Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- Subject: Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- From: "Pike, Michael (IHS/HQ)" <email@hidden>
- Date: Wed, 15 Feb 2012 16:26:01 +0000
- Thread-topic: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
How many general public people are going to do this?
With data caps most people want to use wifi.
Apple needs to at least add a MAC address compare along with SSID.
Transcribed by Siri on my iPhone 4S
On Feb 15, 2012, at 2:21 AM, "Arendt, Christopher D Capt USAF AETC AFIT/ENS" <email@hidden> wrote:
> This DOES happen even if you have "Ask to Join Networks" turned on AND you have *ever* connected to "attwifi" before.
>
> It DOES NOT happen if you have NEVER connected to "attwifi" before AND you have "Ask to Join Networks" turned on.
>
> You can stop it from happening if you set up a dummy "attwifi" access point and view its entry on your iOS device's WiFi settings tab (tap the ">" to the right of "attwifi"), scroll to the top (where "Forget This Network" usually is) and switch "Auto-Join" to "OFF". (NOTE: this is DIFFERENT from "Ask to Join Networks", which is on the bottom of the main networks tab)
>
> I've attached some screen-captures of how to disable the attwifi "Auto-Join".
>
> -Christopher D. Arendt, Capt, USAF
>
>
> -----Original Message-----
> From: fed-talk-bounces+christopher.arendt=email@hidden on behalf of Todd Heberlein
> Sent: Tue 2/14/2012 3:16 PM
> To: Pike, Michael (IHS/HQ)
> Cc: Fed Talk
> Subject: Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
>
>
> On Feb 14, 2012, at 11:53 AM, Pike, Michael (IHS/HQ) wrote:
>
>> If you have ATT (havent tried with non ATT phones or iPads), and you have Wifi turned on, and there is an access point named "attwifi" - your phone will connect, automatically, unencrypted, without prompting...
>
> Does this happen even if your have "Ask to Join Networks" turned on?
>
> Do you have to join an ATT network at least once (to make it a "known network") for this to happen, or is ATT hard coded into the OS?
>
> If you have your phone join your home/work WiFi automatically, and someone somewhere else gives their WiFi the exact same name, will your device join it without prompting you?
>
> Todd
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
>
>
> <photo 1.PNG>
> <photo 2.PNG>
> <photo 3.PNG>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden