3 ms·
Plus, there's an obvious security hole: Any access point can say "Yes, I'm that access point you're looking for! Please do your banking through me! I'm ever so
by msla 7y ago
Plus, there's an obvious security hole: Any access point can say "Yes, I'm that access point you're looking for! Please do your banking through me! I'm ever so much not a malicious system spoofing your laptop by lying to it!" precisely because the laptop has to ask for the SSID, and those questions, the probe requests, are not encrypted.
- zelly 6y agoHTTPS adoption is probably why this hasn't been publicly exploited yet.
- bronco21016 6y agoHTTPS and HSTS can be broken. The main hurdle to this attack vector at this point is most browsers throw up scary warnings and do not give super obvious paths to waving away the warning.
- vlan0 6y agoNah, this is a widely known issue. But the real win is credential harvesting from networks still running PEAP-MSCHAPv2. It certainly has been used to harvest credentials, but good luck discovering the dude who walks through a busy college campus with a WiFi Pineapple in his backpack.