Wi-Fi and Tethering Connection Methods
Summary
PDF p.272Mobile devices typically use Wi-Fi for data connections, with WPA3 security providing low risk of eavesdropping. Risks arise from open or rogue access points. Personal Area Networks (PANs) and tethering methods also play roles in mobile connectivity.
In plain words
Supplementary — not from your PDFPhones prefer Wi-Fi. WPA3 networks are low-risk, but open or rogue access points can lead to attacks such as DNS spoofing. Personal area networks connect devices directly. Ad hoc Wi-Fi and Wi-Fi Direct (which depends on the weak WPS) create peer-to-peer links, and companies usually disable them. Tethering or hotspots share a phone's Internet connection over USB, Bluetooth or Wi-Fi. In enterprises it's often disabled because it can bypass network security.
Detailed explanation
PDF p.272-
Wi-Fi Connections
- Default Use: Mobile devices prefer Wi-Fi for data if available.
- Security: Strong WPA3 security reduces eavesdropping risks.
- Risks: Open access points and rogue access points can lead to attacks like DNS spoofing.
Personal Area Networks (PANs)
PANs
- Function: Enable connectivity between mobile devices and peripherals.
- Ad Hoc Networks: Peer-to-peer connections between devices.
- Corporate Security: Generally disable peer-to-peer functions to prevent unauthorized access.
Ad Hoc Wi-Fi and Wi-Fi Direct
Ad Hoc Wi-Fi
- Peer-to-Peer: Connections without an access point.
- Standards: No established standards for ad hoc networking.
- MITRE Project: Enables Android smartphones to configure ad hoc networks.
Wi-Fi Direct
- One-to-One Connections: One device functions as a soft access point.
- Vulnerabilities: Depends on Wi-Fi Protected Setup (WPS), which has known vulnerabilities.
- Support: Android supports Wi-Fi Direct AP; iOS uses a proprietary framework.
Wireless Mesh Products
- Vendors: Netgear, Google, etc.
- Interoperability: Some support the EasyMesh standard for peer-to-peer networks.
Tethering and Hotspots
Tethering
- Function: Share a smartphone's Internet connection with another device.
- Methods: USB cable, Bluetooth, or Wi-Fi (hotspot).
- Enterprise Networks: Typically disabled to prevent circumvention of security mechanisms.
Important terms
taken from the text above- Default Use
- Mobile devices prefer Wi-Fi for data if available.
- Ad Hoc Networks
- Peer-to-peer connections between devices.
- Corporate Security
- Generally disable peer-to-peer functions to prevent unauthorized access.
- Peer-to-Peer
- Connections without an access point.
- MITRE Project
- Enables Android smartphones to configure ad hoc networks.
- One-to-One Connections
- One device functions as a soft access point.
- Support
- Android supports Wi-Fi Direct AP; iOS uses a proprietary framework.
- Vendors
- Netgear, Google, etc.
- Interoperability
- Some support the EasyMesh standard for peer-to-peer networks.
- Enterprise Networks
- Typically disabled to prevent circumvention of security mechanisms.
Examples & real-world scenarios
Supplementary — not from your PDF- MDM disabling hotspot and tethering on corporate phones.
- A VPN used whenever connected to public Wi-Fi.
- Blocking Wi-Fi Direct on managed devices.
Scenario
An employee tethers a work laptop to their phone to get around the office web filter. Disabling tethering by policy and using agent-based filtering keeps controls in place.
Common mistakes
Supplementary — not from your PDF- Trusting any open Wi-Fi network with a familiar-sounding name.
- Forgetting that tethering can create an unmonitored path to the Internet.
Practical skills
Supplementary — not from your PDF- Write a mobile Wi-Fi and tethering policy.
What I should remember
Key Points PDF p.272-
Wi-Fi Connections
- Default Use: Prefer Wi-Fi for data.
- Security: Use WPA3 for low risk.
- Risks: Open and rogue access points.
-
PANs
- Connectivity: Between devices and peripherals.
- Security: Disable peer-to-peer functions.
-
Ad Hoc Wi-Fi and Wi-Fi Direct
- Ad Hoc: Peer-to-peer without access points.
- Wi-Fi Direct: One-to-one connections with a soft AP.
- Vulnerabilities: WPS weaknesses.
-
Tethering and Hotspots
- Methods: USB, Bluetooth, Wi-Fi.
- Enterprise Use: Typically disabled for security.