Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
Unless the devices and AP support 802.11w, yes.
WiFi deauthentication attacks and home security
11–20 of 232 posts
Re: WiFi deauthentication attacks and home security
#12Depending on where you live, your neighbors recording audio may be illegal and you should confront them about it https://www.southerncaliforniadefenseblog.com/2018/04/do-rin...
Not sure if DoSing a device that's not yours is much more legal.
Marriott Hotels fined $600,000 by FCC for jamming Wi-Fi hotspots [using deauth packets] https://news.ycombinator.com/item?id=8406022
Re: WiFi deauthentication attacks and home security
#13Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
So easily that a tamagotchi style game has been made of it and other wifi attacks https://pwnagotchi.ai/
Re: WiFi deauthentication attacks and home security
#14Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
Temporarily. Most devices (rescan and) reassociate when this happens. Obviously this is enough to break devices that assume that the link is always up and never retry failed transmissions.
Re: WiFi deauthentication attacks and home security
#15>Finally, none of this is even slightly new. A presentation from Def Con in 2016 covered this, demonstrating that Nest cameras could be blocked in the same way. The industry doesn't seem to have learned from this. Well that's a kind of fundamental flaw of Wifi networks, so you're kinda stuck with this if you use Wifi, nope ?
Says in the article "unless you use 802.11w" So, fixable; just not supported by everything.
Re: WiFi deauthentication attacks and home security
#16Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
Temporarily. Most devices (rescan and) reassociate when this happens. Obviously this is enough to break devices that assume that the link is always up and never retry failed transmissions.
If you keep sending disassociate frames, most devices will continue dropping off and spending time reassociating. If you don't have significant quantities of local storage then that's enough to break video streaming.
Re: WiFi deauthentication attacks and home security
#17Depending on where you live, your neighbors recording audio may be illegal and you should confront them about it https://www.southerncaliforniadefenseblog.com/2018/04/do-rin...
Unlikely. Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place. Either way, it's not a well written post. I'd shred it here but the comments below it already cover what I would have said.
> Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place
These ring devices are also installed outside of the US. The law is entirely different in other countries. A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok.
For Netherlands: You cannot just have a camera recording the public. Though there's a bit of leeway, meaning if you have a camera recording your property it's logical that it'll record a bit of the road. You just have to minimize that bit. Interestingly enough, police actually encourages the installation of Ring camera's (so specifically Ring over anything else). It seems you can install these if it's just in front of your door and property. However, if they're on a flat (where neighbours need to walk by your door to get to your door), then you cannot have these.
Re: WiFi deauthentication attacks and home security
#18>Finally, none of this is even slightly new. A presentation from Def Con in 2016 covered this, demonstrating that Nest cameras could be blocked in the same way. The industry doesn't seem to have learned from this. Well that's a kind of fundamental flaw of Wifi networks, so you're kinda stuck with this if you use Wifi, nope ?
Says in the article "unless you use 802.11w" So, fixable; just not supported by everything.
Even 802.11w doesn't fix the fundamental problem... WiFi runs in an unlicensed band, and anything else in those bands might disrupt it. There is no service guarantee. You should never rely on it working, especially not for security or safety.
Re: WiFi deauthentication attacks and home security
#19Earlier quoted context omitted.
Unlikely. Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place. Either way, it's not a well written post. I'd shred it here but the comments below it already cover what I would have said.
> Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place These ring devices are also installed outside of the US. The law is entirely different in other countries. A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok. For Netherland…
> A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok
In the US, it is allowed and is OK, though. Legally, you do not have a right to privacy if you are in a public location as a hallway in an apartment building would be considered. Whether or not it is a nice or considerate behavior is moot when it comes to the law.
Edit: it seems findings have gone both ways in the US for expectation of privacy in apartment buildings: https://illinoislawreview.org/print/vol-2018-no-3/fourth-ame...
Re: WiFi deauthentication attacks and home security
#20Depending on where you live, your neighbors recording audio may be illegal and you should confront them about it https://www.southerncaliforniadefenseblog.com/2018/04/do-rin...
Unlikely. Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place. Either way, it's not a well written post. I'd shred it here but the comments below it already cover what I would have said.
> Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place.
In the US, perhaps. My office in Brussels can't aim a camera at the public road, for example.