3 ms·
You can hijack it in unprotected WiFi easily (e.g. firesheep), but even if it's protected, an attacker can use ARP poisoning to route all traffic to the attacke
by elbenshira 16y ago
You can hijack it in unprotected WiFi easily (e.g. firesheep), but even if it's protected, an attacker can use ARP poisoning to route all traffic to the attacker, and thus steal the sessions (and firesheep should still work in this case).
- gojomo 16y agoAre most/all common WiFi access points vulnerable to ARP poisoning?
- rix0r 16y agoAs far as I know, all networks over a shared medium are vulnerable to ARP poisoning. So in the old days, that was networks using hubs (instead of switches), these days it's wireless networks.
- gojomo 16y agoMy understanding of the latest (WPA2) WiFi security is that each client creates a private channel with the access point – so it's totally up to the access point whether to trust, or route, anything any client says. That would suggest resistance to ARP poisoning is possible, at least. But I could be wrong, hence the question.
- JonnieCache 16y agoARP poisoning is an inherent problem with the design of IP. There is no real defence against it, on any network that uses IP, regardless of what is running on the link layer (ethernet or any other 802.x protocol) Just keep it under your hat lest someone put it into a firefox extension.