WeWork isn’t a tech company; it’s a soap opera

Re:WeWork isn’t a tech company; it’s a soap opera by zaroth on Thursday August 15, 2019 @12:49PM (#20706971)

Having the same WPA2-PSK authentication secret does not allow spying over WiFi, unless you are willing to actively spoof the network.

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by ustolemyname on Thursday August 15, 2019 @01:11PM (#20707252)

Yes it does. If you capture the authentication handshake, it's as straightforward as putting the passphrase into Wireshark.

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by zaroth on Thursday August 15, 2019 @01:37PM (#20707545)

I could have sworn there was a DH key negotiation? And I worked in WiFi for a decade, a decade ago... Sorry, obviously I have not had enough coffee yet today.

Looks like this was only added in WPA3!

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by geofft on Thursday August 15, 2019 @04:10PM (#20709131)

I think you can also do it with WPA2-Enterprise, so a common trick is to set up enough infrastructure to let your users use EAP-TLS or something, and IIRC EAP sets up a per-client session key in the handshake. The public LinkNYC wifi network, for instance, has both an open network and an EAP-TTLS one that you can download a provisioning profile for.

[ Parent | on HN ]