13

TIL if you know the password for a WIFi SSID, you can replicate it with your hardware. All devices that have credentials for that SSID will connect to yours if your signal is stronger. The encryption just needs to be the same (wpa2/wep) The underlying UUID doesn’t matter.

Not bad for a quick and dirty man-in-the-middle attack. The WiFi spec needs a bit more work.
TLS all the things!

Comments
  • 1
  • 2
    It's a feature
  • 1
    @electrineer yup.
    its an great feature for companies. An example:
    you are an sysadmin at QWERTY/Z Corp and you want to setup three wifis that are recieveable all over the company. one wifi is for the company notebooks, one for the employee breakrooms and one for guests. the accesspoints you buyed are Multissid capable.
  • 1
    Solution:
    1 SSID for the notebooks(QWERTYZ-WIFI)
    1 SSID for the employees(QWERTYZ-EMP)
    1 SSID for guests(QWERTYZ-GUEST)
    Advantage against more SSIDs:
    +easy configuration
    +only 1 SSID needs to be saved on the devices
    +switching betwen 2 AP is easy
Add Comment