linux-kernel - Re: EFF's Open Wireless Movement - solutions for Linux 802.11 APs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTikDhhOW-sJ_iwxgzpDME9_XK-e8aQ@mail.gmail.com>
Date:	Fri, 29 Apr 2011 12:50:00 +0200
From:	Gábor Stefanik <netrolller.3d@...il.com>
To:	"Luis R. Rodriguez" <mcgrof@...il.com>
Cc:	linux-wireless <linux-wireless@...r.kernel.org>,
	linux-kernel@...r.kernel.org, openwireless@....org
Subject: Re: EFF's Open Wireless Movement - solutions for Linux 802.11 APs

On Thu, Apr 28, 2011 at 7:05 PM, Luis R. Rodriguez <mcgrof@...il.com> wrote:
> The EFF announced an effort and desire to promote open wireless
> networks instead of closed encrypted networks to help users with
> connectivity. They have come up with some alternative proposals and
> challenges which they are asking for review / help on. As far as Linux
> is concerned I've started a wiki [2] to cover what we can do for
> 802.11 Linux based APs. Feel free to extend the wiki as you see fit
> and / or subscribe for changes.
>
> [1] https://www.eff.org/deeplinks/2011/04/open-wireless-movement
> [2] http://wireless.kernel.org/en/developers/OpenWirelessMovement
>
>  Luis
> --
> To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
> the body of a message to majordomo@...r.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>

While everyone seems to be talking about people abusing your open
networks to download child porn, there is another issue: on an open
network, not only can everyone connect - any user can also snoop on,
and/or inject fake data into, any other user's communication.
The solution could be creating a modified version of WPA that does
encryption, but not authentication (i.e. lets anyone join the network,
but prevents one user from snooping on another one).

-- 
Vista: [V]iruses, [I]ntruders, [S]pyware, [T]rojans and [A]dware. :-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/