*** This bug is a security vulnerability ***
Public security bug reported:
Binary package hint: network-manager
Network-manager sometimes just connect to some of my neighbour's WiFi
access points.
1. this may break law (using someone's WiFi without permission, even if
the owner was stupid enough to not secure it with any password)
2. this breaks my own privacy - attacker can put an open WiFi AP near
me, and when I connect he will see all my traffic (ISP-level snooping,
except, the attecker is not a creditable ISP but anyone).
Users should be always asked! This never should be done automatically.
Also, this is not trivial to disable it, Im quite sure I disabled [x]
enable wireless but this option got lost across reboot of system
(possible the computer crashed some time later, is config only saved on
quit?) but that is lesser concern.
By default always there should be confirmation!
** Affects: network-manager (Ubuntu)
Importance: Undecided
Status: New
** This bug has been flagged as a security vulnerability
** Summary changed:
- network-manager breaks law and breaks privacy by quietly connecting to other
peoples WiFi APs
+ network-manager breaks law and breaks privacy by quietly connecting to other
people's WiFi AP's without confirmation
** Description changed:
Binary package hint: network-manager
Network-manager sometimes just connect to some of my neighbour's WiFi
access points.
- 1. this make break law (using someone's WiFi without permission, even if
+ 1. this may break law (using someone's WiFi without permission, even if
the owner was stupid enough to not secure it with any password)
2. this breaks my own privacy - attacker can put an open WiFi AP near
me, and when I connect he will see all my traffic (ISP-level snooping,
except, the attecker is not a creditable ISP but anyone).
Users should be always asked! This never should be done automatically.
Also, this is not trivial to disable it, Im quite sure I disabled [x]
enable wireless but this option got lost across reboot of system
(possible the computer crashed some time later, is config only saved on
quit?) but that is lesser concern.
By default always there should be confirmation!
--
network-manager breaks law and breaks privacy by quietly connecting to other
people's WiFi AP's without confirmation
https://bugs.launchpad.net/bugs/569721
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
