{"id":193898,"date":"2010-01-18T10:52:42","date_gmt":"2010-01-18T15:52:42","guid":{"rendered":"Gizmodo-5450926"},"modified":"2010-01-18T10:52:42","modified_gmt":"2010-01-18T15:52:42","slug":"mifi-exploit-shows-gps-position-and-security-settings-for-your-mobile-hotspot-security","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/193898","title":{"rendered":"MiFi Exploit Shows GPS Position and Security Settings for Your Mobile Hotspot [Security]"},"content":{"rendered":"

<\/a>We’re fans of Novatel’s MiFi hotspots<\/a>, which allow a 3G connection to be converted into Wi-Fi. What we are not fans of is a new exploit that lets hackers reveal your location and all your security info.<\/p>\n

The exploit, which affects the MiFi 2200s sold by Verizon and Sprint, kicks in when users visit a certain website.<\/p>\n

\n

“Among the information the MiFi 2200 will readily share is the WiFi security key \u2013 sent in clear text \u2013 and with some Javascript Baldwin showed it was possible to change the hotspot’s settings to the point where a factory reset is required in order to restore functionality to the user. Even if GPS is turned off, a remote command can be used to switch it back on.<\/p>\n

A further exploit can extract the entire configuration of the MiFi, again in clear text, including all of the security settings.”<\/p>\n<\/blockquote>\n

If you’re a MiFi user, just be careful out there until Novatel issues a fix. [UMPC Portal<\/a> via SlashGear<\/a>]<\/p>\n



\n

\n\"\"<\/a>
\n\"\"<\/p>\n

<\/img><\/a>
\n<\/img><\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a>\n<\/div>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

We’re fans of Novatel’s MiFi hotspots, which allow a 3G connection to be converted into Wi-Fi. What we are not fans of is a new exploit that lets hackers reveal your location and all your security info. The exploit, which affects the MiFi 2200s sold by Verizon and Sprint, kicks in when users visit a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-193898","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/193898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=193898"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/193898\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=193898"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=193898"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=193898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}