5 ms·
I don't see how this tests the security of a setup if it is relying on a user submitting the password themselves. There is no way to protect against your own or
by leke 12y ago
I don't see how this tests the security of a setup if it is relying on a user submitting the password themselves. There is no way to protect against your own or the stupidity of others.
- dionyziz 12y agoWhere does it say that this is testing the security of a setup?
- ssully 12y agoWhen something calls itself a security tool it's usually assumed (if not explicitly stated) that it serves some purpose for assessing the security of something. Otherwise it is just a tool made for making attacks easier to perform, which is pretty frowned upon.
- dionyziz 12y agoIt's a proof-of-concept to illustrate that users will put their passwords anywhere they are asked to and click through any warnings that may appear on their screen.
- maxerickson 12y agoA reasonable use case would be demonstrating the weakness of a naive setup to a business that wanted to charge for access.
- deanclatworthy 12y agoI've never seen a password protected paid-wifi set up. Using arp and spoofing your Mac address is often enough to pretend you are an authenticated client to most of these systems.