D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] OT: WiFi Repeater - same SSID or not?

 
On 21/01/18 09:16, Simon Waters wrote:
> Clients will talk to any WiFi access point with same ESSID+password+encryption 
> scheme. So yes same ESSID makes sense if the device permits it.
> 
> There is no access point authentication in current WiFi encryption schemes, so 
> anyone who knows your password can intercept and read all the traffic that isnât 
> encrypted at a higher level in the stack (e.g TLS).

Some wifi network hardware supports something called "client isolation"
that will prevent the wifi users 'seeing' each other on the network - it
used to be a high-end feature but it's not uncommon to see it on garden
variety SOHO equipment or even bog standard ISP provided routers these
days.

Depending on how it's implemented it won't necessarily stop a
determined/skilled attacker from VLAN hopping or ARP sweeping their way
around it but it should stop a cheeky teenage relative popping their
laptop's wifi card into promiscuous mode and dumping all your network
traffic via wireshark for example.

If a "bad actor" is already in possession of your wifi credentials AND
on your network however you already have a serious problem, obviously.

Cheers

-- 
The Mailing List for the Devon & Cornwall LUG
https://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq