Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- Subject: Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- From: "Pike, Michael (IHS/HQ)" <email@hidden>
- Date: Tue, 14 Feb 2012 20:39:42 +0000
- Thread-topic: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
Mine has "prompt to join networks" and in fact does... every time I launch my phone in our building it asks which one to join (and I never join any, i use 3g)...
yesterday it didnt prompt, and I noticed it was on wifi WITHOUT asking me.. had I not looked, I would have been none the wiser (plus I am used to my phone asking me)...
Someone set up an android hotspot - named it attwifi - and my iPad 2 and iPhone 4S gladly connected.. no prompts, no warning.. just free magical internet.
We then took the phone to another floor.. every fed phone in the building connected to us automatically...
Then I wanted to have a lot of fun and went to the mall...
It doesn't warn you.. it just trusts it ATT... pretty scary.
I knew this because I go to Sams club which as attwifi... I FIGURED (the one time my paranoia didnt kick in) that "wow, ATT must automatically know which iPhones are on their network based on MAC address.. cool!"
Not the case... if its called attwifi - your phone just believes it.
Hardware used:
Samsung Nexus S - hotspot enabled, hotspot name attiwifi - no ecryption
iPhone and iPad sucked it up like nothing.
So did 50 others in the mall.
Mike
On Feb 14, 2012, at 1:16 PM, Todd Heberlein wrote:
>
> On Feb 14, 2012, at 11:53 AM, Pike, Michael (IHS/HQ) wrote:
>
>> If you have ATT (havent tried with non ATT phones or iPads), and you have Wifi turned on, and there is an access point named "attwifi" - your phone will connect, automatically, unencrypted, without prompting...
>
> Does this happen even if your have "Ask to Join Networks" turned on?
>
> Do you have to join an ATT network at least once (to make it a "known network") for this to happen, or is ATT hard coded into the OS?
>
> If you have your phone join your home/work WiFi automatically, and someone somewhere else gives their WiFi the exact same name, will your device join it without prompting you?
>
> Todd
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden