Re: autoconnect was:networkmanager

["Patryk Zawadzki" <patrys pld-linux org>]

On Tue, Sep 30, 2008 at 8:57 AM, Bjorge Solli <bjorge solli it uib no> wrote:
> Dan Williams wrote:
>> NM will (by default) remember wifi access points you've connected to
>> before, and if you come in range of one it'll try to automatically
>> connect to that AP (unless you've told it not to).
> If the cracker put up an encrypted (or unencrypted) network with ssid
> Eduroam that accept all passwords, will NM connect to it?

If your networks use WPA (or WPA2, both Personal and Enterprise) then
a successful auth does not send your password over, instead it
exchanges a number of secrets encrypted using the key generated basing
on the password (and SSID) so in order to provide a fake (spoofed)
access point you already need to know the password.

If your networks use WEP or no security at all then, well, you are on
your own :)

-- 
Patryk Zawadzki