I've read up on the process of connecting to an "xfinitywifi" hotspot ( http://customer.comcast.com/help-and-support/internet/about-xfinity-wifi-internet/#HowtoConnect ) and I have to wonder if this is something that should be avoided.
The process involves connecting to what appears to be an unsecured AP named "xfinitywifi" and then using your browser to fill out a form with your Comcast username and password.
It seems like somebody could setup a wifi AP with such a name and there is software out there (for setting up wifi pay walls) that could be repurposed to look like the normal xfinitywifi sign in and used to log account usernames and passwords. (Never mind if it actually connects the user or not. There's a note in the instructions that says it can take a couple hours to kick in. Users can be encouraged to assume there's a technical difficulty.)
There doesn't seem to be a way for your average user (or even a knowledgeable user?) to tell the difference between a legit and fake AP. Comcast does mention something about security but what they talk about sounds like SSL which would be meaningless in the above situation.
Am I missing something?
↧