Re:WeWork isn’t a tech company; it’s a soap opera
by tedivm on Thursday August 15, 2019 @01:02PM
(#20707138)
Your first point is actually part of my point- the fact that they have a single password means excluding people on the outside is basically impossible. If someone has a lease at WeWork but then leaves there's no way to keep them off the network without changing the password for everyone. Since the password is really simple (like, "easy to guess" simple), and since it's possible that people have shared it publicly, their network is not that far away from just being an open wifi network.
And yes, we did setup a VPN for all of our employees to use while we were in the WeWork office. I don't think that changes my point that the WeWork network is not setup well at all.
Re:WeWork isn’t a tech company; it’s a soap opera
by basch on Thursday August 15, 2019 @04:16PM
(#20709189)
>their network is not that far away from just being an open wifi network.
It is an open network, they just are limiting bandwidth use of passer byers.
Re:WeWork isn’t a tech company; it’s a soap opera
by parliament32 on Thursday August 15, 2019 @03:10PM
(#20708597)
In addition, enterprise WPA (802.1x) doesn't work like that. In WPA-Personal, if you have the password (PSK) and capture the handshake (easy), you have easy decryption of any other clients' traffic. In WPA-Enterprise, all the connections are segregated (because the handshake uses your certs and mutual auth).
Personally, I think any attempt at them to provide serious security on the shared network would be a really bad idea. It'd make people feel comfortable but somebody would find a hole and suddenly have access to a ton of devices.
If security is an issue, just use a VPN/Wireguard.