4 ms·

If you wanted your Wi-Fi to be for customers only then you'd use WPA2 Enterprise with unique per-user passwords, or at least change the static password every da

If you wanted your Wi-Fi to be for customers only then you'd use WPA2 Enterprise with unique per-user passwords, or at least change the static password every day.

blowski 8y ago
You might want your WiFi to be for customers only, but not have any idea how or enough money to enforce it.
- JetSpiegel 8y ago
  I might want a pet unicorn too, then what? Changing the password everyday is an acceptable compromise.
  - baud147258 8y ago
    The password was changing everyday where I worked, with the daily password available on an intranet page, but then a few months ago a bunch of higher-ups were present in the office for a few days and wanted Wi-Fi access without having to type a new password each day, so the password rotation has been deactivated since
    - Rjevski 8y ago
      Well they chose convenience over security, which in this case is fair enough (it's public Wi-Fi to being with). Another solution would've been to implement WPA2 Enterprise, where employees could have their own, permanent credentials while visitors get temporary ones.
      - baud147258 8y ago
        Also I don't think you can access anything in the intranet on that Wi-Fi, it's entirely public, as you said.
- Rjevski 8y ago
  I might want a million dollars but have no idea how to earn it nor enough power to force everyone to give me their money. Now give me my million dollars! Let’s be real. You can’t have your cake and eat it too.
- icebraining 8y ago
  Then you probably won't know enough to setup that trap.
- michaelper22 8y ago
  Requires a geek for a few hours and Ubiquiti network gear: https://cdn.arstechnica.net/wp-content/uploads/2018/06/1unifi-18-guest-control-1440x1334.png https://cdn.arstechnica.net/wp-content/uploads/2018/06/1unif... (from https://arstechnica.com/information-technology/2018/07/enterprise-wi-fi-at-home-part-two-reflecting-on-almost-three-years-with-pro-gear/ https://arstechnica.com/information-technology/2018/07/enter...) Even integrates with Facebook WiFi to abstract away the auth systems (and further degrade privacy!)
Theodores 8y ago
Well, if I was a cafe owner worried about non-customers going nefarious things I would not be happy until IBM deploy a decentralised blockchain solution that anyone with a HTC phone hardware wallet can seamlessly sign in to with the task only taking thirty minutes or so. Or maybe make it as easy as possible, never changing the password and thereby getting repeat trade. I am sure a firewall can be opted into with the ISP to make sure nobody is downloading ISIS kiddie porn, Trump tweets etc.

If you wanted your Wi-Fi to be for customers only then you'd use WPA2 Enterprise with unique per-user passwords, or at least change the static password every day.

blowski 8y ago

You might want your WiFi to be for customers only, but not have any idea how or enough money to enforce it.

JetSpiegel 8y ago
I might want a pet unicorn too, then what? Changing the password everyday is an acceptable compromise.
- baud147258 8y ago
  The password was changing everyday where I worked, with the daily password available on an intranet page, but then a few months ago a bunch of higher-ups were present in the office for a few days and wanted Wi-Fi access without having to type a new password each day, so the password rotation has been deactivated since
  - Rjevski 8y ago
    Well they chose convenience over security, which in this case is fair enough (it's public Wi-Fi to being with). Another solution would've been to implement WPA2 Enterprise, where employees could have their own, permanent credentials while visitors get temporary ones.
    - baud147258 8y ago
      Also I don't think you can access anything in the intranet on that Wi-Fi, it's entirely public, as you said.
Rjevski 8y ago
I might want a million dollars but have no idea how to earn it nor enough power to force everyone to give me their money. Now give me my million dollars! Let’s be real. You can’t have your cake and eat it too.
icebraining 8y ago
Then you probably won't know enough to setup that trap.
michaelper22 8y ago
Requires a geek for a few hours and Ubiquiti network gear: https://cdn.arstechnica.net/wp-content/uploads/2018/06/1unifi-18-guest-control-1440x1334.png https://cdn.arstechnica.net/wp-content/uploads/2018/06/1unif... (from https://arstechnica.com/information-technology/2018/07/enterprise-wi-fi-at-home-part-two-reflecting-on-almost-three-years-with-pro-gear/ https://arstechnica.com/information-technology/2018/07/enter...) Even integrates with Facebook WiFi to abstract away the auth systems (and further degrade privacy!)

Theodores 8y ago

Well, if I was a cafe owner worried about non-customers going nefarious things I would not be happy until IBM deploy a decentralised blockchain solution that anyone with a HTC phone hardware wallet can seamlessly sign in to with the task only taking thirty minutes or so. Or maybe make it as easy as possible, never changing the password and thereby getting repeat trade. I am sure a firewall can be opted into with the ISP to make sure nobody is downloading ISIS kiddie porn, Trump tweets etc.