On march 29th, tupanggang po, zhao looked at financial and economic reports, using wi-fi and wi-fi keysHotspot sharingApp, “from the individual to the mall, from the diplomatic building to the financial center, the password can be easily stolen”. The broadcast generated public interest in sharing security risks in hot spots. ThenWifi's almighty keyIn response to this
Chart
Van jiangbo
On 29 march, oag reported that it was possible to share app with hot spots such as wi-fi and wi-fi, “from individuals to the mall, from the diplomatic building to the financial center, to easily steal passwords”. The broadcast generated public interest in sharing security risks in hot spots。
Subsequently, wifi responded with an urgent response on the matter by stating that the software operated on the basis of sharing of wifi hotspot resources, providing easy access to users, secure access to the internet, rather than cracking, in an attempt to clarify that there was no corresponding security risk。
The so-called hotspot sharing (wifi access authentication) is simply to share wireless wifi hotspots over specific time periods, regions, access authorizations, etc., for other people to use internet access resources; it can be accessed at random in a given area if wifi is explicitly informed of the passwords shared, or if it is open and free of confidentiality. In order to improve safety, most public wifi will now conduct secondary authentications on the landline page, even if illegal users are connected to the common wifi, where data are not directly available. Generally speaking, it is a peaceful and legitimate way。
The so-called “discovery” is, strictly speaking, an illegal act, involving the use of a variety of technical means to circumvent or illegally obtain visiting authorization to visit resources, generally in the form of violence, unlawful methods and possibly criminal offences。
In general, access passwords are entered for different users to use shared hot spots; the more areas are shared, the more passwords are needed and not easily, so hotspot sharing software is available. With the installation of the hotspot shared type software, users who use a particular hotspot in an area and other users who enter the region with this software will automatically connect to the hotspot and are therefore very user-friendly。
Wifi's universal key and wifi's key software are such software. Wifi's universal key collects and accumulates data by uploading shared hot spots to backstage servers. The back-office server maintains a hotspot database containing hotspot names and their corresponding password strings. When searching for passwords, the user uploads unscanned hotspots that are scanned around the server backstage to the corresponding password(). If shared, return to app for user choice。
The use of automatic sharing is highly likely to result in users being rinsed, lan privacy leaked or hacked easily. In the design logic of the omnipotent wifi key, once the user informs the visiting friend of the family wifi password, the password will be shared and the owner of wifi has no knowledge of it. The protection of family wifi can be said to be the weakest, with hackers connected to family wifi to intercept network traffic at will, access to local area network (lan) sharing of documents and data such as house cloud storage, which pose a great danger to personal safety. The sharing of information on hot spots involving wifi, a state organ, is highly likely to endanger national security and should be given high priority。
According to article 111 of the general civil code, personal information of a natural person is protected by law, and any organization or individual who needs to obtain the personal information of another person shall, in accordance with the law, obtain and ensure the security of that information, illegally collect, use, process, transmit the personal information of another person, and illegally sell, supply or make public the personal information of another person。
CybersecurityThe act also specifies that: “the collection and use of personal information by a network operator shall be governed by the principles of legality, legality and necessity, the rules of public collection and use, the purpose, manner and extent of the collection and use of information, and the consent of the person so collected.”
In its response, the almighty wifi key stated that it had always emphasized the sharing of hot spots by the owners of the wifi hotspots and the increased sharing of non-hot spots by the owners of the sites. Turning on software such as wifi's master key, some of which do see the so-called “user protocol”, it seems that users are willing to provide wifi passwords, but it is not simple: because when a user clicks, the user protocol is tacitly agreed, many users may not have opened it at all -- this is also the method commonly used by many apps to obtain user authorization, and the reality is that users are denied the right to know and choose。
To back up, even if users are willing to provide wifi passwords, this does not mean that they are willing to provide wifi passwords and other personal information to businesses like wifi's universal key, and among these hot spots, access to sensitive information such as address books, photographs and text messages is collected。
It was also reported that some wifi shared apps that stored user passwords using explicit means, or simply encrypted, and that in such cases, once the back-office system was hacked to get data, especially the user's personal information, such as a mobile phone number, was highly likely to trigger security problems such as precision fraud, “killing” and so forth, which must be given high priority。
Under the provisions of the cybersecurity act, network operators are required to take technical and other necessary measures to ensure the security of the personal information they collect and to prevent the disclosure, damage or loss of that information, and we have a security phase protection system in place. Therefore, it is the view of the author that all internet enterprises should comply strictly with the requirements of the cyber security act, comply with the relevant security protection obligations as required by the cyber security level protection system, protect the network from interference, sabotage or unauthorized access, and prevent the disclosure of web data or their theft or alteration。
Although the state currently encourages the sharing of economic development, enterprises must not be allowed to collect personal information under the banner of economic sharing, or even information on the security of the country in crisis, and to place the information collected at great risk, not only against the original intent of national development and economic sharing, but also on the enterprise itselfLegal risksI don't know。
(as part of the office for security and informatization of the network of the university of south-west financial and economic sciences)