3 ms·

Yeah, back in the day before HTTPS was common, this used to be a viable attack where people would set up rogue hotspots at cafes and whatnot and intercept all y

Yeah, back in the day before HTTPS was common, this used to be a viable attack where people would set up rogue hotspots at cafes and whatnot and intercept all your traffic.

lxgr 3y ago
That's only possible for unencrypted networks/SSIDs, though.
- solardev 3y ago
  I think that's a different attack, where you could passively sniff wifi traffic from networks without WEP. I meant more just hosting your own hotspot with a popular name, forcing clients to connect to it via disconnect/reconnect attacks, and then you're essentially a tiny MITM ISP that can monitor all their unencrypted traffic
  - lxgr 3y ago
    > hosting your own hotspot with a popular name, forcing clients to connect to it via disconnect/reconnect attacks You can only do that for unencrypted networks or those for which you know the passphrase, though.
    - solardev 3y ago
      Yes, like most public hotspot in cafes, schools, libraries, etc where the password is readily shared.
- deleted 3y ago
  [deleted]