LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Reporting security issue with WIFI (https://www.linuxquestions.org/questions/linux-software-2/reporting-security-issue-with-wifi-4175733468/)

compis 02-02-2024 04:07 PM

Reporting security issue with WIFI
 
1 Attachment(s)
On Debian based linux there is a Network manager app version 1.20.0 that has an issue that allows any user on the computer to see the WIFI password without entering a admin password. I tried to place this issue on https://gitlab.gnome.org but it was removed a couple of times. Is there a forum for reporting gnome software issues ?

Attachment 42512

frankbell 02-02-2024 08:10 PM

Since it's a Network Manager issue, you might try here.

lvm_ 02-03-2024 02:30 AM

...but reaction will be the same - not an issue. Stored wifi passwords are meant to be visible to everyone who uses them, you cannot use them otherwise. When you create a new wi-fi connection there is a checkbox 'make available to all users' or something to this effect, you may uncheck it and then only you will see this password.

Turbocapitalist 02-03-2024 02:40 AM

Furthermore, WPA, WPA2, and WPA3 aren't really serious encryption so you can capture a few broadcasted packets and then extract the network password from them anyway using readily available computing power. Treat Wi-Fi as unencrypted.

yvesjv 02-06-2024 12:50 PM

Quote:

Originally Posted by Turbocapitalist (Post 6481031)
Furthermore, WPA, WPA2, and WPA3 aren't really serious encryption so you can capture a few broadcasted packets and then extract the network password from them anyway using readily available computing power. Treat Wi-Fi as unencrypted.

Agree but depends on scenario.
Don't think it is that easy to crack with wpa3 'enterprise'.
wpa1/2/3 'personal' otoh :rolleyes:

compis 02-26-2024 12:09 PM

incorect.
 
If you look at other apps like windows they require a administrator password before viewing WIFI security information.

sundialsvcs 02-27-2024 08:01 AM

"WiFi security" is only good enough to discourage your neighbor from using your WiFi network without paying for his own. It is, at best, "a nuisance blocker."

If you want meaningful security for your wireless transmissions or your network, you must (properly ...) use technologies such as "VPN." Or, in a pinch, "SSH." These implement the civilian-grade strong encryption that WiFi, very simply, was never designed to do.

(By "properly," I mean: "unique digital certificates.")


All times are GMT -5. The time now is 03:26 PM.