Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Map of Wireless Passwords from Airports and Lounges

foxnomad.com

Post reply on HN
Print view View original

71–80 of 124 posts

Re: A Map of Wireless Passwords from Airports and Lounges

#71

Post by icebraining »

voltagex_ wrote: post #68
icebraining wrote: post #61

Earlier quoted context omitted.

How would root or iOS help you? The problem is that each captive portal is different, so you need the user to "teach" it once. Seems a reasonable approach to me.

Root would allow packet capture without the VPN framework that may not work before there's a network "up" (I should try tShark). I guess I'm just a bit exasperated about how the lesser-used parts of Android have far less attention to detail (there's no reason this couldn't be a built in feature)

Why would you do this with packet capture? You'd have to install a root cert and MITM connections, it'd be much more messy and dangerous.

Re: A Map of Wireless Passwords from Airports and Lounges

#72

Post by labourcurious »

dsr_ wrote: post #12

The author claims to be a computer security engineer, yet is deliberately setting up a tool to defeat security -- not an abstract tool, useful in surveying and thus improving your own security and incidentally capable of being used for mischief, but nothing more than a list of identifiers and passwords. The only indicator you can gain from this is that someone betrayed your trust. If this profession had a board of et…

WiFi passwords aren't about security for the people using the network, they're about blocking people who haven't paid for it. If, as an attacker, one of your targets is using JFK's airport WiFi, getting the password for that WiFi is the least of your problems.

Whether it's ethical to hand out passwords to people who haven't paid for WiFi is another question entirely, but wouldn't it be sweet if businesses just let anyone join their WiFi? Bike repair shops always leave a pump outside for anyone to use, not just customers.

Re: A Map of Wireless Passwords from Airports and Lounges

#73

Post by sbr464 »

I needed to connect an Apple TV to a blocked wifi at a hotel, Just sharing, here are the instructions using a macbook to get past hotspot auth, since there isn't a browser on an Apple TV

1. Disconnect from ap by option+click status bar wifi icon

2. Write down your current wifi mac address

  ifconfig en0 | grep ether
3. Switch macbook to Apple TV mac address

  sudo ifconfig en0 ether [apple tv mac address]
4. Connect to wifi, authenticate, then disconnect from ap with option+click again

5. Switch back to original mac address

  sudo ifconfig en0 ether [original macbook mac address]
6. Connect apple tv to wifi ap normally

Re: A Map of Wireless Passwords from Airports and Lounges

#74

Post by voltagex_ »

icebraining wrote: post #71
voltagex_ wrote: post #68

Earlier quoted context omitted.

Root would allow packet capture without the VPN framework that may not work before there's a network "up" (I should try tShark). I guess I'm just a bit exasperated about how the lesser-used parts of Android have far less attention to detail (there's no reason this couldn't be a built in feature)

Why would you do this with packet capture? You'd have to install a root cert and MITM connections, it'd be much more messy and dangerous.

I haven't seen a portal with SSL (correctly) configured - are there any that don't work by capturing DNS/HTTP and redirecting to a login page?

You're already essentially doing MITM by redirecting form actions.

Re: A Map of Wireless Passwords from Airports and Lounges

#75

Post by frgewut »

remcob wrote: post #67
dsr_ wrote: post #12

The author claims to be a computer security engineer, yet is deliberately setting up a tool to defeat security -- not an abstract tool, useful in surveying and thus improving your own security and incidentally capable of being used for mischief, but nothing more than a list of identifiers and passwords. The only indicator you can gain from this is that someone betrayed your trust. If this profession had a board of et…

> not using encryption Not a viable option, this would allow anyone to intercept traffic. (To be fair, a lot of wifi routers are broken and will forward you all decrypted traffic from other users anyway on request. Try running WireShark on public wifis.) The big problem is that Wifi with no password provides no privacy. Ideally we would have a wifi mode that is encrypted, but does not require a password. Just like Ht…

Actually WPA with pre-shared key doesn't provide any security if key is publicly known (as someone can setup mitm device).

For wifi without password you should look at WPS.

Re: A Map of Wireless Passwords from Airports and Lounges

#76

Post by baud147258 »

Rjevski wrote: post #48
baud147258 wrote: post #38

Earlier quoted context omitted.

The password was changing everyday where I worked, with the daily password available on an intranet page, but then a few months ago a bunch of higher-ups were present in the office for a few days and wanted Wi-Fi access without having to type a new password each day, so the password rotation has been deactivated since

Well they chose convenience over security, which in this case is fair enough (it's public Wi-Fi to being with). Another solution would've been to implement WPA2 Enterprise, where employees could have their own, permanent credentials while visitors get temporary ones.

Also I don't think you can access anything in the intranet on that Wi-Fi, it's entirely public, as you said.

Re: A Map of Wireless Passwords from Airports and Lounges

#77

Post by imgabe »

sjwright wrote: post #42
dsr_ wrote: post #12

The author claims to be a computer security engineer, yet is deliberately setting up a tool to defeat security -- not an abstract tool, useful in surveying and thus improving your own security and incidentally capable of being used for mischief, but nothing more than a list of identifiers and passwords. The only indicator you can gain from this is that someone betrayed your trust. If this profession had a board of et…

A password that has already been handed out to thousands or tens of thousands of customers isn't "security".

That doesn't make it right to hand it out.

If a hotel room uses old fashioned keys, can one customer make a copy of the key and start handing it out on the street to anyone who wants to go into the room? Just because many other people have paid to use it before?

People pay for access to the lounge, at least in part, for the better, less congested, more reliable wifi.

Re: A Map of Wireless Passwords from Airports and Lounges

#78

Post by paublyrne »

I'm not sure this is a good thing to do, but airports that don't have free open wifi annoy me. It's so useful to have internet access when you arrive in a foreign country, for figuring out how to get into the city, or to communicate with a hotel etc, and sometimes its unfeasible to use your own sim abroad. It just seems a petty thing for airports to do, to try and make a few dollars or euros or pounds that way.

Re: A Map of Wireless Passwords from Airports and Lounges

#79

Post by icebraining »

voltagex_ wrote: post #74
icebraining wrote: post #71

Earlier quoted context omitted.

Why would you do this with packet capture? You'd have to install a root cert and MITM connections, it'd be much more messy and dangerous.

I haven't seen a portal with SSL (correctly) configured - are there any that don't work by capturing DNS/HTTP and redirecting to a login page? You're already essentially doing MITM by redirecting form actions.

I haven't seen a portal with SSL (correctly) configured - are there any that don't work by capturing DNS/HTTP and redirecting to a login page?

The ones I've used recently all capture DNS/HTTP, but use it to redirect to an HTTPS page with the actual form - which you'd have to MITM.

You're already essentially doing MITM by redirecting form actions.

Yes, but inside a single webview, not system-wide!

Post reply on HN