News for hackers. Stuff that matters.
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by pmontra on Wednesday January 27, 2021 @01:16PM (#25931689)
What if the owner of the WiFi network wants you to connect but not your friends?

Scenario: people come to my home, I give the password to a friend of mine that never visited me before or changed phone and asks me for the password. I don't know the other people and they don't ask for the password, but they get on the network anyway? Principle of most surprise and least security.

Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by xoa on Wednesday January 27, 2021 @03:02PM (#25933173)
>What if the owner of the WiFi network wants you to connect but not your friends?

Then they should switch their network to a more complex authentication scheme. Multiple SSIDs, run 802.1x authentication (maybe with certs), MAC filtering maybe (bypassable sure, but will foil most casual users), run their own simple portal and shunt different classes onto different VLANs with different levels of isolation and traffic shaping, etc.

Ultimately if there is one password which then gets any device on, well that's that. Sharing has always been pretty trivial. If the owner of a network wants more fine grained and powerful security, all the tools exist to do that already, but they'll have to use them.

Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by ballenf on Wednesday January 27, 2021 @01:34PM (#25931963)
Even my least tech savvy friends understand that their wifi password is like a traditional front door key: anyone with a copy can unlock the door. I'd call that very unsurprising to most people.

The idea that more sophisticated authentication is possible to prevent password sharing would be a surprise to most laypeople I know.

Also home internet is increasingly coming with smart routers that will alert you to new devices on the network. Tech savvy people are the only ones who BYOD.

Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by djrogers on Wednesday January 27, 2021 @05:38PM (#25935114)
How is this scenario any different when you tell your friend the password or show them a QR code? They can still get and share that password with anyone else...