{"id":2593,"date":"2013-06-15T12:30:44","date_gmt":"2013-06-15T16:30:44","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=2593"},"modified":"2013-06-15T12:30:44","modified_gmt":"2013-06-15T16:30:44","slug":"iphones-can-auto-connect-to-rogue-wi-fi-networks-researchers-warn","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2013\/06\/15\/iphones-can-auto-connect-to-rogue-wi-fi-networks-researchers-warn\/","title":{"rendered":"iPhones can auto-connect to rogue Wi-Fi networks, researchers warn"},"content":{"rendered":"<p style=\"text-align:center;\"><a href=\"http:\/\/arstechnica.com\/security\/2013\/06\/iphones-can-auto-connect-to-rogue-wi-fi-networks-researcher-warns\/\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" alt=\"iPhones can auto-connect to rogue Wi-Fi networks, researchers warn | Ars Technica\" src=\"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2013\/06\/carrier_settings_update.png?resize=333%2C497\" width=\"333\" height=\"497\" \/><\/a><\/p>\n<p>Security researchers say they&#8217;ve uncovered a weakness in some iPhones that makes it easier to force nearby users to connect to Wi-Fi networks that steal passwords or perform other nefarious deeds.<br \/>\nThe weakness is contained in configuration settings installed by AT&amp;T, Vodafone, and more than a dozen other carriers that give the phones voice and Internet services, according to a blog post published Wednesday. Settings for AT&amp;T iPhones, for instance, frequently instruct the devices to automatically connect to a Wi-Fi network called attwifi when the signal becomes available. Carriers make the Wi-Fi signals available in public places as a service to help subscribers get Internet connections that are fast and reliable. Attackers can take advantage of this behavior by setting up their own rogue Wi-Fi networks with the same names and then collecting sensitive data as it passes through their routers.<br \/>\n&#8220;The takeaway is clear,&#8221; the researchers from mobile phone security provider Skycure wrote. &#8220;Setting up such Wi-Fi networks would initiate an automatic attack on nearby customers of the carrier, even if they are using an out-of-the-box iOS device that never connected to any Wi-Fi network.&#8221;<br \/>\nThe researchers said they tested their hypothesis by setting up several Wi-Fi networks in public areas that used the same SSIDs as official carrier networks. During a test at a restaurant in Tel Aviv, Israel on Tuesday, 60 people connected to an imposter network in the first minute, Adi Sharabani, Skycure&#8217;s CEO and cofounder, told Ars in an e-mail. During a presentation on Wednesday at the International Cyber Security Conference, the Skycure researchers set up a network that 448 people connected to during a two-and-a-half-hour period. The researchers didn&#8217;t expose people to any attacks during the experiments; they just showed how easy it was for them to connect to networks without knowing they had no affiliation to the carrier.<br \/>\nSharabani said the settings that cause AT&amp;T iPhones to automatically connect to certain networks can be found in the device&#8217;s profile.mobileconfig file. It&#8217;s not clear if phones from other carriers also store their configurations in the same location or somewhere else.<br \/>\n&#8220;Moreover, even if you take another iOS device and put an AT&amp;T sim in it, the network will be automatically defined, and you&#8217;ll get the same behavior,&#8221; he said. He said smartphones running Google&#8217;s Android operating system don&#8217;t behave the same way.<br \/>\nOnce attackers have forced a device to connect to a rogue network, they can run exploit software that bypasses the secure sockets layer Web encryption. From there, attackers can perform man-in-the-middle (MitM) attacks that allow them to observe passwords in transit and even forge links and other content on the websites users are visiting.<br \/>\nThe most effective way to prevent iPhones from connecting to networks without the user&#8217;s knowledge is to turn off Wi-Fi whenever it&#8217;s not needed. Apps are also available that give users control over what SSIDs an iPhone will and won&#8217;t connect to. It&#8217;s unclear how iPhones running the upcoming iOS 7 will behave. As Ars reported Monday, Apple&#8217;s newest OS will support the Wi-Fi Alliance&#8217;s Hotspot 2.0 specification, which is designed to allow devices to hop from one Wi-Fi hotspot to another.<br \/>\nGiven how easy it for attackers to abuse Wi-Fi weaknesses, the Skycure research isn&#8217;t particularly shocking. Still, the ability of iPhones to connect to networks for the first time without requiring users to take explicit actions could be problematic, said Robert Graham, an independent security researcher who reviewed the Skycure blog post.<br \/>\n&#8220;A lot of apps still send stuff in the clear, and other apps don&#8217;t check the SSL certificate chain properly, meaning that Wi-Fi MitM is a huge problem,&#8221; said Graham, who is CEO of Errata Security. &#8220;That your phone comes pre-pwnable without your actions is a bad thing. Devices should come secure by default, not pwnable by default.&#8221;<br \/>\nvia <a href=\"http:\/\/arstechnica.com\/security\/2013\/06\/iphones-can-auto-connect-to-rogue-wi-fi-networks-researcher-warns\/\" target=\"_blank\">iPhones can auto-connect to rogue Wi-Fi networks, researchers warn | Ars Technica<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers say they&#8217;ve uncovered a weakness in some iPhones that makes it easier to force nearby users to connect [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[2,7],"tags":[108,341,1204],"class_list":["post-2593","post","type-post","status-publish","format-standard","hentry","category-apple","category-security","tag-attackers","tag-exploit","tag-wi-fi"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/papNkV-FP","jetpack-related-posts":[{"id":8789,"url":"https:\/\/nccomputertech.com\/techtalk\/2015\/12\/21\/critical-wps-vulnerability-discovered-in-bell-canada-home-hub-routers\/","url_meta":{"origin":2593,"position":0},"title":"Critical WPS vulnerability discovered in Bell Canada Home Hub routers","author":"NCCT","date":"December 21, 2015","format":false,"excerpt":"By Boyd Chan | Neowin In recent years, Wi-Fi has gained attention mainly due to the increased speeds afforded by the 802.11n and 802.11ac specifications. This has seen a flurry of new hardware hit the market enticing owners of older 802.11a\/b\/g hardware to upgrade to the latest and greatest kit.\u2026","rel":"","context":"In &quot;Security&quot;","block_context":{"text":"Security","link":"https:\/\/nccomputertech.com\/techtalk\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5871,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/07\/01\/free-wi-fi-networks-in-sf-san-jose-enable-seamless-switching-with-hotspot-2-0\/","url_meta":{"origin":2593,"position":1},"title":"Free Wi-Fi networks in SF, San Jose enable seamless switching with Hotspot 2.0","author":"NCCT","date":"July 1, 2014","format":false,"excerpt":"San Francisco and San Jose are now at the cutting edge of another tech trend, and one that has nothing to do with smartwatches or social-media startups\u2014not directly, at least. The two cities have geared up their free public Wi-Fi networks so users can automatically get on both after going\u2026","rel":"","context":"In &quot;Networking&quot;","block_context":{"text":"Networking","link":"https:\/\/nccomputertech.com\/techtalk\/category\/networking\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5681,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/06\/03\/meet-cupid-the-heartbleed-attack-that-spawns-evil-wi-fi-networks\/","url_meta":{"origin":2593,"position":2},"title":"Meet \u201cCupid,\u201d the Heartbleed attack that spawns \u201cevil\u201d Wi-Fi networks","author":"NCCT","date":"June 3, 2014","format":false,"excerpt":"Enlarge \/ A packet capture showing Cupid attacking a wireless network. SysValue \u00a0 \u00a0 It just got easier to exploit the catastrophic Heartbleed vulnerability against wireless networks and the devices that connect to them thanks to the release last week of open source code that streamlines the process of plucking\u2026","rel":"","context":"In &quot;Networking&quot;","block_context":{"text":"Networking","link":"https:\/\/nccomputertech.com\/techtalk\/category\/networking\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.arstechnica.net\/wp-content\/uploads\/2014\/06\/heartbleed_cupid_img1-640x356.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/cdn.arstechnica.net\/wp-content\/uploads\/2014\/06\/heartbleed_cupid_img1-640x356.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/cdn.arstechnica.net\/wp-content\/uploads\/2014\/06\/heartbleed_cupid_img1-640x356.png?resize=525%2C300 1.5x"},"classes":[]},{"id":5864,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/07\/01\/some-surface-pro-3-users-complain-of-wi-fi-woes-after-first-day-firmware-update\/","url_meta":{"origin":2593,"position":3},"title":"Some Surface Pro 3 users complain of Wi-Fi woes after first-day firmware update","author":"NCCT","date":"July 1, 2014","format":false,"excerpt":"\u00a0 Ten days after launch, Microsoft is still trying to squash the bugs in its Surface Pro 3 tablet. As Ed Bott at ZDNet reports, some users have been complaining of connectivity problems over 802.11ac Wi-Fi networks. Complaints have also popped up on Microsoft's support forums, with users noting slower\u2026","rel":"","context":"In &quot;Hardware&quot;","block_context":{"text":"Hardware","link":"https:\/\/nccomputertech.com\/techtalk\/category\/hardware\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7015,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/12\/03\/supercharged-wi-fi-sparks-ethernet-standard-showdown\/","url_meta":{"origin":2593,"position":4},"title":"Supercharged Wi-Fi sparks Ethernet standard showdown","author":"NCCT","date":"December 3, 2014","format":false,"excerpt":"There\u2019s a standard in the works for ethernet gear to feed faster Wi-Fi access points, but with rival industry groups pushing two different specifications, it might take a while to finish. Wi-Fi is getting fast enough that Gigabit ethernet can\u2019t keep up with the most advanced access points, which use\u2026","rel":"","context":"In &quot;Networking&quot;","block_context":{"text":"Networking","link":"https:\/\/nccomputertech.com\/techtalk\/category\/networking\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7070,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/12\/11\/comcast-slapped-with-class-action-lawsuit-for-turning-customers-routers-into-public-hotspots\/","url_meta":{"origin":2593,"position":5},"title":"Comcast slapped with class-action lawsuit for turning customers&#8217; routers into public hotspots","author":"NCCT","date":"December 11, 2014","format":false,"excerpt":"Comcast\u2019s controversial decision to transform its customers\u2019 wireless routers into public Wi-Fi hotspots has, predictably, landed the company in even more hot water. A pair of disgruntled customers recently filed a class-action lawsuit against the cable, television and Internet provider in San Francisco. Toyer Grear and Joycelyn Harris claim Comcast\u2026","rel":"","context":"In &quot;Networking&quot;","block_context":{"text":"Networking","link":"https:\/\/nccomputertech.com\/techtalk\/category\/networking\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2593","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/comments?post=2593"}],"version-history":[{"count":0,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2593\/revisions"}],"wp:attachment":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/media?parent=2593"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/categories?post=2593"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/tags?post=2593"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}