Misplaced Pages

#326673

63-743: EE WiFi is a wi-fi hotspot service provided by BT Group for the UK . Its predecessor, BT Wi-fi was established following a rebranding of the former BT Openzone and BT Fon, bringing both of the services under one name until the Fon partnership ended. It supports the BT Consumer division. It is the UK's largest wi-fi network with more than 5 million hotspots in the UK. In 2023 BT Wi-fi rebranded to EE WiFi in preparation to rebrand all BT consumer services to EE. Hotspot (Wi-Fi) Public hotspots may be created by

126-648: A passphrase of 8 to 63 printable ASCII characters . This pass-phrase-to-PSK mapping is nevertheless not binding, as Annex J is informative in the latest 802.11 standard. If ASCII characters are used, the 256-bit key is calculated by applying the PBKDF2 key derivation function to the passphrase, using the SSID as the salt and 4096 iterations of HMAC - SHA1 . WPA-Personal mode is available on all three WPA versions. This enterprise mode uses an 802.1X server for authentication, offering higher security control by replacing

189-525: A Wi-Fi subscriber service whenever the user enters a Hotspot 2.0 area, in order to provide better bandwidth and services-on-demand to end-users and relieve carrier infrastructure of some traffic. Hotspot 2.0 is based on the IEEE 802.11u standard, which is a set of protocols published in 2011 to enable cellular-like roaming. If the device supports 802.11u and is subscribed to a Hotspot 2.0 service it will automatically connect and roam. The "user-fairness model"

252-451: A business for use by customers, such as coffee shops or hotels. Public hotspots are typically created from wireless access points configured to provide Internet access, controlled to some degree by the venue. In its simplest form, venues that have broadband Internet access can create public wireless access by configuring an access point (AP), in conjunction with a router to connect the AP to

315-548: A new wireless adapter or appliance to a network. These methods include pushing buttons on the devices or entering an 8-digit PIN . The Wi-Fi Alliance standardized these methods as Wi-Fi Protected Setup; however, the PIN feature as widely implemented introduced a major new security flaw. The flaw allows a remote attacker to recover the WPS PIN and, with it, the router's WPA/WPA2 password in a few hours. Users have been urged to turn off

378-465: A poorly specified part of the standard. Software patches can resolve the vulnerability but are not available for all devices. KRACK exploits a weakness in the WPA2 4-Way Handshake, a critical process for generating encryption keys. Attackers can force multiple handshakes, manipulating key resets. By intercepting the handshake, they could decrypt network traffic without cracking encryption directly. This poses

441-577: A protected environment for authentication without requiring client certificates. Originally, only EAP-TLS ( Extensible Authentication Protocol - Transport Layer Security ) was certified by the Wi-Fi alliance. In April 2010, the Wi-Fi Alliance announced the inclusion of additional EAP types to its WPA- and WPA2-Enterprise certification programs. This was to ensure that WPA-Enterprise certified products can interoperate with one another. As of 2010

504-770: A risk, especially with sensitive data transmission. Manufacturers have released patches in response, but not all devices have received updates. Users are advised to keep their devices updated to mitigate such security risks. Regular updates are crucial for maintaining network security against evolving threats. The Dragonblood attacks exposed significant vulnerabilities in the Dragonfly handshake protocol used in WPA3 and EAP-pwd. These included side-channel attacks potentially revealing sensitive user information and implementation weaknesses in EAP-pwd and SAE. Concerns were also raised about

567-535: A secure RNG. By doing so, Hostapd running on Linux kernels is not vulnerable against this attack and thus routers running typical OpenWrt or LEDE installations do not exhibit this issue. In October 2017, details of the KRACK (Key Reinstallation Attack) attack on WPA2 were published. The KRACK attack is believed to affect all variants of WPA and WPA2; however, the security implications vary between implementations, depending upon how individual developers interpreted

630-517: Is end-to-end encryption . Examples of strong end-to-end encryption are HTTPS and SSH . Some hotspots authenticate users; however, this does not prevent users from viewing network traffic using packet sniffers . Some vendors provide a download option that deploys WPA support. This conflicts with enterprise configurations that have solutions specific to their internal WLAN . The Opportunistic Wireless Encryption (OWE) standard provides encrypted communication in open Wi-Fi networks, alongside

693-652: Is Europe, followed by North America and Asia. Libraries throughout the United States are implementing hotspot lending programs to extend access to online library services to users at home who cannot afford in-home Internet access or do not have access to Internet infrastructure. The New York Public Library was the largest program, lending out 10,000 devices to library patrons. Similar programs have existed in Kansas, Maine, and Oklahoma; and many individual libraries are implementing these programs. Wi-Fi positioning

SECTION 10

#1732798140327

756-500: Is a Linux distribution that provides payment services for hotspot providers who wish to deploy their own service. Roaming services are expanding among major hotspot service providers. With roaming service the users of a commercial provider can have access to other providers' hotspots, either free of charge or for extra fees, which users will usually be charged on an access-per-minute basis. Many Wi-Fi adapters built into or easily added to consumer computers and mobile devices include

819-616: Is a dynamic billing model, which allows volume-based billing, charged only by the amount of payload (data, video, audio). Moreover, the tariff is classified by net traffic and user needs. If the net traffic increases, then the user has to pay the next higher tariff class. The user can be prompted to confirm that they want to continue the session in the higher traffic class. A higher class fare can also be charged for delay sensitive applications such as video and audio, versus non time-critical applications such as reading Web pages and sending e-mail. The "User-fairness model" can be implemented with

882-413: Is a method for geolocation based on the positions of nearby hotspots. Security is a serious concern in connection with public and private hotspots. There are three possible attack scenarios. First, there is the wireless connection between the client and the access point, which needs to be encrypted , so that the connection cannot be eavesdropped or attacked by a man-in-the-middle attack . Second, there

945-549: Is a vulnerability in the WPA2 protocol that abuses the shared Group Temporal Key (GTK). It can be used to conduct man-in-the-middle and denial-of-service attacks. However, it assumes that the attacker is already authenticated against Access Point and thus in possession of the GTK. In 2016 it was shown that the WPA and WPA2 standards contain an insecure expository random number generator (RNG). Researchers showed that, if vendors implement

1008-495: Is an open source 802.1X server. WPA-Personal and WPA2-Personal remain vulnerable to password cracking attacks if users rely on a weak password or passphrase . WPA passphrase hashes are seeded from the SSID name and its length; rainbow tables exist for the top 1,000 network SSIDs and a multitude of common passwords, requiring only a quick lookup to speed up cracking WPA-PSK. Brute forcing of simple passwords can be attempted using

1071-462: Is detected. Third-party software vendors offer applications to allow users to operate their own hotspot, whether to access the Internet when on the go, share an existing connection, or extend the range of another hotspot. Hotspot 2.0, also known as HS2 and Wi-Fi Certified Passpoint, is an approach to public access Wi-Fi by the Wi-Fi Alliance . The idea is for mobile devices to automatically join

1134-492: Is on average around 7 minutes, compared to the 14 minutes of the original Vanhoef-Piessens and Beck-Tews attack. The vulnerabilities of TKIP are significant because WPA-TKIP had been held before to be an extremely safe combination; indeed, WPA-TKIP is still a configuration option upon a wide variety of wireless routing devices provided by many hardware vendors. A survey in 2013 showed that 71% still allow usage of TKIP, and 19% exclusively support TKIP. A more serious security flaw

1197-418: Is that their attack requires substantially more time to execute: approximately 18 minutes and 25 seconds. In other work Vanhoef and Piessens showed that, when WPA is used to encrypt broadcast packets, their original attack can also be executed. This is an important extension, as substantially more networks use WPA to protect broadcast packets , than to protect unicast packets . The execution time of this attack

1260-530: Is the hotspot itself. The WLAN encryption ends at the interface, then travels its network stack unencrypted and then, third, travels over the wired connection up to the BRAS of the ISP. Depending upon the setup of a public hotspot, the provider of the hotspot has access to the metadata and content accessed by users of the hotspot. The safest method when accessing the Internet over a hotspot, with unknown security measures,

1323-683: Is what makes WPA2 a robust security standard for wireless networks. In January 2018, the Wi-Fi Alliance announced WPA3 as a replacement to WPA2. Certification began in June 2018, and WPA3 support has been mandatory for devices which bear the "Wi-Fi CERTIFIED™" logo since July 2020. The new standard uses an equivalent 192-bit cryptographic strength in WPA3-Enterprise mode ( AES-256 in GCM mode with SHA-384 as HMAC ), and still mandates

SECTION 20

#1732798140327

1386-641: The Aircrack Suite starting from the four-way authentication handshake exchanged during association or periodic re-authentication. WPA3 replaces cryptographic protocols susceptible to off-line analysis with protocols that require interaction with the infrastructure for each guessed password, supposedly placing temporal limits on the number of guesses. However, design flaws in WPA3 enable attackers to plausibly launch brute-force attacks ( see § Dragonblood ). WPA and WPA2 do not provide forward secrecy , meaning that once an adverse person discovers

1449-563: The MediaTek out-of-tree drivers, which generate the GTK themselves, and showed the GTK can be recovered within two minutes or less. Similarly, they demonstrated the keys generated by Broadcom access daemons running on VxWorks 5 and later can be recovered in four minutes or less, which affects, for example, certain versions of Linksys WRT54G and certain Apple AirPort Extreme models. Vendors can defend against this attack by using

1512-575: The Temporal Key Integrity Protocol (TKIP). WEP used a 64-bit or 128-bit encryption key that must be manually entered on wireless access points and devices and does not change. TKIP employs a per-packet key, meaning that it dynamically generates a new 128-bit key for each packet and thus prevents the types of attacks that compromised WEP. WPA also includes a Message Integrity Check , which is designed to prevent an attacker from altering and resending data packets. This replaces

1575-494: The WPA3 standard, but is not yet widely implemented. New York City introduced a Wi-Fi hotspot kiosk called LinkNYC with the intentions of providing modern technology for the masses as a replacement to a payphone. Businesses complained they were a homeless magnet and CBS news observed transients with wires connected to the kiosk lingering for an extended period. It was shut down following complaints about transient activity around

1638-460: The cyclic redundancy check (CRC) that was used by the WEP standard. CRC's main flaw was that it did not provide a sufficiently strong data integrity guarantee for the packets it handled. Well-tested message authentication codes existed to solve these problems, but they required too much computation to be used on old network cards. WPA uses a message integrity check algorithm called TKIP to verify

1701-551: The Access Point (AP) via an association request. This is followed by a 4-way handshake, a crucial step ensuring both the client and AP have the correct Pre-Shared Key (PSK) without actually transmitting it. During this handshake, a Pairwise Transient Key (PTK) is generated for secure data exchange. WPA2 employs the Advanced Encryption Standard AES with a 128-bit key, enhancing security through

1764-584: The Counter-Mode/CBC-Mac Protocol CCMP . This protocol ensures robust encryption and data integrity, using different Initialization Vectors (IVs) for encryption and authentication purposes. The 4-way handshake involves: Post-handshake, the established PTK is used for encrypting unicast traffic, and the Group Temporal Key (GTK) is used for broadcast traffic. This comprehensive authentication and encryption mechanism

1827-409: The Internet. A single wireless router combining these functions may suffice. A private hotspot, often called tethering , may be configured on a smartphone or tablet that has a network data plan, to allow Internet access to other devices via password , Bluetooth pairing , or through the moeex protocol over USB , or even when both the hotspot device and the device[s] accessing it are connected to

1890-738: The MSCHAPv2 exchange are widely deployed to protect against exploitation of this vulnerability. However, prevalent WPA2 client implementations during the early 2000s were prone to misconfiguration by end users, or in some cases (e.g. Android ), lacked any user-accessible way to properly configure validation of AAA server certificate CNs. This extended the relevance of the original weakness in MSCHAPv2 within MiTM attack scenarios. Under stricter compliance tests for WPA2 announced alongside WPA3, certified client software will be required to conform to certain behaviors surrounding AAA certificate validation. Hole196

1953-602: The RC4 algorithm for encrypting data, creating a unique key for each packet by combining a new Initialization Vector (IV) with a shared key (it has 40 bits of vectored key and 24 bits of random numbers). Decryption involved reversing this process, using the IV and the shared key to generate a key stream and decrypt the payload. Despite its initial use, WEP's significant vulnerabilities led to the adoption of more secure protocols. The Wi-Fi Alliance intended WPA as an intermediate measure to take

EE WiFi - Misplaced Pages Continue

2016-561: The Vanhoef-Piessens attack does not. Neither attack leads to recovery of the shared session key between the client and Access Point . The authors say using a short rekeying interval can prevent some attacks but not all, and strongly recommend switching from TKIP to AES-based CCMP . Halvorsen and others show how to modify the Beck-Tews attack to allow injection of 3 to 7 packets having a size of at most 596 bytes. The downside

2079-537: The WPA and WPA2 security protocols. WPA3 is required since July 1, 2020. Different WPA versions and protection mechanisms can be distinguished based on the target end-user (such as WEP, WPA, WPA2, WPA3) and the method of authentication key distribution, as well as the encryption protocol used. As of July 2020, WPA3 is the latest iteration of the WPA standard, bringing enhanced security features and addressing vulnerabilities found in WPA2. WPA3 improves authentication methods and employs stronger encryption protocols, making it

2142-500: The WPS feature, although this may not be possible on some router models. Also, the PIN is written on a label on most Wi-Fi routers with WPS, which cannot be changed if compromised. In 2018, the Wi-Fi Alliance introduced Wi-Fi Easy Connect as a new alternative for the configuration of devices that lack sufficient user interface capabilities by allowing nearby devices to serve as an adequate UI for network provisioning purposes, thus mitigating

2205-431: The Wi-Fi Alliance announced the release of WPA3, which has several security improvements over WPA2. As of 2023, most computers that connect to a wireless network have support for using WPA, WPA2, or WPA3. WEP (Wired Equivalent Privacy) was an early encryption protocol for wireless networks, designed to secure WLAN connections. It supported 64-bit and 128-bit keys, combining user-configurable and factory-set bits. WEP used

2268-496: The Wi-Fi Alliance, implements the mandatory elements of IEEE 802.11i. In particular, it includes support for CCMP , an AES -based encryption mode. Certification began in September, 2004. From March 13, 2006, to June 30, 2020, WPA2 certification was mandatory for all new devices to bear the Wi-Fi trademark. In WPA2-protected WLANs, secure communication is established through a multi-step process. Initially, devices associate with

2331-494: The certification program includes the following EAP types: 802.1X clients and servers developed by specific firms may support other EAP types. This certification is an attempt for popular EAP types to interoperate; their failure to do so as of 2013 is one of the major issues preventing rollout of 802.1X on heterogeneous networks. Commercial 802.1X servers include Microsoft Network Policy Server and Juniper Networks Steelbelted RADIUS as well as Aradial Radius server. FreeRADIUS

2394-470: The e The iPass 2014 interactive map, that shows data provided by the analysts Maravedis Rethink, shows that in December 2014 there are 46,000,000 hotspots worldwide and more than 22,000,000 roamable hotspots. More than 10,900 hotspots are on trains, planes and airports (Wi-Fi in motion) and more than 8,500,000 are "branded" hotspots (retail, cafés, hotels). The region with the largest number of public hotspots

2457-511: The functionality to operate as private or mobile hotspots, sometimes referred to as "mi-fi". The use of a private hotspot to enable other personal devices to access the WAN (usually but not always the Internet ) is a form of bridging , and known as tethering. Manufacturers and firmware creators can enable this functionality in Wi-Fi devices on many Wi-Fi devices, depending upon the capabilities of

2520-601: The hardware, and most modern consumer operating systems, including Android , Apple OS X 10.6 and later, Windows , and Linux include features to support this. Additionally wireless chipset manufacturers such as Atheros , Broadcom , Intel and others, may add the capability for certain Wi-Fi NICs , usually used in a client role, to also be used for hotspot purposes. However, some service providers, such as AT&T, Sprint, and T-Mobile charge users for this service or prohibit and disconnect user connections if tethering

2583-453: The help of EDCF (IEEE 802.11e). An EDCF user priority list shares the traffic in 3 access categories (data, video, audio) and user priorities (UP). See Service-oriented provisioning for viable implementations. Depending upon the set up of a public hotspot, the provider of the hotspot has access to the metadata and content accessed by users of the hotspot, and may have legal obligations related to privacy requirements and liability for use of

EE WiFi - Misplaced Pages Continue

2646-560: The hotspot for unlawful purposes. In countries where the internet is regulated or freedom of speech more restricted, there may be requirements such as licensing, logging, or recording of user information. Concerns may also relate to child safety , and social issues such as exposure to objectionable content, protection against cyberbullying and illegal behaviours, and prevention of perpetration of such behaviors by hotspot users themselves. The Data Retention Directive which required hotspot owners to retain key user statistics for 12 months

2709-456: The inadequate security in transitional modes supporting both WPA2 and WPA3. In response, security updates and protocol changes are being integrated into WPA3 and EAP-pwd to address these vulnerabilities and enhance overall Wi-Fi security. On May 11, 2021, FragAttacks, a set of new security vulnerabilities, were revealed, affecting Wi-Fi devices and enabling attackers within range to steal information or target devices. These include design flaws in

2772-457: The integrity of the packets. TKIP is much stronger than a CRC, but not as strong as the algorithm used in WPA2. Researchers have since discovered a flaw in WPA that relied on older weaknesses in WEP and the limitations of the message integrity code hash function, named Michael , to retrieve the keystream from short packets to use for re-injection and spoofing . Ratified in 2004, WPA2 replaced WPA. WPA2, which requires testing and certification by

2835-634: The need for WPS. Several weaknesses have been found in MS-CHAPv 2, some of which severely reduce the complexity of brute-force attacks, making them feasible with modern hardware. In 2012 the complexity of breaking MS-CHAPv2 was reduced to that of breaking a single DES key (work by Moxie Marlinspike and Marsh Ray). Moxie advised: "Enterprises who are depending on the mutual authentication properties of MS-CHAPv2 for connection to their WPA2 Radius servers should immediately start migrating to something else." Tunneled EAP methods using TTLS or PEAP which encrypt

2898-568: The password. Because of that, it's safer to use Transport Layer Security (TLS) or similar on top of that for the transfer of any sensitive data. However starting from WPA3, this issue has been addressed. In 2013, Mathy Vanhoef and Frank Piessens significantly improved upon the WPA-TKIP attacks of Erik Tews and Martin Beck. They demonstrated how to inject an arbitrary number of packets, with each packet containing at most 112 bytes of payload. This

2961-449: The place of WEP pending the availability of the full IEEE 802.11i standard. WPA could be implemented through firmware upgrades on wireless network interface cards designed for WEP that began shipping as far back as 1999. However, since the changes required in the wireless access points (APs) were more extensive than those needed on the network cards, most pre-2003 APs could not be upgraded to support WPA. The WPA protocol implements

3024-485: The pre-shared key, they can potentially decrypt all packets encrypted using that PSK transmitted in the future and even past, which could be passively and silently collected by the attacker. This also means an attacker can silently capture and decrypt others' packets if a WPA-protected access point is provided free of charge at a public place, because its password is usually shared to anyone in that place. In other words, WPA only protects from attackers who do not have access to

3087-451: The previous system, Wired Equivalent Privacy (WEP). WPA (sometimes referred to as the TKIP standard) became available in 2003. The Wi-Fi Alliance intended it as an intermediate measure in anticipation of the availability of the more secure and complex WPA2, which became available in 2004 and is a common shorthand for the full IEEE 802.11i (or IEEE 802.11i-2004 ) standard. In January 2018,

3150-643: The process of setting up devices with no display interface. WPA3 also supports Opportunistic Wireless Encryption (OWE) for open Wi-Fi networks that do not have passwords. Protection of management frames as specified in the IEEE 802.11w amendment is also enforced by the WPA3 specifications. WPA has been designed specifically to work with wireless hardware produced prior to the introduction of WPA protocol, which provides inadequate security through WEP . Some of these devices support WPA only after applying firmware upgrades, which are not available for some legacy devices. Wi-Fi devices certified since 2006 support both

3213-427: The proposed RNG, an attacker is able to predict the group key (GTK) that is supposed to be randomly generated by the access point (AP). Additionally, they showed that possession of the GTK enables the attacker to inject any traffic into the network, and allowed the attacker to decrypt unicast internet traffic transmitted over the wireless network. They demonstrated their attack against an Asus RT-AC51U router that uses

SECTION 50

#1732798140327

3276-415: The recommended choice for securing Wi-Fi networks. Also referred to as WPA-PSK ( pre-shared key ) mode, this is designed for home, small office and basic uses and does not require an authentication server. Each wireless network device encrypts the network traffic by deriving its 128-bit encryption key from a 256-bit shared key . This key may be entered either as a string of 64 hexadecimal digits, or as

3339-417: The same Wi-Fi network but one which does not provide Internet access. Similarly, a Bluetooth or USB OTG can be used by a mobile device to provide Internet access via Wi-Fi instead of a mobile network, to a device that itself has neither Wi-Fi nor mobile network capability passwords. The public can use a laptop or other suitable portable device to access the wireless connection (usually Wi-Fi ) provided. Of

3402-626: The station and encampments forming around it. Transients / panhandlers were the most frequent users of the kiosk since its installation in early 2016 spurring complaints about public viewing of pornography and masturbation. Public hotspots are often found at airports , bookstores , coffee shops, department stores , fuel stations , hotels , hospitals , libraries , public pay phones , restaurants , RV parks and campgrounds, supermarkets , train stations , and other public places. Additionally, many schools and universities have wireless networks on their campuses. According to statista.com, in

3465-481: The term "hotspot" but referred to publicly accessible wireless LANs. The first commercial venture to attempt to create a public local area access network was a firm founded in Richardson, Texas known as PLANCOM (Public Local Area Network Communications). The founders of the venture, Mark Goode, Greg Jackson, and Brett Stewart dissolved the firm in 1998, while Goode and Jackson created MobileStar Networks . The firm

3528-628: The use of CCMP-128 ( AES-128 in CCM mode ) as the minimum encryption algorithm in WPA3-Personal mode. TKIP is not allowed in WPA3. The WPA3 standard also replaces the pre-shared key (PSK) exchange with Simultaneous Authentication of Equals (SAE) exchange, a method originally introduced with IEEE 802.11s , resulting in a more secure initial key exchange in personal mode and forward secrecy . The Wi-Fi Alliance also says that WPA3 will mitigate security issues posed by weak passwords and simplify

3591-473: The vulnerable WEP with the more advanced TKIP encryption. TKIP ensures continuous renewal of encryption keys, reducing security risks. Authentication is conducted through a RADIUS server, providing robust security, especially vital in corporate settings. This setup allows integration with Windows login processes and supports various authentication methods like Extensible Authentication Protocol , which uses certificates for secure authentication, and PEAP, creating

3654-479: The year 2022, there are approximately 550 million free Wi-Fi hotspots around the world. The U.S. NSA warns against connecting to free public Wi-Fi. Free hotspots operate in two ways: A commercial hotspot may feature: Many services provide payment services to hotspot providers, for a monthly fee or commission from the end-user income. For example, Amazingports can be used to set up hotspots that intend to offer both fee-based and free internet access, and ZoneCD

3717-616: Was a total of 4.9 million global Wi-Fi hotspots in 2012. In 2016 the Wireless Broadband Alliance predicted a steady annual increase from 5.2m public hotspots in 2012 to 10.5m in 2018. WPA-PSK Wi-Fi Protected Access ( WPA ), Wi-Fi Protected Access 2 ( WPA2 ), and Wi-Fi Protected Access 3 ( WPA3 ) are the three security certification programs developed after 2000 by the Wi-Fi Alliance to secure wireless computer networks. The Alliance defined these in response to serious weaknesses researchers had found in

3780-919: Was annulled by the Court of Justice of the European Union in 2014. The Directive on Privacy and Electronic Communications was replaced in 2018 by the General Data Protection Regulation , which imposes restrictions on data collection by hotspot operators. Public access wireless local area networks (LANs) were first proposed by Henrik Sjoden at the NetWorld+Interop conference in The Moscone Center in San Francisco in August 1993. Sjoden did not use

3843-623: Was demonstrated by implementing a port scanner , which can be executed against any client using WPA-TKIP . Additionally, they showed how to decrypt arbitrary packets sent to a client. They mentioned this can be used to hijack a TCP connection , allowing an attacker to inject malicious JavaScript when the victim visits a website. In contrast, the Beck-Tews attack could only decrypt short packets with mostly known content, such as ARP messages, and only allowed injection of 3 to 7 packets of at most 28 bytes. The Beck-Tews attack also requires quality of service (as defined in 802.11e ) to be enabled, while

SECTION 60

#1732798140327

3906-410: Was one of the first to sign such public access locations as Starbucks, American Airlines, and Hilton Hotels. The company was sold to Deutsche Telecom in 2001, who then converted the name of the firm into "T-Mobile Hotspot". It was then that the term "hotspot" entered the popular vernacular as a reference to a location where a publicly accessible wireless LAN is available. ABI Research reported there

3969-525: Was revealed in December 2011 by Stefan Viehböck that affects wireless routers with the Wi-Fi Protected Setup (WPS) feature, regardless of which encryption method they use. Most recent models have this feature and enable it by default. Many consumer Wi-Fi device manufacturers had taken steps to eliminate the potential of weak passphrase choices by promoting alternative methods of automatically generating and distributing strong keys when users add

#326673