Questions tagged [wireless]
Wireless security topics including 802.11, Bluetooth, and others.
469
questions
256
votes
5
answers
30k
views
Consequences of the WPA2 KRACK attack
Today new research was published on vulnerabilities in wireless network security called Krack.
What are the real-world consequences of these attacks for users and owners of wireless networks, what ...
- 62.3k
154
votes
3
answers
24k
views
Does pressing a car remote many times offer denial of service attack for rolling codes?
My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
- 1,859
119
votes
3
answers
19k
views
Why wasn't the KRACK exploit discovered sooner? [closed]
From what I've read, the issue is as simple as performing step 3 of a 4-step handshake and the consequences of performing that step more than once. Considering the complexity of these kinds of ...
- 890
114
votes
6
answers
29k
views
What would one need to do in order to hijack a satellite?
I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites.
What would be required to hack a satellite (in general terms, any hack ...
- 5,244
81
votes
7
answers
16k
views
Company claims hardwire connections are a security issue
Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
- 792
80
votes
17
answers
26k
views
Trying to keep high school students out of the Wi-Fi network
I'm a teacher and IT person at a small K-12 school.
The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
- 817
78
votes
7
answers
12k
views
How to patch "keyless entry" car keys?
The German automobile club ADAC did a test with several cars which open doors and start the engine with a "keyless entry" system. You don't have to push a button on your car key. If you get near your ...
- 1,106
66
votes
6
answers
500k
views
If someone hacks my wi-fi password, what can they see and how?
If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
- 663
53
votes
6
answers
26k
views
Phones broadcast the SSIDs of all networks they have ever connected to. How can these be obtained by an attacker?
I just watched an interesting talk from Glen Glenn Wilkinson titled: The Machines that Betrayed their Masters.
He said that your phone is constantly broadcasting all the SSIDs it has ever connected ...
- 678
51
votes
7
answers
20k
views
How would you detect an Evil Twin attack, especially in a new environment?
Let's say you are traveling, and you pause in the airport lounge, or your hotel lobby, or a nearby coffee shop. You haul out your laptop and scan the available wireless networks. You know the name of ...
- 2,137
51
votes
1
answer
16k
views
Vehicle remote key security
How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key?
How do car remote keys work? Do they use some kind of private/public keys, encryption?
...
- 745
50
votes
6
answers
11k
views
How safe are wifi enabled talking toys?
There have been ads on the radio recently for a wifi enabled toy called Talkies, which are advertised as being able to communicate with app enabled phones, with a "trusted circle" that other phones ...
- 611
43
votes
3
answers
50k
views
What is the best home wireless network encryption algorithm to use?
What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
- 3,175
42
votes
2
answers
52k
views
What is the difference between Promiscuous and Monitor Mode in Wireless Networks?
In Wireless Networks, you can put your wireless card in Promiscuous or in Monitor Mode.
What is the difference between these two modes ?
- 907
32
votes
6
answers
53k
views
Is UPnP still insecure?
In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed?
- 371
30
votes
4
answers
8k
views
How to reduce/mitigate the degree to which a Starlink terminal user in a war zone is giving their position in real time?
Space.com's SpaceX Starlink satellite internet terminals arrive in Ukraine, The Verge's Elon Musk’s promised Starlink terminals have reached Ukraine and Vice Prime Minister of Ukraine and Minister of ...
- 1,415
29
votes
1
answer
76k
views
EAP-TLS vs EAP-TTLS vs EAP-PEAP
I'm having troubles understanding the differences between the 3.
As far as I understand, with EAP-TLS, the client (peer) and the server (authenticator) both need a certificate. The authentication is ...
- 447
25
votes
2
answers
18k
views
How does WiFi password cracking work?
Let's say I have a wireless network that is password protected.
What procedures can an intruder take to gain access to my wireless network, or at least be able to decipher the packets I am sending ...
- 1,134
25
votes
2
answers
2k
views
Aviation security - Lessons to learn from PlaneSploit
A somewhat related question has already been asked (What would one need to do in order to hijack a satellite?), only at a more abstract level.
Now we have a presentation by Hugo Teso from n.runs AG ...
- 5,347
25
votes
3
answers
64k
views
How is 4G LTE encrypted?
After a few quick searches for 3G security I was able to learn that this standard uses the KASUMI block cipher, of which several weaknesses have been identified (although apparently none of practical ...
- 2,018
23
votes
6
answers
10k
views
Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?
So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
- 507
22
votes
2
answers
8k
views
Wireless keyboard sniffing risk
I've just acquired a wireless keyboard/mouse combo (Microsoft Wireless Desktop 3000). Only after having plugged it in did it get me thinking. How susceptible are those kind of setups to sniffing? Are ...
- 1,155
21
votes
2
answers
9k
views
Security threats of wireless charging?
It is well known that plugging your mobile device for charging in public/uncontrolled places through Micro-USB can be a security hazard. USB protocol supports much more than just transferring power, ...
- 313
20
votes
1
answer
32k
views
Is Bluetooth 4.0 traffic encrypted by default/design?
I wonder if the BLE (v4.0) traffic is encrypted by default or by design, or is it just optional? If the former, is the traffic encrypted using a key derived just from the pairing pin or is there some ...
- 331
19
votes
3
answers
6k
views
How secure is HTTP / HTTPS over 3G?
Suppose I log into a website, such as Twitter, from a 3G-enabled smartphone or similar device. How secure is this from interception? Can someone steal my password or login?
What if I use HTTPS? What ...
- 293
18
votes
1
answer
6k
views
How do rolling code fobs and receivers synchronise?
This is a follow-up question to my earlier one: Does pressing a car remote many times offer denial of service attack for rolling codes?
I want to emphasize that I am asking this question more to shore ...
- 1,859
17
votes
3
answers
10k
views
Is WPA2-Enterprise affected by the KRACK attack?
From my reading of the whitepaper it is the 4-way handshake that is vulnerable, but WPA2-Enterprise uses a RADIUS server for authentication, so is it also exploitable? And if so, how?
- 173
17
votes
1
answer
19k
views
Is it even possible to hack a television channel?
In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
- 8,773
15
votes
2
answers
28k
views
Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?
is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks.
If it can, how, but if not, is there another ...
- 253
15
votes
1
answer
2k
views
Wireless mouse security
How secure are wireless mice?
Is it possible to control a wireless mouse from a different computer?
Is it possible to know the mouse movements from a different computer?
- 533
13
votes
3
answers
3k
views
Why does Evil twin works?
https://en.wikipedia.org/wiki/Evil_twin_%28wireless_networks%29
My question: it's OK that someone can make an AP with the same MAC and SSID as the original AP. And with stronger signal. But what I ...
- 633
13
votes
2
answers
380
views
Is my Windows phone protected from attacks that reveal list of ssids it knows about?
My goal is to see the SSIDs requested by mobile devices in my home. For example, my Windows phone knows about SSIDs called "coffee_shop", "planet_fitness" and "library". I have my phone set to "...
- 6,864
12
votes
4
answers
5k
views
Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?
(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.)
I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
- 121
11
votes
2
answers
2k
views
WPA3 announced. Really needed?
It seems Wi-Fi Alliance announced WPA3 for the end of 2018.
Anybody knows exactly what is new? features, security improvements, etc...
Is it because of Krack attack? I thought patching WPA2 is enough....
- 5,285
11
votes
3
answers
11k
views
promiscuous vs monitor mode in 802.11
I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here:
What is the difference between Promiscuous and ...
- 113
11
votes
2
answers
1k
views
How does MDK3 carry out deauth attacks?
With aireplay, you have to specify both the AP and client to send deauth frames to, but MDK3 doesn't require an AP mac address. Does it just scan the desired channel for beacons until it finds an AP ...
- 111
10
votes
1
answer
13k
views
802.11w protected management frames - Wi-Fi
I've been reading about protected management frames, introduced in 802.11w, and had a few questions.
Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
- 507
10
votes
3
answers
4k
views
How safe is a standard wireless keyboard from a MITM attack?
And are there any mitigations except using a wired keyboard?
- 101
10
votes
1
answer
3k
views
Why is WPA3 using 192-bit encryption?
Why is WPA3 going to be using 192-bit encryption and not 256-bit in the security suite?
- 491
9
votes
1
answer
2k
views
Are networks using EAP-TLS affected by Heartbleed?
Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
- 6,763
9
votes
2
answers
937
views
wireless security - Authentication and Association
I am trying to learn wireless security a bit more technically but resources out there on the net are so confusing. Here is my understanding.
There are two types of Authentication:
1) Open System ...
- 213
8
votes
4
answers
625
views
Password-less network in skyscraper office
If a company has offices way up in a skyscraper, is it acceptable to have an open network without a password, as an easy-to-use courtesy to visiting guests?
The only ones that possibly would be able ...
- 1,821
8
votes
5
answers
427
views
How might the BBC snoop on wi-fi usage?
It's just been reported that the BBC plan to deploy wi-fi detection vans to identify users who are streaming content from their internet service (BBC iPlayer) without a TV license. For example, see ...
- 183
8
votes
1
answer
11k
views
Free hotspot: Open wifi vs. WPA2 wifi with known password
If we would want to give internet for free via WIFI, then what would be the better option and why from a security standpoint if we could only choose between:
A non-encrypted wireless network setup
...
- 1,201
8
votes
1
answer
6k
views
What makes PINless Wi-Fi Direct using WPS on Android secure?
I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup),
and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
- 337
7
votes
4
answers
9k
views
How can I intercept video over a wireless network in real time?
Can you sniff the packets or use a network analyzer or MITM or ARP spoofing to somehow be able to see the videos that someone else is watching on a network in real time?
Also: Can you somehow see ...
- 349
7
votes
3
answers
290
views
What would be the application-level equivalent of dynamic communication secrets?
I'm probably just thick and sufficiently new to security related issues in software development, but since I can't find information and I've been stuck on Googling this for a while.
Recently I came ...
- 259
7
votes
4
answers
2k
views
Is a wireless receiver a security weak point?
I have bought the Logitech Wireless Presenter R400, and it includes a Wireless receiver that it should be plugged in to the computer in order for the remote send signals to the computer.
I would like ...
- 1,119
7
votes
1
answer
3k
views
In WPA2-Enterprise, where does AES come in?
WPA2-Enterprise uses 802.1X to facilitate authentication, but when and how is CCMP/AES used to encrypt the data after the authentication is completed?
Let us say you want to use PEAP, and the TLS ...
- 173
7
votes
2
answers
1k
views
Remediation against relay attacks (ie. NFC)
Question first: Is there any remediation for passive MITM?
I've come across examples of NFC relay attacks which use phones to get around the proximity requirement for NFC payments.
It looks ...
- 1,040