Questions tagged [wifi]
Security for 802.11 wireless networks.
1,456
questions
0
votes
0
answers
28
views
Are routers truly more secure than modems with wireless? [closed]
Sources online are saying that even if your modem has WiFi, you’re still better off having that turned off and using a router instead because they say that routers offer more security.
Is it true that ...
- 25
0
votes
0
answers
48
views
What can my school see on my personal laptop and wifi [closed]
For a few weeks I've been doing online school, and I've been freaked out with my privacy. I've asked the IT department what they can see, and they haven't responded, so I'm coming here.
What can my ...
- 1
1
vote
0
answers
27
views
Evil twin WiFi station has no internet connection [migrated]
I am trying to create a fake AP using the airbase-ng to test how evil twin works.
I have a WiFi adapter TP-link WN4226 [Atheros AR9271 chipset], which supports monitor mode. My laptop (running on ...
- 111
0
votes
2
answers
59
views
Can employer view images in email on personal device in personal email account over wifi?
Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi.
It was mail from a ...
0
votes
0
answers
14
views
Does the client know about the salt used for checking his password on a WPA2 wifi network? [duplicate]
I don't understand how the client is able to send his password secretly without knowing the salt.
- 101
2
votes
0
answers
53
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 233
2
votes
2
answers
77
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 51
1
vote
2
answers
74
views
What is better for security when using virtualbox?
I have a virtual machine running on Virtualbox on my host OS.
I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
- 589
15
votes
1
answer
7k
views
Can my university see the downloads from a Discord application when I use their Wi-Fi connectivity?
I didn’t use a VPN, and I am asking myself if my university can see the downloaded files or even the fact that I opened the Discord application to download.
- 159
3
votes
0
answers
113
views
Difference between OSEN and OWE for secure open Wi-Fi
I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
- 131
1
vote
3
answers
104
views
Why does having default router credentials pose a risk? [duplicate]
When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
0
votes
0
answers
62
views
Trying to understand EAP TLS handshake between a client and an access point when it fails
I traced a handshake between a client and an access point trying to connect to our WPA2 enterprise wifi network with Wireshark. I'm especially interested in how the handshake works when the server ...
0
votes
2
answers
111
views
My Linux Mint just accessed a wifi network WPA2 without knowing the password [closed]
I brought my personal notebook to work. Asked the IT technician to access the WiFi on it (it's a federal institution of health research, lots of biological risks involved). Then he noticed that the ...
1
vote
1
answer
26
views
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file ?
Can packages be replaced by malicious ones through wifi attacks like fraggattacks ?
- 13
3
votes
0
answers
237
views
Is WPA3 mixed mode less secure than pure WPA3?
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
- 143
1
vote
0
answers
73
views
What damage can a malicious wifi hotspot cause? [duplicate]
I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN.
That seems strange ...
- 3,902
0
votes
0
answers
39
views
Android Device Suspicious SSID probes
Have the latest nightly build of kismet running on both the master (LXC container) and a drone (running on a Raspberry PI 4 using the 64bit version of Raspberry PI OS)
The drone server is using a mix ...
0
votes
2
answers
138
views
Is dual boot the best/effective way to access a public Wi-Fi?
On Campus we have free Wi-Fi, specifically, Eduroam which needs student credentials to be accessed (each student has its own credentials).
One thing that triggered me was that no certificate is ...
- 103
0
votes
2
answers
171
views
How does the option to “use system certificates” for a wifi login vary from choosing a specific certificate?
This is concerning an android device (not sure if that information helps, since Apple works differently).
When logging into a wifi network, there will be sections that ask for different information. ...
- 27
0
votes
1
answer
107
views
What are the implications of the “do not validate” message for wifi network certificate?
I know a year ago when signing into school wifi there were a few options. First time I had to sign into a school wifi, so I did not understand the difference. Ended up choosing a wireless option. One ...
user282383
0
votes
2
answers
131
views
Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?
If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
user282383
0
votes
2
answers
102
views
Can any program discover my precise geolocation?
While browsing the internet on my laptop, I've allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked ...
- 1
5
votes
1
answer
226
views
Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?
I recently flew with United Airlines and I used their free messaging wi-fi plan.
I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
- 153
0
votes
1
answer
124
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
1
vote
2
answers
455
views
Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?
Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
- 155
0
votes
1
answer
105
views
Can a malicious WiFi router open a malicious website without permission?
Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer by simply connecting to it?
What about one with a login page? Can it open the ...
- 31
0
votes
2
answers
168
views
Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data
Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
1
vote
1
answer
105
views
What are the risks of connecting a shared laptop to your Wifi?
My son's school lent him a laptop to access a particular website- which I believe we can't do anyway because somehow it requires an organizational live account.
Can the school see what you are doing ...
- 149
0
votes
0
answers
14
views
HTTPS and Network Safety [duplicate]
Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
- 162
0
votes
1
answer
109
views
Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?
Does Wireshark(packet sniffers in general) let you decrypt someone else's https sites, or only your own? For example if the router is hacked can a packet sniffer give the attacker the ability to ...
- 1
-3
votes
1
answer
148
views
Is it dangerous to share the internet with a hacked phone?
I'm sharing my hacked phone's Wifi connection with tethering, so my data travels trough it from my PC. I'm using VPN both on PC, and phone.
My phone(facebook account, camera) got hacked, but I made a ...
- 49
0
votes
2
answers
130
views
Is a VPN effective when connected to WiFi network that requires authentication?
I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
0
votes
1
answer
165
views
Landlord wants to share a single 3Gbps fibre to the property line across 4 flats using a mesh network. Should I be concerned?
fibre to the property is being installed in my road for the first time
my landlord doesn't want lots of holes in their building
they acknowledges that FttP is probably necessary going forward
So ...
- 105
0
votes
2
answers
103
views
Slow Loris Attack Wi-Fi variant
I watched a Computerphile video. In the end, Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down because ...
- 3
-2
votes
1
answer
134
views
Trying to decrypt my home network
I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
- 99
0
votes
0
answers
36
views
Hijacking of sessions: public unencrypted network vs public “password” protected network
What, if any, functional security difference exists between having an unsecured “open” public wifi and one that uses a publicly available password? An example of the latter is: a wifi with SSID “...
- 101
1
vote
1
answer
98
views
Infecting laptop through a nearby Wi-Fi network?
Can a laptop get a virus through a Wi-Fi network with connected infected machines without connecting to the network (just by being withing the reach of the network signal and sensing it)? And vise ...
- 33
0
votes
1
answer
77
views
How secure is the Wyze Cam? How easily could an attacker gain access to it? [closed]
I recently put up a Wyze Cam, a brand of Wi-Fi security camera, and I am curious as to how (in)secure it is. I heard that the Wyze company servers got breached once before. How easily could an ...
- 37
1
vote
1
answer
113
views
What are the best ways to block ISP from spying on you
My dad keeps trying to log everything I do with the WiFi, I've gotten a VPN and use HTTPS everywhere, But I'm not completely sure it worked.
Is there any other good things to use?
Or is this enough, I'...
- 11
0
votes
0
answers
47
views
Are there some routers that have WPS, but without a fixed Pin?
My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
- 616
25
votes
4
answers
5k
views
Identification of a laptop using a spoofed WiFi MAC address
I own a small coffee shop in a highly-populated area. We've noticed that several computers are connecting to our WiFi network using spoofed MAC addresses (e.g. 11:22:33:44:55:66). Is there any way of ...
- 353
0
votes
1
answer
297
views
WPS - How to get all valid pins?
There are 10⁷ elements in WPS pin space, because one of the 8 digits is used as the checksum.
But the AP validates each half separately, resulting in 11,000 valid pins. Is it possible to generate all ...
- 101
-1
votes
1
answer
119
views
Malware from Android text?
Lots of questions!
I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
2
votes
3
answers
1k
views
If someone knows your wifi password can they hack your router?
What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
- 21
0
votes
0
answers
339
views
Getting WPA handshake instead of PMKID
Similar to PMKID found , but it should be WPA handshake
I notice when I run aircrack-ng with the saved .cap file it does not properly test the keys as it normally would with a WPA Handshake found.
Any ...
0
votes
0
answers
29
views
What can a malicious user do with a shared android tablet on a corporate network via connected to corp WIFI?
We are deploying android tablets with a shared pin for users in an office.
If the device was stolen or in the hands of a hacker, what can a hacker do on the network (realistically)?
Android does NOT ...
- 631
0
votes
0
answers
50
views
Overlap between Wired vs WiFi vulnerabilities
This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections.
What are the attacks that both wired and Wi-Fi ...
0
votes
0
answers
42
views
Why does the authenticator send the first message in 4-way handshake?
I was reading a similar question
However, my question is that why can't it be the other way around?
Why can't the client start the 4-way handshake by sending the first message? Wouldn't it be the same ...
1
vote
1
answer
141
views
What is the most secure internet access option for Android phones?
My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have:
The phone ...
- 33
0
votes
1
answer
75
views
Collect traffic from mobile app to IoT device
I have a mobile app that connects to a IoT device over port 8888 to send commands. I'm not sure how to intercept this. MITMproxy was not able to capture the data as the app would not load behind a ...
