Wifi Pass & Party LAN address on votekey
category: general [glöplog]
Quote:
Open wifi, no. Youre traffic should be safer and encrypted.
For home and office use, sure. But for events like demoparties? The attendees have the key anyway, and the keys tend to be simple enough that an outside attacker can mostly guess them (the network is called "evoke" ... well, let's try "evoke2018" for the key then ... bingo!) or use KRACK etc. to break into it.
tl;dr: WPA2 PSK transport encryption is never an adequate replacement for TLS-encrypted connections.
Addendum: I'm not suggesting that we should have open WiFi networks. WPA2 PSK with an easy-to-guess key may be useless against a dedicated attacker, but at least it keeps the kids from the neighborhood from torrenting stuff :)
Solution: no wifi, just cables! I always find it a bit saddening that we put up 48 Ports switches in every visitor row and only a handful of ports are actually used :(
Quote:
Popular party systems don't give this option so it would be a lot of hassle to put custom text and the votekey together.
The lack of option I'll concede, but it's not a LOT of hassle - with Wuhu we used to print some legal information we needed to provide on the votekey and stuck it on the back of the badge; all it needed is to change the template around the votekey printouts. Again, this may count as a "hassle" since there's no UI option around it, but that can be solved too.
WPA2 PSK will require a MITM attack to listen in, so it's marginally more secure in practice than a full-open net. It doesn't matter at all against a dedicated attacker on your party. Whether the extra hassle for the participants is worth the increased speed bump to an attack… it's a decision for the local organizers.
Quote:
How do you get on IRC to do that in the first place?! ;PMy strategy here is to ask other people at the party, for example the person sitting next to me.
But yeah, I would be all for more info on the votekey. Can't hurt.
