Free Wi-Fi* * just friend my business on Facebook
A hotel already asked me to do this once (although they had to manually verify that I friended)
Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
71–80 of 116 posts
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#72If you set up your network using radius, this becomes a non-issue radius is not horribly hard to set up either - its also not automatic, the user has to choose to share the wifi password - which they could do anyhow, as you've given it to them to connect. https://www.windowsphone.com/en-gb/how-to/wp8/connectivity/w... - Section: "I'm concerned about sharing WiFi networks. Can you tell me a little more?"
Radius?
Radius is an authentication protocol that is quite widely used, including in WPA-Enterpise. Here there is no fixed password, but a system that allows multiple users with separate passwords.
By using WPA-Enterprise, this wifi sense feature will likely do nothing.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#73"The only way to opt out of this "feature" is to change the name of your SSID to include _optout at the end" Google requires you to have "_nomap" at the end of SSIDs to "opt out" of certain services...
Why do they do this instead of just ignoring networks with hidden SSIDs?
I believe they also ignore hidden SSIDs, but those come with other problems, so they added a way to opt-out without hiding it.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#74If you set up your network using radius, this becomes a non-issue radius is not horribly hard to set up either - its also not automatic, the user has to choose to share the wifi password - which they could do anyhow, as you've given it to them to connect. https://www.windowsphone.com/en-gb/how-to/wp8/connectivity/w... - Section: "I'm concerned about sharing WiFi networks. Can you tell me a little more?"
When home networking equipment start shipping with RADIUS servers you might have a point, but right now all they can do is forward RADIUS authentication requests to your RADIUS authentication server.
RouterOS ships with one. But RouterOS/Mikrotik offers some pretty incredible functionality at a sub-$35 price point. It is very atypical of anything (even in the SMB space).
However RouterOS isn't a "consumer" system by design. In fact you better have solid network knowledge or you'll struggle even as a power user.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#75Earlier quoted context omitted.
They could require "secure enclave" hardware. But that'd need cooperation with the NIC, too, eh? Most likely they mean "we disable the show password option".
Based on what I read on one of their FAQs, it is not as good as a secure enclave, but it is quite a bit better than simply not providing a show password option. The password is not stored on the devices of the people you share with. It's stored on Microsoft servers. When the device someone you have shared with notices that a network you've shared is available, it gets the key to connect, then presumably forgets it. I…
I also think (3) you could craft a known challenge for the microsoft server and rainbow table the response.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#76[deleted]
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#77Asking people to change their SSID so the system won't share something they are not supposed to be sharing to begin with is very ridiculous. I really don't understand why this is not opt-in to begin with. Microsoft should be forcing people to put in _optin in their SSID to allow this feature to work if they are so inclined to use an SSID to regulate access. At least it would be semi-tolerable if there was a web form…
Agreed. At my house, we have three laptops, a desktop, three tablets and two smart phones. I don't want to have to change the wireless settings of nine devices because of Microsoft.
If this features truly works as stated, it is an incredibly arrogant thing for MS to do.
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#78"The only way to opt out of this "feature" is to change the name of your SSID to include _optout at the end" Google requires you to have "_nomap" at the end of SSIDs to "opt out" of certain services...
So it's becoming the robots.txt of routers?
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#79After thinking about it for a bit, couldn't a worm with fake Facebook accounts that are friends-of-friends with a high percentage of the population use this to spread virtually unimpeded? I suspect that the API is such that all of the friends of the fake accounts will relay to the fake accounts all of their respective friends passwords (given they had connected to said friend's network at least once), and that two st…
[deleted]
Re: Windows 10 “WiFi Sense” automatically leaks your wifi password to strangers
#80[deleted]