MiFi Security Issues Can Reveal User Location

MiFi devices are quite useful, as it allows users to share 3G wireless connections over a Wi-Fi network. Sharing is certainly caring, and everybody loves Wi-Fi, but it seems there MiFi might share information that you might not want to be shared. Folks have managed to identify a flaw in MiFi devices (from both Sprint and Verizon) that could allow attackers to gain access to the GPS location of the device without the user’s knowledge by using a combination of attacks. To make matters worse, the attack does not require authentication, making it a lot easier to exploit. It seems that the attacker can even download the entire device configuration, including clear text credentials, which certainly is something we’d all rather not happen.

Matthew Chung
Categories: General
Tags: GPS, mifi, WiFi