Symantec: Google Glass still vulnerable to Wi-Fi attack

From PC World: Google fixed one Wi-Fi security problem with its wearable computer Glass, but Symantec says there’s another problem, which has been a long-known weakness in wireless networking.

The security vendor has been analyzing Google Glass in its labs and found a second issue that is just as harmful as the now-patched QR-code vulnerability found by Lookout Mobile Security, which was made public earlier this week.

Many Wi-Fi devices regularly look for networks that they have been connected to before, wrote Candid Wueest, a threat researcher for Symantec. The behavior is convenient for users, since they don’t have to manually connect to a known network, he wrote.

But for as little as $100, a hacker can buy a device that impersonates the known Wi-Fi network by borrowing the network’s name, known as its SSID (Service Set Identifier).

If a mobile device such as Google Glass looks for a known network with the SSID of “myPrivateWiFi,” a device called the Wi-Fi Pineapple can respond, pretending it is the network.

View: Article @ Source Site