Forum Home
Press F1
 
Thread ID: 140016 2015-08-07 06:13:00 Random device on my network - general question 8ftmetalhaed (14526) Press F1
Post ID Timestamp Content User
1406100 2015-08-08 05:01:00 For clarity Microsoft should have said (please correct me if I am wrong)

"Automatically connect to networks that are shared to you by a network manager"

instead of

"Automatically connect to networks shared by your contacts"

(I have in my mind that Share - Connect is the same relationship as Server - Client. In other words, sharing acts in the down direction only. When a visitor comes to our house they don't "share" our internet - they "connect" to our Access Point. And I "share" my internet to them by giving them the password.)

There are 2 features the make up Wi-Fi Sense.

1. Auto-connect to curated, open Wi-Fi hotspots

connects to specific locations using SSID/BSSID. More secure than normal "connect automatically" Wi-Fi

2. allow users to share Wi-Fi passwords (Windows does not share any individual Wi-Fi network password without explicit user consent)

The sharing is an explicit user action at the time of connect (or later from the "Manage Wi-Fi settings page). the user must know the password to share the network.

If someone knows your password they can already share it in a "traditional" way, but emailing it to all their friends or posting it on Twitter and Facebook etc.

If you want to guarantee that you network cannot be shared via Wi-Fi Sense you can include _optout somewhere in the SSID

When you share with contacts, the contacts must be mutual contacts for sharing to take place

Users can't access the shared Wi-Fi sense shared password. Wi-Fi sense shared network passwords are not persisted on your PC

When you connect to the shared network, you only get internet connectivity, nothing else.
nmercer (3899)
1406101 2015-08-08 05:02:00 Indeed.
The issue is not that people you give it to could be 'dishonest', which is already the case - this 'feature' makes it much more likely to have your password spread far and wide, without your knowlege, to a vast number of people, simply by your 'friend' being careless or clueless, maybe being not even aware they are doing it - or even who all their "contacts" are...

they need to know the password to share it. If you share it to them over Wi-Fi Sense they will never have the password, to be able to share it out.
nmercer (3899)
1406102 2015-08-08 05:03:00 Just adding to my post above, the proof:



Customers Laptop ( this is available on earlier OS's as well), tick the box and bingo - the password. Now if someone was dishonest it wouldn't be to hard to give to others.
6660

this button won't actually be there to click on when you are actually using Wi-Fi Sense
nmercer (3899)
1406103 2015-08-08 05:04:00 Is it bluetooth? I can share my phones 4g network on my computer.

Wi-Fi Sense uses Wi-Fi only not Bluetooth.

Yes a lot of phones now can share out Internet over BT as well as Wi-Fi
nmercer (3899)
1406104 2015-08-08 05:22:00 they need to know the password to share it. If you share it to them over Wi-Fi Sense they will never have the password, to be able to share it out.
Yes, missed the edit window on my post, they only get access, it's only microsoft that gets the password (and any qualifyng 3rd party or 'law enforcement'.
fred_fish (15241)
1406105 2015-08-08 05:28:00 When you connect to the shared network, you only get internet connectivity, nothing else.
That's not entirely true either - it merely turns off 'Network Discovery' on the connecting client, so any network devices don't show up automatically in the browser - there is nothing to prevent network traffic between the WiFi-Sense client and the rest of the connected network.
fred_fish (15241)
1406106 2015-08-08 06:06:00 It is not on by default. The person with the Wi-Fi network to share out, has to choose to share their network out. OPEN YOUR EYES -- "Automatically connect to networks shared by your contacts " It is on by default, even provided pictures.

If you don't believe it do a install and select the customize option.

Its funny how you who "should" know basic settings, especially with the knowledge and experience attained over years & in the right place to get answers ( Microsoft), to what should be a simple answer either refuses to believe the proof or refuses to answer technical questions.

Any of the talks or roadshows you have given that I've attended its always come across as knowing what you're doing. :)
wainuitech (129)
1406107 2015-08-08 06:30:00 OPEN YOUR EYES -- "Automatically connect to networks shared by your contacts " It is on by default, even provided pictures .

If you don't believe it do a install and select the customize option .

Its funny how you who "should" know basic settings, especially with the knowledge and experience attained over years & in the right place to get answers ( Microsoft), to what should be a simple answer either refuses to believe the proof or refuses to answer technical questions .

Any of the talks or roadshows you have given that I've attended its always come across as knowing what you're doing . :)

No Wi-Fi Sense network is shared out by default .

The owner of the network must choose to share it .

They explicitly must choose the Share button .
nmercer (3899)
1406108 2015-08-08 06:31:00 this button won't actually be there to click on when you are actually using Wi-Fi Sense Hate to tell you, and it was actually a test to see what the reply would be. I said if the laptop had been connected- It was on a windows 10, within range of the wireless connection and the password showed.

This means if anyone who had connected if they wanted to could easily get the password, take an example ---- person is on someones network, wants the password, takes laptop to another room, a few seconds later - bingo has the password. Now if they wanted, they could return at any time, or give the password to others and as long as they are in range could easily get on.

This new option you don't even need to know the password if you are on a persons contacts - HUGE security fault.

Even the exact wording says so:
6661
wainuitech (129)
1406109 2015-08-08 06:40:00 Hate to tell you, and it was actually a test to see what the reply would be . I said if the laptop had been connected- It was on a windows 10, within range of the wireless connection and the password showed .

This means if anyone who had connected if they wanted to could easily get the password, take an example ---- person is on someones network, wants the password, takes laptop to another room, a few seconds later - bingo has the password . Now if they wanted, they could return at any time, or give the password to others and as long as they are in range could easily get on .

This new option you don't even need to know the password if you are on a persons contacts - HUGE security fault .

Even the exact wording says so:
6661

You have just pointed out why Wi-Fi sense is better

If you're not using Wi-Fi Sense you can do what you've described

If you are using Wi-Fi Sense to share your network, the password is not persisted on the device in the Wi-Fi dialog for it to be obtained .
nmercer (3899)
1 2 3 4