4 ms·
> Also worth noting is that the network is completely insecure - the entire network has no password on the WPA2 SSIDs FYI, even if it had a password, if everyo
by nrki 10y ago
> Also worth noting is that the network is completely insecure - the entire network has no password on the WPA2 SSIDs
FYI, even if it had a password, if everyone knows it, they have access to all your traffic anyway.
- dx034 10y agoCorrect me if I'm wrong, but WPA2 should have individual keys for each client, so that you cannot read the traffic of other connected users.
- JimmyAustin 10y agoThey do, but if you intercept the handshake that occurs every time someone joins the network, and you have the network key, they get that to.
- awestroke 10y agoThat doesn't sound right. Doesn't WPA2 include some form of Diffie-Hellman during the handshake? Doesn't prevent MITM, but should prevent snooping
- hueving 10y agoNope: http://crypto.stackexchange.com/questions/5927/why-does-wpa-psk-not-use-diffie-hellman-key-exchange http://crypto.stackexchange.com/questions/5927/why-does-wpa-... If you're in PSK mode, it's assumed you're trusted. Perfect forward secrecy wasn't a target of PSK mode. Also, if you're going to do a DH exchange and give the key out to everyone, there is no point in having the key in the first place, just do a plain old DH exchange.
- sasas 10y agoIf you have the key and the pcap of the traffic, you can decrypt the traffic in Wireshark.