I filter or can I?
2
votes
1
answer
280
views
How dangerous is sharing a WiFi network with neighbors?
Context. I am moving in to a building where neighbors share WiFi. There are several routers connected with each other, and residents connect to one of the WiFi networks. I was told it's cheaper that ...
- 21
5
votes
4
answers
582
views
How important is it for WiFi passwords to be secure?
Anecdotally, I've noticed that many people's WiFi passwords (based on visiting their homes, etc.) don't seem terribly secure; they're usually fairly short and don't always contains numbers or special ...
- 151
0
votes
1
answer
197
views
What is the difference between a VPN and a Tor Socks proxy on public wifi?
I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi.
So, what are the different security impacts of each of these 2 solutions:
Using a VPN (like Proton VPN) to ...
- 1
1
vote
1
answer
291
views
Where are wifi passwords stored? [duplicate]
I'm looking for technical details on how Windows, Linux, and macOS all store the SSIDs and passwords for every wireless network you've ever connected to. I've tried searching for this, but my Google-...
- 777
0
votes
0
answers
107
views
Design flaw in Wi-Fi EasyMesh or a poor implementation?
Extending a wireless network with Wi-Fi EasyMesh is easy, but that may come at a cost of security. I was surprised that setting up the Mesh network with Zyxel MPro Mesh devices (e.g. DX3301-T0 router &...
- 18.7k
0
votes
0
answers
11
views
Can people still find my wifi network even if I turn off SSID broadcasting? [duplicate]
My wifi router broadcasts my SSID but I believe I can stop the SSID from being broadcast. Were I to do so, would neighbors or anyone parked on the street fail to find my wifi and move on to the next ...
- 1
0
votes
1
answer
93
views
Is it possible to fully protect a home Wi-Fi network from remote attacks?
I've read that some ways to secure a home Wi-Fi network include encrypting the network using WPA2 Personal, and changing the default administrative username, password, and network name. But I'm not ...
- 1
2
votes
0
answers
44
views
Is it possible to see someone using vpn who is connected to my AP and turned on hotspot for his mobile in which he uses vpn [duplicate]
I want to monitor traffic in my Access point of the users who turned on hotspots in their PC after connecting to the wi-fi.
I want to monitor users who use vpn to access blocked sites in my ...
0
votes
0
answers
77
views
Is there any security threat with open WiFi connection in 2023 for online banking? [duplicate]
According to its website, my bank does not recommend to use open wifi networks for online banking without VPN.
Why is that?
I understand, that 10-20 years ago many site and application sent the data ...
- 111
0
votes
3
answers
282
views
How can I be sure that my internet service provider is safe?
There is a new internet service provider in town that provides fiber internet--their internet is fast and it's proven. Almost everyone in our town switched to their internet. However, I am kind of ...
- 1
0
votes
0
answers
84
views
How to secure old routers with WPA2 and with old firmware?
There are many old routers that support WPA2 that hadn't had a firmware update released since around 2010. Is it possible to secure their WPA2 implementation considering the more recent ...
- 2,039
1
vote
1
answer
489
views
Cracking WiFi credentials without handshake or PKMS
How can I crack WiFi credentials WITHOUT using the traditional method of capturing a PKMS or Handshake?
When I connect to a WiFi network, I simply enter a password into a text box just like any other ...
- 31
0
votes
1
answer
642
views
Does WPA/WPA2 mixed mode have weak security even if I always connect using WPA2-AES?
My Wi-Fi access point is in "WPA/WPA2 mixed mode", which allows devices to connect to it using either WPA, WPA2-TKIP, or WPA2-AES. My Apple® smartphones and tablet computers are warning that ...
- 793
0
votes
0
answers
140
views
Tracking location of a SIM card using only mobile data?
SIM card supporting mobile data (5G) is inserted into a WiFi router (without GPS supported) - how accurate can be tracked by the mobile operator if the government has a warrant? Is the cell tower ...
1
vote
0
answers
457
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
8
votes
1
answer
3k
views
Does the attacker need to be on the same network to carry out a deauthentication attack?
I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?
- 83
0
votes
0
answers
66
views
Technical details behind how a malware-infected device infects other devices on the same network?
I'm a security student and for one of my projects, I'm trying to learn the technical details behind a malware-infected device infecting other devices on the same network. I can see so much content ...
- 23
0
votes
4
answers
744
views
Is Wifi Penetration Testing Dead?
"I hack your Wifi in 5 Minutes" still seems to be a hot topic on youtube in 2023, atleast on beginner channels like David Bombal. However, is there still any real world application? Even ...
- 1
1
vote
2
answers
144
views
Prevent device from seeing WiFi networks for geolocation
This is something I was wondering while trying to improve my privacy.
Mobile devices tend to use geolocation based on WiFi networks they find available (thanks to evil Google...).
One could use ...
- 111
0
votes
2
answers
119
views
Can employer view images in email on personal device in personal email account over wifi?
Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi.
It was mail from a ...
0
votes
0
answers
16
views
Does the client know about the salt used for checking his password on a WPA2 wifi network? [duplicate]
I don't understand how the client is able to send his password secretly without knowing the salt.
- 101
2
votes
0
answers
98
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 256
2
votes
2
answers
409
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 61
1
vote
3
answers
149
views
What is better for security when using virtualbox?
I have a virtual machine running on Virtualbox on my host OS.
I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
- 589
15
votes
1
answer
8k
views
Can my university see the downloads from a Discord application when I use their Wi-Fi connectivity?
I didn’t use a VPN, and I am asking myself if my university can see the downloaded files or even the fact that I opened the Discord application to download.
- 159
4
votes
0
answers
460
views
Difference between OSEN and OWE for secure open Wi-Fi
I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
- 141
1
vote
3
answers
141
views
Why does having default router credentials pose a risk? [duplicate]
When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
0
votes
2
answers
312
views
My Linux Mint just accessed a wifi network WPA2 without knowing the password [closed]
I brought my personal notebook to work. Asked the IT technician to access the WiFi on it (it's a federal institution of health research, lots of biological risks involved). Then he noticed that the ...
1
vote
1
answer
52
views
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file ?
Can packages be replaced by malicious ones through wifi attacks like fraggattacks ?
- 13
7
votes
1
answer
3k
views
Is WPA3 mixed mode less secure than pure WPA3?
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
- 185
1
vote
0
answers
138
views
What damage can a malicious wifi hotspot cause? [duplicate]
I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN.
That seems strange ...
- 3,916
0
votes
2
answers
155
views
Is dual boot the best/effective way to access a public Wi-Fi?
On Campus we have free Wi-Fi, specifically, Eduroam which needs student credentials to be accessed (each student has its own credentials).
One thing that triggered me was that no certificate is ...
- 103
0
votes
2
answers
2k
views
How does the option to “use system certificates” for a wifi login vary from choosing a specific certificate?
This is concerning an android device (not sure if that information helps, since Apple works differently).
When logging into a wifi network, there will be sections that ask for different information. ...
- 27
0
votes
1
answer
998
views
What are the implications of the “do not validate” message for wifi network certificate?
I know a year ago when signing into school wifi there were a few options. First time I had to sign into a school wifi, so I did not understand the difference. Ended up choosing a wireless option. One ...
user282383
0
votes
2
answers
572
views
Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?
If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
user282383
1
vote
2
answers
255
views
Can any program discover my precise geolocation?
While browsing the internet on my laptop, I've allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked ...
- 11
5
votes
1
answer
519
views
Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?
I recently flew with United Airlines and I used their free messaging wi-fi plan.
I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
- 153
0
votes
1
answer
335
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
1
vote
2
answers
1k
views
Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?
Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
- 155
0
votes
1
answer
158
views
Can a malicious WiFi router open a malicious website without permission?
Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer by simply connecting to it?
What about one with a login page? Can it open the ...
- 31
0
votes
2
answers
198
views
Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data
Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...