AmberCutie's Forum
An adult community for cam models and members to discuss all the things!

Using Unsecured Wi-Fi

  • ** WARNING - ACF CONTAINS ADULT CONTENT **
    Only persons aged 18 or over may read or post to the forums, without regard to whether an adult actually owns the registration or parental/guardian permission. AmberCutie's Forum (ACF) is for use by adults only and contains adult content. By continuing to use this site you are confirming that you are at least 18 years of age.
Status
Not open for further replies.
Using a public wi-fi, you are vulnerable to a number of "man in the middle" attacks, but there are ways to protect yourself.

http://www1.cse.wustl.edu/~jain/cse571-07/ftp/cafecrack/index.html#Section4

In short, always use https when you log into a website and use manual DNS settings (I use google public DNS myself 8.8.8.8 & 4.4.4.4). Also, connect to a VPN, if possible.

As far as MFC goes, passwords are sent across plain text (but encoded) when you login to the web page. I can only assume the same for the model software. BTW, I tried forcing https for MFC, and it starts to work then on a page reload it dies.

The information passed from computer to MFC is below. I hashed out my info and changed the encoded password to protect myself.

Code:
affiliate_subcode=##############; guest_username=Guest03705; mh=4840096,5173949; load=homepage; email=######@########.com; passcode=beqanyrmztcojevawlubganzktayqrmm; username=###########; pm_sound_type=2; user_id=######; access_level=2; conncur_mode=flash

I think its safe to say, it isn't too safe to login to MFC via a public connection unless you are able to pass through a VPN access point.
 
You should also take note, its possible to spoof a "secured" wifi connection due to the way wifi works.

Your computer will scan for saved connections and automatically connect you if it finds one. There are devices out there that will accept any request and acknowledge back they are the connection you are requesting. If your home network AP is "my secure AP" and you are at starbucks and connect to "my secure AP" - someone is spoofing you.
 
Status
Not open for further replies.