Defence against fake wlan network

user539

If someone would seize my phone while it was connected to my wlan, could they create the exact same ssid with the same password and try to exploit it like that.
The phone would be locked in afu and always on mulvad vpn.
What is our defense against that?

Ammako

user539 What is our defense against that?

I would just change my network password after the fact if I know it was taken and suspect this kind of attack. but realistically, if they're able to extract the saved wifi password, they're already able to get anything you might be trying to be keeping secure on your phone.

user539

Is it possible to attack the phone like that

DeletedUser43

user539 You'll have to specify what kind of exploit do you have in mind? Do you have anything which security relies on you trusting the network you connect to? If so, then you'll have the same set of issues on WAN as well as public WiFi.

user539

DeletedUser43 I don't have any exploits in mind. I am asking is there any and what is our defense against it

DeletedUser43

user539 Nothing special for this case. In every case GrapheneOS doesn't trust wireless code, it's isolated. If you didn't do anything out of ordinary, nothing should allow initiating new connections to your phone. Even if any app allows it, it's sandboxed - isolated from the rest of the system.

Please note the main thing: there is nothing special about impersonating a WiFi network. If you'd have a case, where this is a problem, then you should not connect to WAN or any other WiFi networks. You should also change you router's auth method from WPA to WPA Enterprise and set a certificate - this part is outside my knowledge.