Android promotes diminished security?

[Resurrected0man]

I had hoped that with the upgrade to 2.2, the bods at Google would fix the problem with hidden SSID's. This has existed since my first Android phone and version 2.1 of the OS (just look at the newsgroups for problems connecting to a hidden SSID).

Can it really be the case that this is impossible to fix?

I would have thought that promoting the un-hiding of SSID's would be a very bad way to go.

 

[Szadzik]

Have you tried un-hiding the SSID, adding it to your phone and then hiding it again?

 

[ianr]

Hiding SSIDs does nothing to secure your network, it just hides beacon announcements but your network SSID is still very visible with every packet sent. Your authorised network clients then send probes for the network everywhere you go so you end up with more devices broadcasting its presence rather than less. Use WPA and a good password, and change the SSID from the default.

Also do a google for "hiding SSID" and have a read for more on the above.

 

[Resurrected0man]

Have you tried un-hiding the SSID, adding it to your phone and then hiding it again?

Hello Szadzik, thanks for your response.

Unfortunately, Yes. I have followed many of the advertised methods for resolving this issue, including the "turn on the beacon, attach the Android to the wireless network, turn off the beacon broadcast" that you suggest.

I have also tried the variations including deleting all the wifi profiles and then letting the system (Android) discover and save that new profile (then turning off the beacon). I have spoken with a few people who have tried to use some of the Apps which supposedly resolve the problem, but all have reported that this was to no avail. Some veen reported that one or two of the Apps crashed repeatedly on use.

I had also hoped that, in making the upgrade from 2.1 to 2.2 the problem would have been addressed (it has, after all been reported widely enough in 2.1). Unfortunately that has not been the case and was reported as such by a few of the early 2.2 beta adopters.

Thank you again though, your input is much appreciated.

 

[Resurrected0man]

Hiding SSIDs does nothing to secure your network, it just hides beacon announcements but your network SSID is still very visible with every packet sent. Your authorised network clients then send probes for the network everywhere you go so you end up with more devices broadcasting its presence rather than less. Use WPA and a good password, and change the SSID from the default.

Also do a google for "hiding SSID" and have a read for more on the above.

Hello ianr and thanks for your reply.

I had really hoped to avoid a clash of opinion with my first post, but alas, this was not to be.

You say that "Hiding SSIDs does nothing to secure your network" and you are, of course entitled to your options. I disagree with your view but I really didn't come here to find out who was technologically superior. If that matters to your then I readily bow to your superior technical knowledge.

I came here to find out if there was any news on a problem reported widely elsewhere, a problem that does not affect my ipod, my laptop or any other wireless device I have in connecting to a wireless network that hides it's SSID.

Thank you again for taking the time to enlighten me.

 

[Szadzik]

Sorry the unhiding did not work. I remember there was a long thread here but never really paid attention to it as this is not affecting me. Do a search in the forum and see what you find, maybe someone had more luck with it.

 

[AndroidSPCS]

nvm

 

[ianr]

Hello ianr and thanks for your reply.

I had really hoped to avoid a clash of opinion with my first post, but alas, this was not to be.

Titling the thread "Android promotes diminished security" then going on to trot out an old debunked security myth isn't the way to do it.

And it's not my opinion, seriously, have a look around on google and you'll find that people who were involved in writing the spec say it does nothing and makes matters worse if anything. I also do wireless security scanning as part of my job and finding a "hidden" network does not take any effort in the slightest, Kismet just spots them immediately. If it's causing you trouble, stop doing it as it's not helping you at all and makes you less secure rather than more.