Turning Claude loose on the firmware of five USB and WiFi peripherals, and finding a command shell in a microphone, a defeatable webcam activity LED, and unauthenticated memory writes over the network.
On an open-access WiFi hotspot, clients should not be able to see each other.
This could also be relatively easy to break in at least the majority of routers we have in the wild.
Citation required. That’s an AP option, and if an unprivileged client can change that then the AP’s pwned which is at least as bad as direct client-client visibility.
This is the thread about most thoughtlessly deployed devices being relatively easy to pwn with a specific widely available toolset, which indeed has some drawbacks.
(But also there is an option to implement WiFi-only version of isolation by the AP where inter-client routing through the router works fine, happens pretty often)
This could also be relatively easy to break in at least the majority of routers we have in the wild.
score 1 · canonical
On an open-access WiFi hotspot, clients should not be able to see each other.
Citation required. That’s an AP option, and if an unprivileged client can change that then the AP’s pwned which is at least as bad as direct client-client visibility.
score 1 · canonical
This is the thread about most thoughtlessly deployed devices being relatively easy to pwn with a specific widely available toolset, which indeed has some drawbacks.
(But also there is an option to implement WiFi-only version of isolation by the AP where inter-client routing through the router works fine, happens pretty often)
score 1 · canonical