Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Automatic wireless connections - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Automatic wireless connections

Normally, I'm annoyed when I can't get a wireless connection to the Internet. But recently, while riding the commuter train and working on my laptop, I was surprised by a "connected to..." pop up that was immediately followed by a disconnect. Huh? Time for some checking. Turns out the problem was relatively benign. First of all, I had not turned off wireless like I normally do when it is not in use (I really like the mechanical "radio off" switch at the front of my Thinkpad). Secondly, I had recently stayed at an unnamed motel chain whose WLAN access points were using "Super8" as SSID. Even though I'm usually paying attention to this sort of thing, the SSID ended up staying behind as a "preferred network" with automatic connection in my Windows wireless profiles. I doubt that there is a motel of this chain next to the MTA Harlem line, but at least a matching SSID was present, and my PC eagerly latched on to it.

I don't mind automatic connection to a wireless network that uses a WPA key, there I know at least with some certainty what I am connecting to. But automatic connection to an "open" wireless network only because it happens to be called "Super8" or "Linksys" or whatever .... I really think those days should be over, the sooner the better.  Goes without saying that the list of "preferred networks" on my laptop is now empty again, or at least devoid of any non-WPA networks.

 

Daniel

367 Posts
ISC Handler
Secondly, I had recently stayed at an unnamed motel chain whose WLAN access points were using "Super8" as SSID. <---LOL!

Thanks for the MS patch in the update, though!
Ron

29 Posts
I recently stayed at a small independent hotel that had wireless Internet. I suspect they installed it themselves, because the access points had the SSIDs "Linksys," "default," and "hacked_by_anonymous".
Anonymous

Sign Up for Free or Log In to start participating in the conversation!