LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-02-2024, 04:07 PM   #1
compis
Member
 
Registered: Sep 2023
Posts: 34

Rep: Reputation: 0
Reporting security issue with WIFI


On Debian based linux there is a Network manager app version 1.20.0 that has an issue that allows any user on the computer to see the WIFI password without entering a admin password. I tried to place this issue on https://gitlab.gnome.org but it was removed a couple of times. Is there a forum for reporting gnome software issues ?

Click image for larger version

Name:	debian wifi displayed.png
Views:	21
Size:	28.1 KB
ID:	42512
 
Old 02-02-2024, 08:10 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,326
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
Since it's a Network Manager issue, you might try here.
 
1 members found this post helpful.
Old 02-03-2024, 02:30 AM   #3
lvm_
Member
 
Registered: Jul 2020
Posts: 926

Rep: Reputation: 337Reputation: 337Reputation: 337Reputation: 337
...but reaction will be the same - not an issue. Stored wifi passwords are meant to be visible to everyone who uses them, you cannot use them otherwise. When you create a new wi-fi connection there is a checkbox 'make available to all users' or something to this effect, you may uncheck it and then only you will see this password.

Last edited by lvm_; 02-03-2024 at 02:33 AM.
 
Old 02-03-2024, 02:40 AM   #4
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,310
Blog Entries: 3

Rep: Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722
Furthermore, WPA, WPA2, and WPA3 aren't really serious encryption so you can capture a few broadcasted packets and then extract the network password from them anyway using readily available computing power. Treat Wi-Fi as unencrypted.
 
Old 02-06-2024, 12:50 PM   #5
yvesjv
Member
 
Registered: Sep 2015
Location: Australia
Distribution: Slackware, Devuan, Freebsd
Posts: 564

Rep: Reputation: Disabled
Quote:
Originally Posted by Turbocapitalist View Post
Furthermore, WPA, WPA2, and WPA3 aren't really serious encryption so you can capture a few broadcasted packets and then extract the network password from them anyway using readily available computing power. Treat Wi-Fi as unencrypted.
Agree but depends on scenario.
Don't think it is that easy to crack with wpa3 'enterprise'.
wpa1/2/3 'personal' otoh
 
Old 02-26-2024, 12:09 PM   #6
compis
Member
 
Registered: Sep 2023
Posts: 34

Original Poster
Rep: Reputation: 0
incorect.

If you look at other apps like windows they require a administrator password before viewing WIFI security information.
 
Old 02-27-2024, 08:01 AM   #7
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
"WiFi security" is only good enough to discourage your neighbor from using your WiFi network without paying for his own. It is, at best, "a nuisance blocker."

If you want meaningful security for your wireless transmissions or your network, you must (properly ...) use technologies such as "VPN." Or, in a pinch, "SSH." These implement the civilian-grade strong encryption that WiFi, very simply, was never designed to do.

(By "properly," I mean: "unique digital certificates.")
 
  


Reply

Tags
network



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Ubuntu 20LTS dual boot Laptop Dell Inspiron 5548 I can not turn on wifi and in wifi settings indicates no wifi device was found Shra94 Linux - Hardware 1 05-19-2020 04:22 PM
Wifi option is there but no wifi scanning or wifi not working Aakash447 Linux - Newbie 3 06-28-2018 11:48 PM
Want to share my wifi by creating a wifi hotspot ( While staying connected to wifi)? shadyXV Linux - Desktop 4 07-20-2015 05:37 PM
[SOLVED] df reporting 100% but du reporting 20% guna_pmk Linux - Server 1 04-15-2011 11:34 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 11:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration