Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:02:15 JST Ryan Castellucci :nonbinary_flag:

   Home WiFi is now fully set up. Wired APs, minimum transmit power, fast transition, band steering, etc.

   Neat seeing my phone seamlessly switch between access points as I walk around.

   Then I realized I was observing that by tailing a log, and have now talked with my partner about retention policies.

   • Embed this notice
     Aris Adamantiadis :verified:💲Paid (aris@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:04:49 JST Aris Adamantiadis :verified:💲Paid

     in reply to

     @ryanc what WiFi hardware did you choose? I have netgear crap that I have to reboot when it's too warm in the cellar

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:09:09 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     Not sure how many people are aware, but enterprise WiFi systems can track your location, often to within a few meter radius.

     Connected your phone to the WiFi at work? Theoretically they could just check the logs to see when you've gone to the toilet.

     There's big money in this for retail.

   • Embed this notice
     Aris Adamantiadis :verified:💲Paid (aris@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:11:31 JST Aris Adamantiadis :verified:💲Paid

     in reply to

     @ryanc That an bluetooth. A colleague at previous workplace made experiments tracking BLE devices around the building to evaluate how bad it is for privacy...
     They stopped and deleted everything because they captured a BT buttplug and they definitively didn't want to know anything about its owner.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:20:59 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Aris Adamantiadis :verified:💲Paid

     @aris Rooted EnGenius EAP1300s. They're only 2x2 802.11ac wave 2 (electric boogaloo), but they're ceiling mounted, have official OpenWRT support, and will move several hundred megabits per second under normal conditions.

   • Embed this notice
     Aris Adamantiadis :verified:💲Paid (aris@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:21:52 JST Aris Adamantiadis :verified:💲Paid

     in reply to

     @ryanc Thanks, I might consider this when I'm switching

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:23:27 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Aris Adamantiadis :verified:💲Paid

     @aris They're currently like $40 refurbished on eBay, but might not continue to be available much longer.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:35:36 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Aris Adamantiadis :verified:💲Paid

     @aris and my admin user -> ssh with root shell exploit for the vendor firmware is on github.

     It probably works on some of the other devices from EnGenius.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 21-Oct-2024 17:15:18 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Marc Haber

     @Zugschlus I'm using second hand EnGenius EAP1300/EAP1300EXT acces points.

     I guess I ought to do a blog post about my home network setup?

   • Embed this notice
     Marc Haber (zugschlus@zug.network)'s status on Monday, 21-Oct-2024 17:15:20 JST Marc Haber

     in reply to

     @ryanc What Vendor did you chose?

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 21-Oct-2024 17:17:17 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Marc Haber

     @Zugschlus These were just about the only option for smoke detector style ceiling mount that can run mainline OpenWRT.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 21-Oct-2024 17:18:50 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Marc Haber

     @Zugschlus Did you see the MDF photos I posted a few weeks ago?

   • Embed this notice
     Marc Haber (zugschlus@zug.network)'s status on Monday, 21-Oct-2024 17:18:52 JST Marc Haber

     in reply to

     @ryanc I would be the first reader.