Fairphone 4 LineageOS 22.1 is tricked by a wifi catcher

[Benjamin-Loison]

A wifi catcher acting as ten well-known wifis like SNCF, Starbucks and the phone while be tricked to connect to it automatically, hence at least leak background DNS requests. My phone has been tricked with an SNCF one.

Realized that in the context of the security work visit on 03/02/25.

Is the phone tricked because the name is identical or/and the SSID is identical?

Is not there some kind of certificate across all SNCF wifis and here it silently connected while the certificate changed?

#172 would be a workaround.

[Benjamin-Loison]

What about Debian 12 GNOME?

Should pay attention to encrypt DNS requests on public wifis to not leak random parts of lemnoslife.com domain name.

[Benjamin-Loison]

Related to Benjamin-Loison/firefox-android/issues/28.

[Benjamin-Loison]

Can a wifi catcher disconnect me from a network I am already connected to? What if the wifi catcher has the same network name as the one I am connected to?