5 ms·
What about XFinity, which by default shares the wifi you pay for with strangers to create access points around the city?
by upboundspiral 8mo ago
What about XFinity, which by default shares the wifi you pay for with strangers to create access points around the city?
- bronco21016 8mo agoIt sounds like this attack would work in that scenario provided the attacker is able to connect to the guest access point. I haven’t paid attention to one in a while but I seem to remember the need to authenticate with the guest network using Xfinity credentials. This at least makes it so attribution might be possible.
- russdill 8mo agoIt looks like both clients must be on the same VLAN for the attack to work. They could be connected on different BSSIDs or even different SSIDs, but they still must be on the same VLAN.
- cluckindan 8mo agoIf the vulnerability is between layers 1 and 2, wouldn’t that imply that VLAN tagging at layer 2 might not be effective in segregating the traffic?
- cyberax 8mo agoWireless cards typically don't expose the VLAN tags directly. So VLANs should be OK.
- happyPersonR 8mo agoThis is probably the biggest issue. I turn WiFi mine off and use my own WiFi ap.
- chrisweekly 8mo agoYeah, along these lines I've always been biased strongly against using ISP hardware beyond the minimum required to connect to the outside world.
- vee-kay 8mo ago[dead]
- ProllyInfamous 8mo agoSee also: Amazon's Sidewalk (which shares your network via Ring camerae, e.g.).
- 1bpp 8mo agoAs of a few years ago, you could simply spoof your MAC to that of a Comcast subscriber with these and you'd get unrestricted access on the hotspot.
- happyPersonR 8mo agoIm not 100% sure but I think for captive portal this would def work. For the authenticated wpa3 or whatever i think theyve actually added 802.1x