Can we still use PEAP-MSCHAPV2 for authenticating to a WPA2-Enterprise network?
L.S,
For authenticating to a BYOD wireless network a lot of companies use WPA2-Enterprise connected to a Microsoft IAS/NPS server to authenticate against Active Directory. There seems to be a way to intercept this wireless traffic using a roque accesspoint using the same (company) SSID-name and tools like freeradius-WPE and cloudcracker.
If the BYOD client doesn't check the certificate provided by the fake radius server, the MSCHAPv2-negotiation can be discovered and the hacker will get the username AND hashed password which can be lookup'd by rainbow tables sites like cloudcracker.
Is there still a safe way to deploy AD-authentication to BYOD clients?
Kind Regards,
Arjen
I have tested the WPA2-enterprise/PEAP-MSCHAPv2 exploit this week placing a laptop in my car on the company parking lot with a Kali image, using hostap and freeradius-wpe configured with the company SSID. It was very easy to find out the mschapv2 challenge/responses of a number of android/windows phones that there just walking past my car. Also iPhone has a bad WPA2-enterprise implementation (see: http://research.edm.uhasselt.be/~bbonne/docs/robyns14wpa2enterprise.pdf), so bye bye WPA2-enterprise/PEAP-MSCHAPv2.
Wonder what other (large) companies are using for their BYOD wireless networks! EAP-TLS using certificate sounds like the only feasible option, however, we are afraid that the enrolment of certificates to the BYOD-clients will be a total disaster. I heard stories that some android phones lose their client certificate after a reboot :(
Similar Messages
-
Using iOS 8.1, can I still use pop account for email instead of imap
UUsing iOS 8.1 on iPhone 4. Can I still use pop account for my email instead of IMAP. Don't like all my email on mail server
MMy biggest problem is both iPhone and iPad when I set up email account uses IMAP automatically. So I really have no choice. Since IMAP doesnot allow downloading email to device, I have to leave all restates on mail server. This really concerns me.
-
My sprint service is off. How can I still use that number for iMessage with wifi instead of my apple id?
You can't. You can only use that number if you have active service.
-
Can you still use your iPhone for apps, music, and videos after it is disconnected from your carrier?
Using an iPhone without a wireless service plan
-
How can this error be corrected? "The product distribution file could not be vverified. It must be damaged or was not signed. So can this error be repaired? I have read good things about this updated software. I really looking forward to enjoying the benefits of using OS X Mavrick softtware in my daily life.
Another question can I operate laptop with other project while it is downloading?
Thanks,
Otis A. DrakefordPlease read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of the test. -
If I use my husbands apple id for home sharing can i still use my own for downloading apps?
If I use my husband apple id for home sharing, can I also use my own to purchase apps and music?
Sorry, let me clarify. I have two Apple IDs A and B:
A: Used for iCloud. All my calendar, mail, contacts, and other iCloud features are here. This is the ID I use as "the" iCloud on my iOS devices and OS X machines.
B: Used only for purchases, on all my devices and machines. This is what I used to log into iTunes, or to buy apps for iOS or OS X.
The issue is that the only way (currently) to set up Family Sharing is to invite from an iCloud ID (A, in my case) on an iOS 8 device. That's not the ID (B) I use for purchases. The question is whether there's a way to share those purchases given that I'm configured on all my devices with A for iCloud. (Clearly if I somehow send invitations from B, I can share purchases; but that's not the question.)
It sounds like the answer to that question is 'No'.
If that's the case, how do I invite from B? Do I have to configure an iOS device with B as the iCloud ID? My problem isn't that I want to ("willy nilly") avoid inviting form B; it's that there seems to be no way (certainly no convenient way) to do that. -
My wife and I both have MacBooks (I have MacBook Pro and she has Air) and both are associated with my apple ID since I bought them. However, this means that Safari is linked for both her and I as well as our contacts etc. Can I still use mine ID for apps for her but associate hers with her own ID that I have yet to make?
Well with the MS Hotmail/Outlook.com account that is hard. But she should be able to link all of it to the iCloud system using her Apple ID.
I suggest you do a Google search for "link contacts, Calendars, iMessage with iCloud".
For some stupid reason MS has limited the syncing/linking of only emails and Notes with the Hotmail/Live Mail/Outlook.com system.
They have not included any Exchange features for syncing all that info. That is unless you are using Outlook 2013 and that is only for Windows. -
I buy adobe creative suite for teachers and students about one year ago but now i'm not longer a student. Can I still use this programs legally for commercial purposes or do I have to buy some upgrades or something like this? Please help
The license did not have use restrictions Licenses and terms of use | Adobe
BUT... when your one year Education account ends, I do not think you will be able to renew at the Education rate -
I have an old IPID touch and just bought a anew Nano. If I downoload the latest version of Itunes for my Nano, will I lose all of my osns stored in my old version of Itunes and can I still use my Touch (with my current songs on it) with the new version of Itunes? In the past when I downloaded a new version, I lost my songs on my Touch. Thank you for any help any one might offer.
i am no shure but go on Itunes store in shortcuts and try to find 'purchasse'
good luck -
I have a Macbook Pro and an Apple TV. What I'd like to do is stream a movie from my CinemaNow Account to my television by using my Apple TV and my Macbook. I know that I can do this my using the mirroring feature, however then I can no longer use my Macbook for anything else because my TV will only display what is on the screen of my Macbook. Now with this is mind, what then is the point of having multiple displays through the use of my Apple TV, if only one display can be used at a time unless they both show the same image? Or is there a way for me to be able to stream the movie to my TV and still use my Macbook for other purposes (multi-tasking)?
To enable a second display over AirPlay, you first need to be connected to the same network as your Apple TV. Next, open System Preferences > Displays, and select your Apple TV from the “AirPlay Display” drop-down menu.
Once you do this, your display may flash as the second display connection is acquired, and the Apple TV takes over as the second display. If the displays are mirrored, then you can correct this by opening the “Arrangement” tab in System Preferences > Displays, and ensuring that the “Mirror Displays” checkbox is unchecked.
In this same “Arrangement” tab, you can move the displays around in the pane to ensure that they're positioned correctly, relative to your physical space (usually side-by-side, or top-down). The primary display here is denoted here by the Menu bar on the display. The arrangement helps with being able to drag windows from one display to the next: if your secondary display is arranged to be to the right of your primary one, for example, you can drag things to it through the right side of your primarcy screen. -
Can I airplay a movie from safari on my MacBook to Apple TV and still use the computer for something else at the same time?
Hi frogjt,
Welcome to the Apple Support Communities!
Great question! You can absolutely do this in OS X 10.9. The attached article explains how the process of using AirPlay with Apple TV to create a second display. Also, towards the bottom of the article there are instructions on how to set your Displays preferences on the computer to make sure the TV and MacBook Pro displays are set up the way you want them to be.
OS X: Using multiple displays in Mavericks
http://support.apple.com/kb/HT5891
Have a great day,
Joe -
If I buy Lightroom for PC, can I still use it if I switch to a Mac in the future?
If I buy Lightroom for PC, can I still use it if I switch to a Mac in the future?
I want to use Lightroom now, but don't want to pay for it again if I start using a Mac.Yes, LR is cross-platform.
Mylenium -
with CC can i still use all the machines or do i have to take out an individual license for each?
Your LR5 license allows for activated installations on two machines. Of those two machine, only one can be using the licensed software at a given time. The same applies with CC, except with CC you won't be able to sneak in the third machine. What you can do though with CC is have it installed on all three and sign in and out of the different machines as needed.
If you intend to be using all three machines at the same time then you do need three separate licenses/subscriptions to be in compliance with the license agreement. -
I downloaded Mozilla firefox when I first got my mac as I did not like safari.Thah being said,which is better? and lastly can I still use cmd t or cmd with firefox for opening multiple sites? Thanks,Ralph
You need to visit this page and learn all about Firefox's awesome features, don't ignore the add-ons, toolbar>customize or persona's they really personalize Firefox.
http://www.mozilla.org/en-US/firefox/central/
Also you need to make sure your browser plugins are current for your whole machine, Safari included.
http://www.mozilla.org/en-US/plugincheck/
I hope one day Apple will make Safari as awesome as Firefox and allow the choice it has, but not today. -
Can I use .htaccess file for authentication if running pl/sql gateway?
The server is on Windows system with Apache as the web listener
and webDB as pl/sql gateway so if any script is under pls/,
server would invoke pl/sql. My question is: I know .htaccess can
be used for directory protection, in this case(with the pls/),
can I still use it? if yes, where should I put the .htaccess
file?
Thanks very much in advance.
PatriciaWelcome to the discussions!
+Is this feasible ?+
Feasible, yes. Practical, no...unless you are willing to put up with very slow access to files that are on the Time Capsule.
Keep in mind that the Time Capsule was designed primarily for Time Machine backups, not as a media server for quick access to data. You might want to explore other options that would allow much faster access to files when you need them.
Maybe you are looking for
-
What is difference between PC Suite and Ovi Suite?
What are the main differences between PC Suite and Ovi Suite and are there any advantages in using both please?
-
Free Goods - Always issue qty 1
Hi All, We have a requirement to use the Free Goods functionality. My problem is that the business requirement is to free issue qty 1 of a material as a sub material. We require the qty (exclusive bonus qty) to remain unchanged regardless of the orde
-
How to Screen Print from Windows 7 in Bootcamp Without "Fn" Key ?
Dear Friends, For GIS software, I have Windows 7 on my Imac 7, which uses Mac OS X 10.6.8. All of the information which I have found on the Internet about doing a screen print for Windows 7 in Bootcamp on this operating system state that 1. pressing
-
What's the opinion of Antares Microphone Modeler?
Has anyone used this plug-in and what is your experience? It seems like a neat idea to play with famous microphones as part of the recording process, especially the old Neuman's.
-
i am living in china and after installation of the new iOS the appstore and iTunes open in chinese. all language settings are in german. whar can i do?