Not sure if I used the correct terms but what is the difference in security and privacy between downloading from a public wifi (or a closed wifi; with password) and mobile hotspot (sharing 4G/5G data from your phone to your computer)? Which one is recommended or does it not matter?

@Tetsuo@jlai.lu
link
fedilink
English
52M

Do you have any documentation on how this work ? Is there a name to this special protocol? Is it a recent addition to the wifi standard ?

Again a wifi AP doesn’t send data to a specific client. So how does an AP can enforce that one client can’t read a frame for someone else that is properly authenticated? How would an AP prevent someone spoofing mac addresses from receiving that data ?

I’m really confused by this feature I never heard of even when I was playing with aircrack and so on. Yes sometimes your mac address can get filtered but even that is not really difficult to avoid.

Sorry I have so many questions but I honestly did quite some “tinkering” with wifi years ago and none of this sounds familiar.

@BakedCatboy@lemmy.ml
link
fedilink
English
3
edit-2
2M

To add to the other reply, client isolation is about controlling whether an ap, switch, or router willingly sends traffic between clients. Because of that, it doesn’t kick in if you listen to packets over the air before they’ve been received by an AP. For that kind of security you need a wifi specific security measure - which I think “enhanced open” is what you’d be interested in. It allows you to have an open passwordless wifi but it generates temporary encryption keys for each connected client, then the rest is as if it was using WPA, so that you don’t need to enter a password but your traffic gets encrypted and protected from anyone else listening in on the WiFi.

If you combine both then you should have a network where each device is isolated both over the air and from a routing perspective so that each device only sees an Internet connection and no other devices.

@Petter1@lemm.ee
link
fedilink
English
22M

Is this similar to vLAN that could be configured in my router but I never bothered since it was overkill for me?

@BakedCatboy@lemmy.ml
link
fedilink
English
32M

You can achieve a similar thing using vlans - usually by default they’re isolated but you may add specific rules that allow traffic between vlans if it meets certain criteria (specific ports, specific types of traffic, traffic to or from specific hosts, any combination of those). So yeah you can imagine client isolation being like having each client on their own vlan - except without needing a different subnet for each client.

@Tetsuo@jlai.lu
link
fedilink
English
22M

Thanks ! That’s exactly how I think it could be implemented but that confirms that this is certainly not something you can find commonly where I live.

That confirms the fact that if you use the same wifi and everyone has entered the same encryption key then there is no real client isolation…

It’s cool that wifi keeps evolving. It comes a long way from the WEP beginnings.

Client seperation is implemented by the AP. There’s lots of info, it’s called client isolation normally. check this out

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
!piracy@lemmy.dbzer0.com
Create a post
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don’t request invites, trade, sell, or self-promote

3. Don’t request or link to specific pirated titles, including DMs

4. Don’t submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

  • 1 user online
  • 106 users / day
  • 270 users / week
  • 1K users / month
  • 3.5K users / 6 months
  • 1 subscriber
  • 3.4K Posts
  • 82.2K Comments
  • Modlog