Hacker News Reader

once you are inside the network, all bets are off anyways. Once I'm inside the network, I can ARP-spoof the gateway and get to all traffic anyways - no additional decryption needed.

While this might be a nasty oversight in the spec, for all intents and purposes, it is IMHO irrelevant as there are way easier methods to get at the data of other users in the network.

View on HN

ARP-spoofing can be detected although I'm not sure how many networks actively do this. Being able to decrypt all internal packets passively is a big deal.

It's a big deal - but most places that concerned about security, the ones that worry heavily about arp-spoofing and detection probably don't allow wireless in the first place..... at least that's been my experience.

ARP spoofing actually in practice not easy to do. Enterprise class switches can snoop DHCP traffic and prevent forged ARP packets.

Reply on news.ycombinator.com