What we give away when we log on to a public Wi-Fi network
decorrespondent.nl
What we give away when we log on to a public Wi-Fi network
1–10 of 112 posts
Re: What we give away when we log on to a public Wi-Fi network
#2Re: What we give away when we log on to a public Wi-Fi network
#3I wonder if anyone has tried to use CloudCracker to sniff MS-CHAPv2 VPN traffic.
Re: What we give away when we log on to a public Wi-Fi network
#4Are my devices really broadcasting the SSIDs they have been connecting to?
Re: What we give away when we log on to a public Wi-Fi network
#5Are my devices really broadcasting the SSIDs they have been connecting to?
You could brute force it by using common network names and seeing which ones get bites. Take it a step further and generate expected patterns ie. "2WIRE123". I'd expect "linksys" alone would grab a surprising amount to start, though.
Re: What we give away when we log on to a public Wi-Fi network
#6How was the hacker able to get Facebook credentials? Facebook uses HTTPS and so does Live.com. Even if I'm connected to a malicious router, only me and Facebook know about the data we're sending each other.
Am I missing something or should the author of this article provide more evidence on the type of attack?
Re: What we give away when we log on to a public Wi-Fi network
#7How is he able to get them to trust the network? Is it common for software to connect to known SSIDs without verifying any other information?
Re: What we give away when we log on to a public Wi-Fi network
#8How was the hacker able to get Facebook credentials? Facebook uses HTTPS and so does Live.com. Even if I'm connected to a malicious router, only me and Facebook know about the data we're sending each other. Am I missing something or should the author of this article provide more evidence on the type of attack?
sslstrip might explain that, but don't most major sites use HSTS these days?
Re: What we give away when we log on to a public Wi-Fi network
#9How is he able to get them to trust the network? Is it common for software to connect to known SSIDs without verifying any other information?
What "other information" is there to verify?
Re: What we give away when we log on to a public Wi-Fi network
#10Considering how ridiculously cheap an anonymous VPN service is these days I am surprised how many people do not use them.