So, yeah. The wpa_supplicant bug only lets you *impersonate* an AP. It does *NOT* let you MITM it or passively decrypt. This is important.
Show this thread
-
and a lot of stuff on LAN _trusts the LAN_; sure, you can't transparently MITM those with wpa_supplicant, but you can impersonate
Sure, it's not zero impact by any means, but it's also not "I'm going to walk up to your office and sniff/MITM everything".
-
-
well, you could walk up to an office and impersonate everything, which might be just as good
-
But I can already walk up to the office and impersonate the local Starbucks SSID and deauth people & MITM all your internet access too :-)
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.