Please explain SSID "optout" enforced by Microsoft (and _nomap by Google)?

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View
Please explain SSID "optout" enforced by Microsoft (and _nomap by Google)?
http://www.extremetech.com/extreme/209208-windows-10s-new-wifi-sense-shares-your-wifi-password-with-facebook-outlook-and-skype-contacts

I accidentally found out about the Microsoft Windows 10 "optout"
requirement for SSID names while I was looking up the Google-mandated
"_nomap" for SSID names.
https://nakedsecurity.sophos.com/2015/07/01/windows-10-wi-fi-sense-feature-shares-your-wi-fi-network-with-your-friends/

Can someone explain what the Microsoft Windows 10 does with and without the
"optout" in the SSID name?
http://www.howtogeek.com/219700/what-is-wi-fi-sense-and-why-does-it-want-your-facebook-account/

I'm thoroughly confused about what Microsoft is doing with the optout on
Windows 10, but I do know that Google is using *every* Android device that
is in the vicinity of your home to spy on you by giving your current SSID
MAC address (aka BSSID) to Google so that Google puts it into Google's
PUBLIC free open-to-the-world database.

While the Google *public* database can be used by anyone from anywhere in
the world to tell if your phone is *currently* at someone's house, can the
Microsoft Windows 10 optout SSID weaknesses be similarly abused?  

Re: Please explain SSID "optout" enforced by Microsoft (and _nomap by Google)?
Horace Algier wrote:
Quoted text here. Click to load it

The Sophos article is from a year ago. Wifi Sense changed May 2016.

http://krebsonsecurity.com/2016/05/microsoft-disables-wi-fi-sense-on-windows-10/

https://blogs.windows.com/windowsexperience/2016/05/10/announcing-windows-10-insider-preview-build-14342

    "Other items of note

     We have removed the Wi-Fi Sense feature that allows you to share
     Wi-Fi networks with your contacts and to be automatically
     connected to networks shared by your contacts. The cost of
     updating the code to keep this feature working combined with
     low usage and low demand made this not worth further investment.

     Wi-Fi Sense, if enabled, will continue to get you connected
     to open Wi-Fi hotspots that it knows about through crowdsourcing.
    "

The article here suggests an opt-in is needed to actually share
with someone. But the article doesn't say whether the software
scoops up the password anyway (with a zero-length sharing list).
Now that the feature is turned off, my guess is it stops scooping
up passwords. You should not need the _optout name change to the SSID.

http://arstechnica.com/gadgets/2015/07/wi-fi-sense-in-windows-10-yes-it-shares-your-passkeys-no-you-shouldnt-be-scared

HTH,
    Paul

Re: Please explain SSID "optout" enforced by Microsoft (and _nomap by Google)?
On 09/13/2016 06:50 AM, Horace Algier wrote:
Quoted text here. Click to load it


Microsoft had the brilliant idea that ms-windows 10 would store all wifi
settings, including passwords online and then share those with your
friends automatically.
If you had one wifi which you didn't want to share this way, you had to
add the optout to the wifi SSID name.

For example your SSID is mightyInternet, this would have been stored in
the cloud, but changing it to mightyInternet_opout then it wouldn't.

The _nomap works kind of the same way, except google don't store
passwords. The wifi is gathered by the google street view cars and used
as reference points in apps like google maps.

--  

 //Aho

Re: Please explain SSID "optout" enforced by Microsoft (and _nomap by Google)?
On 2016-09-13 07:41, J.O. Aho wrote:

Quoted text here. Click to load it

Also android phones can gather this data. Ie, anyone with an android
phone and GPS active collects and send location information about the
WiFi access points it finds.

Also I understand that what is interesting for the database is the
location of the access points, not who is connected to them. I don't
think that information is collected, because it changes fast.

--  
Cheers, Carlos.

Site Timeline