[AusNOG] Android storing SSID and WPA encryption keys

Bevan Slattery Bevan.Slattery at nextdc.com
Thu Jun 16 21:41:26 EST 2011



> -----Original Message-----
> From: Andrew E [mailto:edo at ohlawd.net]
> Sent: Thursday, 16 June 2011 9:18 PM
> To: Bevan Slattery; ausnog at ausnog.net
> Subject: RE: [AusNOG] Android storing SSID and WPA encryption keys
>
> > Am I the only one that thinks there's something wrong with that concept?
>
> Nope. But also, I was always of the opioun that wifi networks are treated as
> unseucre along with the devices connected to them so we should build extra
> security to suit.
>
> - Andrew Edington

Andrew,

The concept here isn't wifi.  It's a company [possibly] taking and storing passwords without active consent or knowledge from the user (or possibly the company).  It's no different to Chrome taking your banking password and storing it on Google's cloud without your active knowledge or consent - or perhaps your windows password, or RSA authentication entry etc. etc...  Even worse, your company's banking passwords.

I'm probably just getting too old - and who knows this could be a beat up...

[b]
The information contained in this email and any attachments may be confidential. This email and any attachments are also subject to copyright. No part of them may be reproduced, adapted or transmitted without the written permission of the copyright owner. If you are not the intended recipient, any use, interference with, disclosure or copying of this information is unauthorised and prohibited. If you have received this email in error, please immediately advise the sender by return email and delete the message from your system. All email communications to and from NEXTDC Limited are recorded for the purposes of archival and storage.


More information about the AusNOG mailing list