Re:WiFi deauthentication attacks and home security
by FartyMcFarter on Friday December 27, 2019 @03:54AM
(#21890060)
Did I read the article correctly in that it is possible to disrupt WiFi networks to make devices disconnect from it, without breaking its encryption? Wow.
[ Parent
| on HN ]
Re:WiFi deauthentication attacks and home security
by Maxious on Friday December 27, 2019 @04:04AM
(#21890085)
So easily that a tamagotchi style game has been made of it and other wifi attacks https://pwnagotchi.ai/
Re:WiFi deauthentication attacks and home security
by dtornabene on Friday December 27, 2019 @09:56AM
(#21891637)
hadn't seen this one yet and just got a zero, thanks for posting this
Re:WiFi deauthentication attacks and home security
by hamhand on Friday December 27, 2019 @05:11AM
(#21890356)
Not only that,you don't have to be in close range when attacking, weak signal that won't get you connected or even shown up in the list is enough to make it work, you can stay even farther if you have high gain antennas, as this attack doesn't require your response packets to work, you just have to send the target AP one-way fake frames.
Re:WiFi deauthentication attacks and home security
by Nextgrid on Friday December 27, 2019 @04:32AM
(#21890207)
Regardless of any encryption, wireless can always be disrupted via jamming. Even if management frames were encrypted you can still disconnect devices by jamming the signal.
Re:WiFi deauthentication attacks and home security
by rocqua on Friday December 27, 2019 @05:34AM
(#21890466)
The power requirements for jamming are much higher. Making it much easier to detect a jammer, and harder to run one. Also quite a bit more illegal.
Besides, jamming has a much less targeted effect than a de-auth.
Re:WiFi deauthentication attacks and home security
by Nextgrid on Friday December 27, 2019 @05:38AM
(#21890479)
When talking about home security I doubt the attacker cares much about legality, and detection requires specialised equipment, by the time it is brought in the robbery has already been committed and the attacker is long gone.
Re:WiFi deauthentication attacks and home security
by FartyMcFarter on Friday December 27, 2019 @05:58AM
(#21890568)
Jamming is not as useful as a targeted attack, so this still seems like a defect in the WiFi spec.
For example, an attacker may wish to keep their network working while disrupting others (there is an example of Marriott hotels doing this linked elsewhere in the comments here).
Re:WiFi deauthentication attacks and home security
by walrus01 on Friday December 27, 2019 @04:27AM
(#21890182)
Enterprise wifi systems from Cisco, xirrus, ruckus and others implement this feature for rogue access point suppression.
Re:WiFi deauthentication attacks and home security
by Jon_Lowtek on Friday December 27, 2019 @05:16AM
(#21890385)
Wait what? Enterprise WiFi Systems are actively attacking each other if you put them close enough together and they overlap on some details like frequency band?
... skims search result for "rogue access point suppression"
wow this is just stupid
Re:WiFi deauthentication attacks and home security
by edwhitesell on Friday December 27, 2019 @08:08AM
(#21891111)
It's been a feature of enterprise WiFi for a long time. Airespace had the functionality before their acquisition by Cisco, that was March of 2005.
Edit: minor grammar clarification.
Re:WiFi deauthentication attacks and home security
by crmrc114 on Friday December 27, 2019 @11:18AM
(#21892137)
Though I don't see this feature in my environment anymore I am guessing it was pulled by Cisco after https://boingboing.net/2014/10/03/fcc-fines-marriott-for-jam...
Re:WiFi deauthentication attacks and home security
by tlrobinson on Friday December 27, 2019 @05:36AM
(#21890473)
Yup. You can buy a little open source ESP8266-based watch to do it too: https://dstike.com/
Re:WiFi deauthentication attacks and home security
by mjg59 on Friday December 27, 2019 @03:56AM
(#21890063)
Unless the devices and AP support 802.11w, yes.
Re:WiFi deauthentication attacks and home security
by Piskvorrr on Friday December 27, 2019 @04:08AM
(#21890096)
Temporarily. Most devices (rescan and) reassociate when this happens. Obviously this is enough to break devices that assume that the link is always up and never retry failed transmissions.
Re:WiFi deauthentication attacks and home security
by mjg59 on Friday December 27, 2019 @04:11AM
(#21890116)
If you keep sending disassociate frames, most devices will continue dropping off and spending time reassociating. If you don't have significant quantities of local storage then that's enough to break video streaming.
Re:WiFi deauthentication attacks and home security
by xvector on Friday December 27, 2019 @05:08AM
(#21890342)
When I was an edgy kid staying in hotels with shitty WiFi on vacation with my family, I would use a tool like this on Android to boot people off the WiFi and “clear up” some room.
Not proud of it today of course, but fun times ;)