XPost: alt.comp.os.windows-10, comp.mobile.android
From: marianjones@helpfulpeople.com
Marian wrote:
> How does this look for a checklist to set up the 3 old spare routers
> to prove how Apple's WPS is poorly designed as per what independent
> security researchers have explained in the recently cited references?
OK. I ran into 32-character SSID limitations, and DD-WRT had issues
with dashes in router names, but how's this setup look for the test?
TEST PLAN: Apple WPS / SSID Privacy / _nomap Behavior
----------------------------------------------------------------------
Each AP will be set up to test proper opt-out directives Apple publishes:
https://support.apple.com/en-us/102515
"The owner of a Wi-Fi access point can opt it out of
Apple's Location Services -- which prevents its location
from being sent to Apple to include in Apple's crowd-sourced
location database -- by changing the access point's SSID (name)
to end with '_nomap.' For example, 'Access_Point' would be
changed to 'Access_Point_nomap.'"
Goal:
Demonstrate that anyone in the world can see when and where
these APs move, even when opted out, and that Apple does not
follow its own published privacy policy.
----------------------------------------------------------------------
SSID STRUCTURE
----------------------------------------------------------------------
SSID format (fits 32-char limit):
..[_nomap]
----------------------------------------------------------------------
IP ADDRESSES & SSID's befitting of the character limitations:
----------------------------------------------------------------------
192.168.1.128 SSID: AppleWPS.broadcast.public
192.168.1.129 SSID: AppleWPS.broadcast.private_nomap
192.168.1.130 SSID: AppleWPS.hidden.private_nomap
----------------------------------------------------------------------
CHANNEL PLAN (non-overlapping)
----------------------------------------------------------------------
Channel 1 -> Broadcast / Public
Channel 6 -> Broadcast / Private / nomap
Channel 11 -> Hidden / Private / nomap
----------------------------------------------------------------------
HARDWARE AND FIRMWARE
----------------------------------------------------------------------
WRT54G v5 (Linksys) -> Stock Linksys v1.02.8
WRT54G v8.1 (Linksys) -> DD-WRT v24 RC-7 (03/19/08) micro
WNR834B v2 (Netgear) -> DD-WRT v3.0-r51937 mini (03/05/23)
Most public AP uses stock firmware.
Most private/hidden AP uses newest firmware.
----------------------------------------------------------------------
ROUTER NAMES (ASCII-safe, no dashes)
----------------------------------------------------------------------
Router name: broadcast-public
Router name: broadcast-private-nomap
Router name: hidden-private-nomap
----------------------------------------------------------------------
FINAL CONFIGURATIONS (CORRECTED)
----------------------------------------------------------------------
Broadcast / Public (baseline consumer router)
Router name: broadcast-public
IP: 192.168.1.128
SSID: AppleWPS.broadcast.public
Mode: plain AP
Test: Broadcast SSID, no _nomap, no DHCP
Hardware: WRT54G v5 (Linksys)
Firmware: Stock Linksys v1.02.8
Wireless Network Mode: Mixed
Channel: 1 - 2.412GHz (20MHz)
Security Mode: WPA2 Personal
WPA Algorithms: CCMP-128 (AES)
WAN Connection Type: Disabled
Local IP Address: 192.168.1.128/24
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.1
Local DNS: 192.168.1.1
DHCP Server: Disable
DNSMasq: Disable
DHCP-Authoritative: Disable
Local DNS: Disable
Backup: 20251226_192.168.1.128_wpstest_wrt54gv5_broadcast-public.cfg
Broadcast / Private / nomap (public, opted out)
Router name: broadcast-private-nomap
IP: 192.168.1.129
SSID: AppleWPS.broadcast.private_nomap
Mode: plain AP
Test: Broadcast SSID, _nomap, no DHCP
Hardware: WRT54G v8.1 (Linksys)
Firmware: DD-WRT v24 RC-7 (03/19/08) micro
Wireless Network Mode: Mixed
Channel: 6 - 2.437GHz (20MHz)
Security Mode: WPA2 Personal
WPA Algorithms: CCMP-128 (AES)
WAN Connection Type: Disabled
Local IP Address: 192.168.1.129/24
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.1
Local DNS: 192.168.1.1
DHCP Server: Disable
DNSMasq: Disable
DHCP-Authoritative: Disable
Local DNS: Disable
Backup: 20251226_192.168.1.129_wpstest_wrt54gv81_broadcast-private-nomap.bin
Hidden / Private / nomap (hidden, opted out)
Router name: hidden-private-nomap
IP: 192.168.1.130
SSID: AppleWPS.hidden.private_nomap
Mode: plain AP
Test: Hidden SSID, _nomap, no DHCP
Hardware: WNR834B v2 (Netgear)
Firmware: DD-WRT v3.0-r51937 mini (03/05/23)
Wireless Network Mode: Mixed
Channel: 11 - 2.462GHz (20MHz)
Security Mode: WPA2 Personal
WPA Algorithms: CCMP-128 (AES)
WAN Connection Type: Disabled
Local IP Address: 192.168.1.130/24
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.1
Local DNS: 192.168.1.1
DHCP Server: Disable
DNSMasq: Disable
DHCP-Authoritative: Disable
Local DNS: Disable
Backup: 20251226_192.168.1.130_wpstest_wnr834b2_hidden-private-nomap.bin
I'm moving forward with the setup as the Google employee will only
be home later today so I'm setting up all 3 routers as we type.
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)
|
