4 ms·

Melbournian here: I'd hold off labelling it world class just yet, Also worth noting is that the network is completely insecure - the entire network has no passw

by mrmondo 10y ago

Melbournian here: I'd hold off labelling it world class just yet, Also worth noting is that the network is completely insecure - the entire network has no password on the WPA2 SSIDs at all so your traffic is unencrypted and ripe for the taking for anyone that wants it, it's not only bad practise - it's down right irresponsible and misleading. Couple that with the fact that the ISP backing most of it is notoriously shaftey - engaging in anticompetitive behaviour and been screwing over Australian citizens for decades, are one of the most expensive ISPs to peer with in the world and have a terrible support track record.

JumpCrisscross 10y ago
> I'd hold off labelling it world class just yet What does "world class" even mean in this context? 0.8 Mbps like Malawi [1]? 26.7 like South Korea? 5.6 Mbps, the global simple average [2]? [1] http://www.oafrica.com/broadband/household-internet-speeds/ http://www.oafrica.com/broadband/household-internet-speeds/ [2] https://en.m.wikipedia.org/wiki/List_of_countries_by_Internet_connection_speeds https://en.m.wikipedia.org/wiki/List_of_countries_by_Interne...
- hueving 10y ago
  >What does "world class" even mean in this context? It has access to the content on the "world" internet.
yitchelle 10y ago
Maybe ths is what world class means.... "The quality of the network is unparalleled in Australia and on par with world-class free public Wi-Fi networks in New York, London and San Francisco." - from the announcement.
nrki 10y ago
> Also worth noting is that the network is completely insecure - the entire network has no password on the WPA2 SSIDs FYI, even if it had a password, if everyone knows it, they have access to all your traffic anyway.
- dx034 10y ago
  Correct me if I'm wrong, but WPA2 should have individual keys for each client, so that you cannot read the traffic of other connected users.
  - JimmyAustin 10y ago
    They do, but if you intercept the handshake that occurs every time someone joins the network, and you have the network key, they get that to.
    - awestroke 10y ago
      That doesn't sound right. Doesn't WPA2 include some form of Diffie-Hellman during the handshake? Doesn't prevent MITM, but should prevent snooping
      - hueving 10y ago
        Nope: http://crypto.stackexchange.com/questions/5927/why-does-wpa-psk-not-use-diffie-hellman-key-exchange http://crypto.stackexchange.com/questions/5927/why-does-wpa-... If you're in PSK mode, it's assumed you're trusted. Perfect forward secrecy wasn't a target of PSK mode. Also, if you're going to do a DH exchange and give the key out to everyone, there is no point in having the key in the first place, just do a plain old DH exchange.
  - sasas 10y ago
    If you have the key and the pcap of the traffic, you can decrypt the traffic in Wireshark.
deleted 10y ago
[deleted]
bootload 10y ago
"the network is completely insecure - the entire network has no password on the WPA2 SSIDs at all so your traffic is unencrypted and ripe for the taking for anyone that wants it, it's not only bad practise - it's down right irresponsible and misleading." Agree, pretty insecure. VPN ~ http://au.pcmag.com/networking/4558/feature/free-vpn-services-you-should-know-about http://au.pcmag.com/networking/4558/feature/free-vpn-service... What would be a better solution?

by mrmondo 10y ago

JumpCrisscross 10y ago

> I'd hold off labelling it world class just yet What does "world class" even mean in this context? 0.8 Mbps like Malawi [1]? 26.7 like South Korea? 5.6 Mbps, the global simple average [2]? [1] http://www.oafrica.com/broadband/household-internet-speeds/ http://www.oafrica.com/broadband/household-internet-speeds/ [2] https://en.m.wikipedia.org/wiki/List_of_countries_by_Internet_connection_speeds https://en.m.wikipedia.org/wiki/List_of_countries_by_Interne...

hueving 10y ago
>What does "world class" even mean in this context? It has access to the content on the "world" internet.

yitchelle 10y ago

Maybe ths is what world class means.... "The quality of the network is unparalleled in Australia and on par with world-class free public Wi-Fi networks in New York, London and San Francisco." - from the announcement.

nrki 10y ago

> Also worth noting is that the network is completely insecure - the entire network has no password on the WPA2 SSIDs FYI, even if it had a password, if everyone knows it, they have access to all your traffic anyway.

dx034 10y ago
Correct me if I'm wrong, but WPA2 should have individual keys for each client, so that you cannot read the traffic of other connected users.
- JimmyAustin 10y ago
  They do, but if you intercept the handshake that occurs every time someone joins the network, and you have the network key, they get that to.
  - awestroke 10y ago
    That doesn't sound right. Doesn't WPA2 include some form of Diffie-Hellman during the handshake? Doesn't prevent MITM, but should prevent snooping
    - hueving 10y ago
      Nope: http://crypto.stackexchange.com/questions/5927/why-does-wpa-psk-not-use-diffie-hellman-key-exchange http://crypto.stackexchange.com/questions/5927/why-does-wpa-... If you're in PSK mode, it's assumed you're trusted. Perfect forward secrecy wasn't a target of PSK mode. Also, if you're going to do a DH exchange and give the key out to everyone, there is no point in having the key in the first place, just do a plain old DH exchange.
- sasas 10y ago
  If you have the key and the pcap of the traffic, you can decrypt the traffic in Wireshark.

deleted 10y ago

[deleted]

bootload 10y ago

"the network is completely insecure - the entire network has no password on the WPA2 SSIDs at all so your traffic is unencrypted and ripe for the taking for anyone that wants it, it's not only bad practise - it's down right irresponsible and misleading." Agree, pretty insecure. VPN ~ http://au.pcmag.com/networking/4558/feature/free-vpn-services-you-should-know-about http://au.pcmag.com/networking/4558/feature/free-vpn-service... What would be a better solution?