So, yeah. The wpa_supplicant bug only lets you *impersonate* an AP. It does *NOT* let you MITM it or passively decrypt. This is important.
Show this thread
-
usually the expectation is that local WPA2 will protect against attacks on a local network, because attacking the uplink is harder
Sure, but most people use random public WiFi anyway, or would be tricked by a same/similar SSID with no security.
-
-
yeah, which means it comes down to "this is only a problem because so much shit is already fucked"
-
also, contrast with the bugs in other implementations, which AIUI _do_ allow transparent decryption
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.