Live data from Hacker News

WiFi deauthentication attacks and home security

mjg59.dreamwidth.org

21–30 of 232 posts

Re: WiFi deauthentication attacks and home security

#21

Earlier quoted context omitted.

Says in the article "unless you use 802.11w" So, fixable; just not supported by everything.

Even 802.11w doesn't fix the fundamental problem... WiFi runs in an unlicensed band, and anything else in those bands might disrupt it. There is no service guarantee. You should never rely on it working, especially not for security or safety.

Anything running over rf is vulnerable to jamming. It's really just a matter of how much disruption an attacker is willing to cause.

Re: WiFi deauthentication attacks and home security

#22

Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.

Enterprise wifi systems from Cisco, xirrus, ruckus and others implement this feature for rogue access point suppression.

Re: WiFi deauthentication attacks and home security

#23
post #10

Earlier quoted context omitted.

Unlikely. Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place. Either way, it's not a well written post. I'd shred it here but the comments below it already cover what I would have said.

It's not clear that a corridor inside an access controlled building is a public place.

Edit: it seems it is divided and cases have gone both ways in regards to expectation of privacy in apartment buildings: https://illinoislawreview.org/print/vol-2018-no-3/fourth-ame...

Re: WiFi deauthentication attacks and home security

#24
post #10

Earlier quoted context omitted.

It's not clear that a corridor inside an access controlled building is a public place.

Edit: it seems it is divided and cases have gone both ways in regards to expectation of privacy in apartment buildings: https://illinoislawreview.org/print/vol-2018-no-3/fourth-ame...

Do you have case law citations for that?

Re: WiFi deauthentication attacks and home security

#25

Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.

Regardless of any encryption, wireless can always be disrupted via jamming. Even if management frames were encrypted you can still disconnect devices by jamming the signal.

Re: WiFi deauthentication attacks and home security

#26
post #17

Earlier quoted context omitted.

> Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place These ring devices are also installed outside of the US. The law is entirely different in other countries. A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok. For Netherland…

> A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok In the US, it is allowed and is OK, though. Legally, you do not have a right to privacy if you are in a public location as a hallway in an apartment building would be considered. Whether or not it is a nice or considerate behavior is moot when it comes to the law. E…

I understand that it's US and per law, but "no reasonable expectation of privacy" is more of a judgement. It should always mention that it's due to the law.

The statement probably is entirely reasonable if you're born in the US (as you're used to it). Other countries have other expectations of what's reasonable and normal.

The often repeated "no reasonable expectation of privacy" in a public place to me is entirely odd. It's also something that could change (whether such a change/perception is in e.g. NL or in the US).

Technology makes things possible that weren't possible before at all. Meaning, you can store camera recordings for a ridiculously long time. From my buildings security (again: NL) I understood that legally they cannot store such recordings over 28 days. Above that things become difficult (possible but quite a hassle).

In the past people could see what you're doing in a public space. But nowadays you can easily be recorded and that recording could be stored forever. That was never the case before. As a result, things such as "no reasonable expectation of privacy" should change with the changed circumstances, IMO.

Re: WiFi deauthentication attacks and home security

#28
In Norway/Oslo there is a lot of people with equipment sending deauthentication packages, jamming neighboring equipment, and one of the main reason for slow Internet (lot of jitter). Did some research on this together with The Norwegian Communications Authority (NKOM) to isolate the problem.

If you want to check for yourself if someone close by i sending deauthentication packages; fire up a Mac and:

1. Open Wi-Fi-diagnostics and change to 'Sniffer' from the Window-tab

2. Dump 30sec-1min of data. The dump is saved to /var/tmp ending with .pcap

3. Open the .pcap file in WireShark and search for wlan[0] == 0x0C

For all the different WiFi packages to filter for: https://www.willhackforsushi.com/papers/80211_Pocket_Referen...

The router Synology RT2600AC is the only one I have found that guard against deauthentication packages by supporting WPA3 and PMF (encrypt management frames). iOS 13, Mac OS Catalina and Windows 10 support WPA3 so it comes down to your router.

Re: WiFi deauthentication attacks and home security

#30

I think the title should be changed to something like "how to protect your privacy with Wifi deauthentication". Incidentally, I was considering one of these devices as an addition to my home automation setup, then I realized that it would not be cool to monitor every person getting out of the elevators on my floor.

I suppose the idea of the article is to resist your neighbours monitoring you as you come home? That is actually a pretty good idea.

Also, deauth isn't anything new and you don't have to 'hack' anything in aircrack-ng since all of the tools for this are available out of the box, with nice configuration to select what has to be included and what excluded from deauth.

Post reply on HN