Any decent way to always deny Microsoft devices on our network?
Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
41–50 of 116 posts
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#42Earlier quoted context omitted.
On the contrary, dealing with captive portals is quite annoying, especially since they just generate browser warnings with HTTPS. You have to go out of your way to open a plain-HTTP website so that it can be intercepted properly, just so you can click "I accept" again. Additionally, these things have short memories - if you're at a coffee shop you frequent, you might be clicking through the captive portal for the 150…
Yeah but, you're basically agreeing to assume risk. You still get a choice - you choose to ignore the TOS and click through. Time and again courts have upheld click-through TOS and EULAs. Ignorance is rarely an excuse. So if something clicks through a captive portal for you, the defense of "I didn't know..." isn't going to hold much water. The only defense might be that Microsoft accepted the terms and they should ac…
There's a pretty big difference between "it was too long and I didn't read it so I just clicked Agree at the bottom" and "I had no idea the thing was even there because Microsoft's software hid it from me."
If there was no reasonable way for you to even know the terms were there at all, I don't think any court is going to consider them to be binding. That's why these places show them to you when you try to use their network, instead of just hiding them in the freezer.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#43This is a lot like what got Google in trouble - mapping all WiFi access points while collecting StreetView images. Microsoft is just doing it in a distributed way. Does all the collected WiFi data go to Microsoft HQ?
Could you actually design this feature in a way that didn't share all the raw WIFI passwords with Microsoft? I think it would be pretty difficult. Bear in mind though that Google probably knows your wifi password if you or a friend syncs their phone's authentication data. (Google's legal troubles were a separate issue btw)
I don't think it would be too difficult, design-wise.
Have every Win10 installation generate a public/private key pair. Share the public key with MS.
When you share a password with all your contacts, MS can send all of their public keys to you, where you then encrypt the password with them and send the results back to MS. MS can then send the encrypted passwords to the contacts, who can then retrieve the password with their private key.
Something tells me they probably didn't do it this way, but it doesn't sound like a particularly hard goal to achieve if one thought it was important.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#44Earlier quoted context omitted.
Router companies should get together with Microsoft and make some kind of Flag you can tick, so your router actively tells you can't share this, without the ridicules name of "_optout" as last part :)
That's one solution. I don't think it's ideal. Not everyone would know to tick that box. I would, but my friends would not and their networks would be vulnerable. It could also require buying new hardware. Once again, I would know to look for a Wi-Fi Sense-proof router, but my friends would not. I also don't think we should be expected to solve problems that Microsoft caused. Why should the industry adapt to Windows…
Maybe instead they could have router makers add a flag to opt in to this insanity. Then if people really thought it was important for their networks, they could ensure they have compatible hardware, and turn it on.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#45Note that this has been a public feature since windows phone 8 was released, two and a half years ago.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#46I've developed an app that lets you log on to your friends' Windows machines without having to know the password! Don't worry, it's just Facebook friends.
Someone has to realize how dangerous this is. How would ANY corporation EVER allow a single Windows 10 machine to connect to their wifi, let alone contractors, or...
Do they not realize how paranoid network admins are to begin with? Windows XP forever, I guess.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#47If you set up your network using radius, this becomes a non-issue radius is not horribly hard to set up either - its also not automatic, the user has to choose to share the wifi password - which they could do anyhow, as you've given it to them to connect.
https://www.windowsphone.com/en-gb/how-to/wp8/connectivity/w... - Section: "I'm concerned about sharing WiFi networks. Can you tell me a little more?"
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#48Earlier quoted context omitted.
They will only wreck security, because you personally gave them the password, instead of using this system from the start, change your password upon windows 10 release and you are golden? :) Edit1: tho i can see the downsides of this, add you neighbor on Facebook and get free access to their WiFi xD Edit2: You can select whether, you want to share network with Outlook, Skype and Facebook friends, so what i wrote in E…
"using this system from the start" I don't use Windows, so I cannot use this system at all. "add you neighbor on Facebook and get free access to their WiFi" That's missing the much bigger downside. Give your neighbor your Wi-Fi password and they can share it with hundreds of their friends automatically. Microsoft claims users will not be able to find the password and that users will only be able to access the Interne…
> Give your neighbor your Wi-Fi password and they can share it with hundreds of their friends automatically.
Give your neighbor your Wi-Fi password, and they can trumpet it on the streets, distribute on pamplets, post it on HN, and update their Facebook status with it.
I am a little shocked at the HN reaction here. I've had a Windows Phone since January and I've thought the feature was not only useful, but a great idea. The only benefit for me has been the automatic TOS acceptance though since nobody else I know has a Windows Phone.
If you're running a "secure" wireless network and don't want anyone else to use it, well, don't give anybody you don't trust the password, and make sure they're not running services like Wi-Fi Sense. Generally speaking, the common man is going to want any of his friends he lets into his house onto his Wi-Fi anyway.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#49I've developed an app that lets you log on to your friends' Windows machines without having to know the password! Don't worry, it's just Facebook friends. Someone has to realize how dangerous this is. How would ANY corporation EVER allow a single Windows 10 machine to connect to their wifi, let alone contractors, or... Do they not realize how paranoid network admins are to begin with? Windows XP forever, I guess.
I don't think WPA2 Enterprise with RADIUS is supported.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#50Note that this has been a public feature since windows phone 8 was released, two and a half years ago.
It came with WP 8.1, so it's only be around for about year. The real difference is that hardly anybody uses WP 8.1, whereas there is a very real chance that Windows 10 will become a popular and widespread OS.