Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- Subject: Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
- From: "Villano, Paul Mr CIV USA TRADOC" <email@hidden>
- Date: Wed, 15 Feb 2012 14:07:09 -0500
- Priority: normal
I didn't see an answer to the question of whether you'd hooked up to attwifi in the past. Apparently (based on the 2010 article) you must hook up to attwifi (ie, Starbucks hotspot) at least once for it to recognize it. It only hooks up if you have approved the hook up ONCE; thereafter it no longer prompts but automatically joins. That was my reading of it anyway.
On the original article, too, one of the comments said "common sense" says not to hook up where there would logically be no hotspot, but that misses the point that once you hook up ONCE common sense thereafter has nothing to do with it. The wifi is on autopilot.
----- Original Message -----
From: "Pike, Michael (IHS/HQ)" <email@hidden>
Date: Tuesday, February 14, 2012 17:02
Subject: Re: [Fed-Talk] A serious security issue with iOS (iPad and iPhone)
To: Todd Heberlein <email@hidden>
Cc: Fed Talk <email@hidden>
> Mine has "prompt to join networks" and in fact does... every time
> I launch my phone in our building it asks which one to join (and I
> never join any, i use 3g)...
>
> yesterday it didnt prompt, and I noticed it was on wifi WITHOUT
> asking me.. had I not looked, I would have been none the wiser
> (plus I am used to my phone asking me)...
>
> Someone set up an android hotspot - named it attwifi - and my iPad
> 2 and iPhone 4S gladly connected.. no prompts, no warning.. just
> free magical internet.
>
> We then took the phone to another floor.. every fed phone in the
> building connected to us automatically...
>
> Then I wanted to have a lot of fun and went to the mall...
>
> It doesn't warn you.. it just trusts it ATT... pretty scary.
>
> I knew this because I go to Sams club which as attwifi... I
> FIGURED (the one time my paranoia didnt kick in) that "wow, ATT
> must automatically know which iPhones are on their network based
> on MAC address.. cool!"
>
> Not the case... if its called attwifi - your phone just believes it.
>
> Hardware used:
>
> Samsung Nexus S - hotspot enabled, hotspot name attiwifi - no
> ecryption
> iPhone and iPad sucked it up like nothing.
>
> So did 50 others in the mall.
>
> Mike
>
> On Feb 14, 2012, at 1:16 PM, Todd Heberlein wrote:
>
> >
> > On Feb 14, 2012, at 11:53 AM, Pike, Michael (IHS/HQ) wrote:
> >
> >> If you have ATT (havent tried with non ATT phones or iPads),
> and you have Wifi turned on, and there is an access point named
> "attwifi" - your phone will connect, automatically, unencrypted,
> without prompting...
> >
> > Does this happen even if your have "Ask to Join Networks" turned on?
> >
> > Do you have to join an ATT network at least once (to make it a
> "known network") for this to happen, or is ATT hard coded into the OS?
> >
> > If you have your phone join your home/work WiFi automatically,
> and someone somewhere else gives their WiFi the exact same name,
> will your device join it without prompting you?
> >
> > Todd
> >
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
> talk/email@hidden
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden