Earlier quoted context omitted.
Says in the article "unless you use 802.11w" So, fixable; just not supported by everything.
Even 802.11w doesn't fix the fundamental problem... WiFi runs in an unlicensed band, and anything else in those bands might disrupt it. There is no service guarantee. You should never rely on it working, especially not for security or safety.
WiFi deauthentication attacks and home security
21–30 of 232 posts
Re: WiFi deauthentication attacks and home security
#22Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
Re: WiFi deauthentication attacks and home security
#23Earlier quoted context omitted.
Unlikely. Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place and no intent to record confidential conversations in the first place. Either way, it's not a well written post. I'd shred it here but the comments below it already cover what I would have said.
It's not clear that a corridor inside an access controlled building is a public place.
Re: WiFi deauthentication attacks and home security
#24Earlier quoted context omitted.
It's not clear that a corridor inside an access controlled building is a public place.
Edit: it seems it is divided and cases have gone both ways in regards to expectation of privacy in apartment buildings: https://illinoislawreview.org/print/vol-2018-no-3/fourth-ame...
Re: WiFi deauthentication attacks and home security
#25Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
Re: WiFi deauthentication attacks and home security
#26Earlier quoted context omitted.
> Devices installed for security purposes cannot trigger wiretapping charges since there's no reasonable expectation of privacy in a public place These ring devices are also installed outside of the US. The law is entirely different in other countries. A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok. For Netherland…
> A statement as "no reasonable expectation of privacy": why not? Just because people could record and film you doesn't mean it's allowed or that it's ok In the US, it is allowed and is OK, though. Legally, you do not have a right to privacy if you are in a public location as a hallway in an apartment building would be considered. Whether or not it is a nice or considerate behavior is moot when it comes to the law. E…
The statement probably is entirely reasonable if you're born in the US (as you're used to it). Other countries have other expectations of what's reasonable and normal.
The often repeated "no reasonable expectation of privacy" in a public place to me is entirely odd. It's also something that could change (whether such a change/perception is in e.g. NL or in the US).
Technology makes things possible that weren't possible before at all. Meaning, you can store camera recordings for a ridiculously long time. From my buildings security (again: NL) I understood that legally they cannot store such recordings over 28 days. Above that things become difficult (possible but quite a hassle).
In the past people could see what you're doing in a public space. But nowadays you can easily be recorded and that recording could be stored forever. That was never the case before. As a result, things such as "no reasonable expectation of privacy" should change with the changed circumstances, IMO.
Re: WiFi deauthentication attacks and home security
#27Re: WiFi deauthentication attacks and home security
#28If you want to check for yourself if someone close by i sending deauthentication packages; fire up a Mac and:
1. Open Wi-Fi-diagnostics and change to 'Sniffer' from the Window-tab
2. Dump 30sec-1min of data. The dump is saved to /var/tmp ending with .pcap
3. Open the .pcap file in WireShark and search for wlan[0] == 0x0C
For all the different WiFi packages to filter for: https://www.willhackforsushi.com/papers/80211_Pocket_Referen...
The router Synology RT2600AC is the only one I have found that guard against deauthentication packages by supporting WPA3 and PMF (encrypt management frames). iOS 13, Mac OS Catalina and Windows 10 support WPA3 so it comes down to your router.
Re: WiFi deauthentication attacks and home security
#29Re: WiFi deauthentication attacks and home security
#30I think the title should be changed to something like "how to protect your privacy with Wifi deauthentication". Incidentally, I was considering one of these devices as an addition to my home automation setup, then I realized that it would not be cool to monitor every person getting out of the elevators on my floor.
Also, deauth isn't anything new and you don't have to 'hack' anything in aircrack-ng since all of the tools for this are available out of the box, with nice configuration to select what has to be included and what excluded from deauth.