wifi - Accept any Wi-Fi password on OpenWRT (hostap) -
after reading this article on ars technica started looking way enable encrypted, yet passwordless public network. not possible due specifications require number of characters , oss complying them, accepting password?
it require custom scripting or modifying sources, i've chosen openwrt try out. relevant sources can found here , here, used building wpad, hostpad , wpa-supplicant packages. default openwrt uses wpad-mini (suffix mini means absence of wpa enterprise support).
one of thoughts try wpa enterprise purpose. possible write simple script mimic radius server response, being positive, if credentials correct?
another aspect of question security. if accepting password possible, wouldn't mean trick device connect ap same name, say, use @ home, , have control on traffic? can serious issue , better talk publicly pretending if don't publish way this, no 1 else same on black markets or in governments.
upd: possible use simple captive portal 'negotiate' encryption, ideally, without user interaction apart of opening page? naturally, won't wpa. here list of captive portal solutions openwrt. precaution: current os-level implementations wouldn't prevent leaking unencrypted data before negotiation happens. since oss recognize captive portals , display notifications, should possible add security feature prevent data transfers before passing captive portal.
Comments
Post a Comment