News for hackers. Stuff that matters.
Re:Routers cyber security best practices by rnhmjoj on Saturday June 01, 2024 @09:11AM (#40545460)
I think "hiding" the SSID is a particularly stupid advise. The access point will still send the beacon frames, just with an empty SSID, so the network will show up as "hidden network", or similar, drawing more attention. In the end, it doesn't even matter because those that know how to crack a network with a weak password will also know how to recover the SSID from the clients, which is trivial.

Even worse, since the clients can't see the presence of the known network, the only way they have to connect is to continuously probe for the network (this is what reveals the SSID). Besides draining the battery faster, it's a massive privacy concern: imagine walking around with a megaphone announcing all the places you recently have been.

Re:Routers cyber security best practices by clwg on Sunday June 02, 2024 @09:25AM (#40553913)
For SSID's the one thing I would recommend is appending "_nomap" onto the name to opt-out of location service databases from Google, Microsoft and Apple.
Re:Routers cyber security best practices by josters on Sunday June 02, 2024 @10:06AM (#40554239)
„_nomap“ at the end of the SSID seems to only work for Apple and Google, Microsoft requires „optout“ to be present anywhere in the name [1].

So, the recommended opt-out change would be „SSID_optout_nomap“.

[1] https://superuser.com/a/1202168

Re:Routers cyber security best practices by gear54rus on Sunday June 02, 2024 @09:43AM (#40554052)
how do you know this will work at all?
Re:Routers cyber security best practices by josters on Sunday June 02, 2024 @10:01AM (#40554188)
No other way than taking their word for it [1]

> In late March 2024, Apple quietly updated its website to note that anyone can opt out of having the location of their wireless access points collected and shared by Apple — by appending “_nomap” to the end of the Wi-Fi access point’s name (SSID). Adding “_nomap” to your Wi-Fi network name also blocks Google from indexing its location.

> Asked about the changes, Apple said they have respected the “_nomap” flag on SSIDs for some time, but that this was only called out in a support article earlier this year.

[1] https://krebsonsecurity.com/2024/05/why-your-wi-fi-router-do...

Re:Routers cyber security best practices by rnhmjoj on Sunday June 02, 2024 @03:27PM (#40556626)
If you have OpenWrt, or other firmware that gives you root access, you can randomize the BSSID, which is actually what they collect.