Go to bottom

Wifi Pass & Party LAN address on votekey

category: general [glöplog]
Open wifi, no. Youre traffic should be safer and encrypted.

For home and office use, sure. But for events like demoparties? The attendees have the key anyway, and the keys tend to be simple enough that an outside attacker can mostly guess them (the network is called "evoke" ... well, let's try "evoke2018" for the key then ... bingo!) or use KRACK etc. to break into it.

tl;dr: WPA2 PSK transport encryption is never an adequate replacement for TLS-encrypted connections.
added on the 2018-09-12 15:15:09 by KeyJ KeyJ
Addendum: I'm not suggesting that we should have open WiFi networks. WPA2 PSK with an easy-to-guess key may be useless against a dedicated attacker, but at least it keeps the kids from the neighborhood from torrenting stuff :)
added on the 2018-09-12 15:21:58 by KeyJ KeyJ
Solution: no wifi, just cables! I always find it a bit saddening that we put up 48 Ports switches in every visitor row and only a handful of ports are actually used :(
added on the 2018-09-12 15:23:11 by wysiwtf wysiwtf
Popular party systems don't give this option so it would be a lot of hassle to put custom text and the votekey together.

The lack of option I'll concede, but it's not a LOT of hassle - with Wuhu we used to print some legal information we needed to provide on the votekey and stuck it on the back of the badge; all it needed is to change the template around the votekey printouts. Again, this may count as a "hassle" since there's no UI option around it, but that can be solved too.
added on the 2018-09-12 16:27:42 by Gargaj Gargaj
WPA2 PSK will require a MITM attack to listen in, so it's marginally more secure in practice than a full-open net. It doesn't matter at all against a dedicated attacker on your party. Whether the extra hassle for the participants is worth the increased speed bump to an attack… it's a decision for the local organizers.
added on the 2018-09-12 20:16:48 by Sesse Sesse
My strategy here is to ask other people at the party, for example the person sitting next to me.
How do you get on IRC to do that in the first place?! ;P

But yeah, I would be all for more info on the votekey. Can't hurt.
added on the 2018-09-17 23:03:36 by raer raer


Go to top