News New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises

[XIII]

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises

That guest network you set up for your neighbors may not be as secure as you think.

arstechnica.com

 

[Richard1864]

Well, if you use any of the Amplifi models listed, you're definitely vulnerable. None of them have received firmware updates since May 2024.

As the article clearly states, some vendors have released updates to patch at least some of the flaws. No updates with patches, then you're vulnerable. Netgear isn't well-known for security patching, nor is TP-Link.

 

[Tech9]

As proof of concept - it probably works if all the requirements are met and they are many. If it was disclosed perhaps most of it was patched already. As testing methodology I see one flaw. When testing stand-alone AP the hack may eventually go through, but when this AP is part of a Network Controller system it will sound an alarm. Most business oriented systems have Rogue AP Detection and it's a Controller function, not the AP. I have clusters of Cisco APs in use for business and they do have Rogue AP Detection. They list detections, wait for action. In UniFi there is Alarm Manager with selectable events. One of them is called Wi-Fi Impersonation Detection and can be set to send push notifications to cell phone. So this part most likely won't work in typical business environment where sysadmins know what to look for:

“This allows the attacker to set up a rogue RADIUS server and associated rogue WPA2/3 access point, which allows any legitimate client to connect, thereby intercepting their traffic and credentials.”

 

[sfx2000]

Nice thread over on HackerNews...

AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf] | Hacker News

news.ycombinator.com

 

[Viktor Jaep]

Nice thread over on HackerNews...

AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf] | Hacker News

news.ycombinator.com

Super helpful... thanks @sfx2000!

 

[Tech9]

Super helpful...

I know what you are thinking... PASSMON. Guest Network password randomizer with password rotation, QR code generator and push notification service. For Auto (Easy Mode) make it change the password at midnight and with no connected devices check. For Manual (Advanced Mode) add option for X hours extension, the party may be longer. Add vouchers option $5 per hour, it will discourage unwanted connections. Add automatic printing of "No Wi-Fi, talk to each other!" sign. Pretty much AirSnitch is dead. Thank you!

 

[Viktor Jaep]

I know what you are thinking... PASSMON. Guest Network password randomizer with password rotation, QR code generator and push notification service. For Auto (Easy Mode) make it change the password at midnight and with no connected devices check. For Manual (Advanced Mode) add option for X hours extension, the party may be longer. Add vouchers option $5 per hour, it will discourage unwanted connections. Add automatic printing of "No Wi-Fi, talk to each other!" sign. Pretty much AirSnitch is dead. Thank you!

You truly are a mind reader!

 

[Clark Griswald]

Just checked, and PASSMON still unavailable in amtm.

 

[Tech9]

PASSMON still unavailable in amtm

AMTM is not required. ATM is required to pay for the voucher. Cash only. Quick actions needed.