Bug 2709

Summary:	Hidden hotspots should not be displayed in wireless tools
Product:	Mageia	Reporter:	Thomas Lottmann <skiperdrake>
Component:	RPM Packages	Assignee:	Olivier Blin <mageia>
Status:	RESOLVED OLD	QA Contact:
Severity:	enhancement
Priority:	Normal	CC:	mageia, marja11
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	drakx-net	CVE:
Status comment:

Description Thomas Lottmann 2011-09-12 12:09:04 CEST

Hello,

There arer hidden hotspots that are displayed in the wireless tools (as these : [ab:01:cd:23:ef:45]). 

This can be potentially be dangerous for them as their id is displayed. Also, they are supposed to be 'hidden'. So they have no reason to appear. 

Using drakx-net-0.97-1.mga1.noarch. 

Thank you.

Comment 1 Sander Lepik 2011-09-12 12:12:56 CEST

Ok, lets hide them. But how is normal user (w/o root permissions) going to connect into such network then? AFAIK there is no option then. With mac shown you can configure the network and give it a SSID.

CC: (none) => sander.lepik

Comment 2 Thomas Lottmann 2011-09-12 14:53:25 CEST

Users should *never* connect to a network using a hot-spot's mac address. 

It is asked in the case of a hidden hot-spot to start a manual configuration, providing the SSID, Security mode and password to connect to that hidden hotspot.

Comment 3 Manuel Hiebel 2011-10-25 10:49:40 CEST

Bug assigned to the package maintainer.

Assignee: bugsquad => mageia

Manuel Hiebel 2012-10-31 20:11:55 CET

Version: 1 => Cauldron

Comment 4 Marja Van Waes 2012-11-01 16:21:20 CET

(In reply to comment #2)
> Users should *never* connect to a network using a hot-spot's mac address. 
> 
> It is asked in the case of a hidden hot-spot to start a manual configuration,
> providing the SSID, Security mode and password to connect to that hidden
> hotspot.

Why never? Hidden means only that the SSID is hidden, nothing more. Even *after* having done the manual configuration, it can still happen at times that you only see the MAC address of the WAP or hotspot, but that connecting works fine after choosing the correct MAC address. How to connect if you don't see anything at all?

If you're afraid unauthorised people who see the mac address of your hotspot or WAP figure out what the SSID and password are: There might be an option to only allow access to users whose mac addresses you whitelisted (the WAP here has it).

CC: (none) => marja11

Comment 5 Marja Van Waes 2015-04-19 14:13:20 CEST

Sorry, but this bug saw no action since more than 2 yrs ago. 
No cauldron package has stayed the same since then.

Closing as OLD

Please reopen if this report is still valid for _current_ cauldron and/or fully
updated Mageia 4

Status: NEW => RESOLVED
Resolution: (none) => OLD