up vote 4 down vote favorite
share [g+] share [fb]

For instance, you're laptop's wifi card is on, but you've deliberately not connected to any hot spots. Is there anyway it can be hacked while sitting there, and not connected?

link|improve this question
29% accept rate
feedback

2 Answers

up vote 5 down vote accepted

It will still be scanning for networks, which means receiving and processing broadcast packets. It is possible for these packets to be malformed, and if the stack is buggy, then this malformed packet could trigger a bug and then compromise the laptop.

I've never heard of an actual attack using this method, there are going to be so few laptops in this state compared to the number actually attached to a network that it seems to be a very strange way to attack a system, but if you're worried, disable the wifi card when you're not using it. Of course, if you want to be really secure, you need a concrete box.

link|improve this answer
Also, as it sends the list of ESSIDs it want to connect to ("probes"), you can sniff that packet, then create a pseudo-hotspot (DHCP and everything, of course) with just one purpose: trick that laptop into connecting the hotspot and then, for example, exploit a vulnerable service. – whitequark Jun 7 '10 at 2:22
So what is the solution to this on the laptop? Is there a way to disable probing of hotspots? I know exactly the only hotspot I am interested in connecting to, how do I tell Windows to keep its trap shut? – Rhubarb Jun 17 '10 at 1:31
feedback
up vote -1 down vote

There's always a way, but the chances are very small.

link|improve this answer
The way I described in the comment is really easy, just download aircrack-ng and read the manual. Chances are very small only if no one wants to get into your laptop. – whitequark Jun 7 '10 at 15:02
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.