Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Massive security hole. I have a guest wifi set up in my house with a simplish password I can give out. Guest gets on external internet but can't see my internal private stuff. I can change my guest password without having to reenter my main 63 character password in all my other internal devices.
 
Or if a device tried to log on using the network it provided the same pop-up! That would make resetting passwords on devices easier (as long as the SSID didn't change). It'd have to provide a decent amount of info on the device for me to trust it (or if the router auto allowed recognized MAC addresses to update the password behind the scenes?).

I guess if you want your friends to be on the guest network then you have to be as well for the handoff to work?
[doublepost=1517630057][/doublepost]If I only had a friend ... just 1 friend ...
 
  • Like
Reactions: SkimPappa
In iOS 11, there's a handy new feature that's designed to let you quickly share your Wi-Fi password with a friend, and, if you're at a friend's house, to get the Wi-Fi password with just a tap.

The only prerequisite for this feature, aside from iOS 11, is that you and your friend need to have each other listed as contacts in the Contacts app. Here's how it works:
  1. When a friend is at your house, have them open up the Settings app.
  2. Tap on Wi-Fi, and let the iPhone look for available networks.
  3. Have your friend tap on the name of your Wi-fi network.
From there, you'll get a popup on your own iPhone that asks you if you want to share your password. Tap "Share Password" and your Wi-Fi password is automatically sent to your friend's iPhone and they're able to join your Wi-Fi network.

Article Link: How to Share Your Wi-Fi Password With a Friend in iOS 11

I think this is actually quite brilliant, because it gives another person access to your network (if you so choose) without giving them the password. I would assume that, if you change your password or dig in to do a guest disconnect, they fall off your network and have to repeat the above process to rejoin.

I have two networks at home, one off AT&T, one of a Time Capsule. I use the latter, if I guest asks me, I offer the former. That, of course, would presumably not work via Apple technology.
 
What about guest networks? No way I'm letting guests access my main network.

If this works for guest networks, then that's cool. Otherwise it's useless.
 
No. I read the steps. Are you saying the steps listed are wrong?
I'm saying I tried to connect to my friends WiFi for first time with my mac. As I'm asking my friend for the password he already approved it.

Are you saying blurting out your WiFi password or having to type it in for friends it is more convenient?
 
So... if my son gives the password to his girlfriend she can give it her friend who can give it to their friend who can...
I wouldn't mind if it was ONLY for the Guest network access, but this seems (to me) to potentially be able to become a security nightmare.
 
  • Like
Reactions: vault
So... if my son gives the password to his girlfriend she can give it her friend who can give it to their friend who can...
I wouldn't mind if it was ONLY for the Guest network access, but this seems (to me) to potentially be able to become a security nightmare.

Why are people saying this is a security flaw

If two people are on the same WiFi network (with one waiting to join) then you can send the password once prompted.

If your sons girlfriend gives it to her friend (who will need to be on your WiFi), that’s exactly the same as if they had asked for the password

Why do you not think it cannot be used for the guest network? It’s a new SSID and separated from the main network. It’s not any different then what already exists
 
  • Like
Reactions: thewhitehart
tl;dr ... and have not tried.

Does it work like Airdrop where you can choose if it will only allow people in Contacts/Everyone/None?
It would be very annoying for someone just passing by your place and try to connect to your network only for someone in the household mistakenly press ok because they are in a rush to read the full pop-up.
 
Why are people saying this is a security flaw

If two people are on the same WiFi network (with one waiting to join) then you can send the password once prompted.

If your sons girlfriend gives it to her friend (who will need to be on your WiFi), that’s exactly the same as if they had asked for the password

Why do you not think it cannot be used for the guest network? It’s a new SSID and separated from the main network. It’s not any different then what already exists

I don’t give my kids the password. Yes don’t want them sharing it. Now they can share it without even knowing it.

I’ll tell them not to share, so isn’t a huge problem. But their friends will keep asking and they can’t just say “I don’t know it”.
 
  • Like
Reactions: vault
I'm saying I tried to connect to my friends WiFi for first time with my mac. As I'm asking my friend for the password he already approved it.

Are you saying blurting out your WiFi password or having to type it in for friends it is more convenient?

And when connecting to your friends WiFi, were they at work, on the bus, or in their car? Where was your friend? If they were with you than I think you are missing my point.
 
I have a QR code on my fridge. iOS 11 can scan those, too.

We have a place here in town called Petroglyph where you can paint your own ceramic things and they'll glaze and fire them. I made a picture frame with the airport logo and put the QR code for our guest network in it.

nRtUxya.jpg

[doublepost=1517679503][/doublepost]
Massive security hole. I have a guest wifi set up in my house with a simplish password I can give out. Guest gets on external internet but can't see my internal private stuff. I can change my guest password without having to reenter my main 63 character password in all my other internal devices.

It's only a security hole if you tap "accept" (or whatever) on the sheet that pops up on your phone.
[doublepost=1517679992][/doublepost]
So... if my son gives the password to his girlfriend she can give it her friend who can give it to their friend who can...
I wouldn't mind if it was ONLY for the Guest network access, but this seems (to me) to potentially be able to become a security nightmare.

Keep in mind that they can only use it when they're within WiFi range of your house.

That narrows things down quite a bit.

Most people share a lot more with "friends of friends" on Facebook.
 
Massive security hole. I have a guest wifi set up in my house with a simplish password I can give out. Guest gets on external internet but can't see my internal private stuff. I can change my guest password without having to reenter my main 63 character password in all my other internal devices.

Same here, my kids’ friends come over all the time and much easier to just tell them to look at the post-it on the fridge.
 
And when connecting to your friends WiFi, were they at work, on the bus, or in their car? Where was your friend? If they were with you than I think you are missing my point.
I think I'm still missing your point. 99% sure this uses bluetooth to request/share the password (since your not yet on the wifi) so if they weren't there it would not bother them (but why would I be at their house if they weren't there, how often will that happen?) at that point you go back to the regular way of asking for their password.

Instead of trying to finding flaws before actually trying it, why don't you try it and see if your made-up issues with this actually exist?
 
Last edited:
tl;dr ... and have not tried.

Does it work like Airdrop where you can choose if it will only allow people in Contacts/Everyone/None?
It would be very annoying for someone just passing by your place and try to connect to your network only for someone in the household mistakenly press ok because they are in a rush to read the full pop-up.

Have you tried reading the article which addresses the issue or does your bowel lining block your view?
 
If a friend comes to my house and wants to use their iPhone rather than visit with me, are they really much of a friend? :D
 
If a friend comes to my house and wants to use their iPhone rather than visit with me, are they really much of a friend? :D

Usually this is a situation where they want to show you a video, or maybe they need an update quickly from the app store. Maybe doing some remote work while visiting you. I have experienced all three of those situations in the past few months.
 
Microsoft had much smarter and more secure version of this (limiting it to your contacts and not propagating to their contacts) and everyone freaked out about it. I guess it's ok if it's Apple...
 
Usually this is a situation where they want to show you a video, or maybe they need an update quickly from the app store. Maybe doing some remote work while visiting you. I have experienced all three of those situations in the past few months.
Yeah, I know. I was just being a bit silly (hence the smiley face in my post).
 
Doesn't work when you use username and passwords for everyone.

That makes sense. Most corporations use session authentication with user accounts from a directory or use certificates. (Or use a guest access portal)

This is a good feature if you’re not worried about your guests propagating WiFi access to your personal network.
 
Massive security hole. I have a guest wifi set up in my house with a simplish password I can give out. Guest gets on external internet but can't see my internal private stuff. I can change my guest password without having to reenter my main 63 character password in all my other internal devices.

How is it a massive security hole if you hit the x? Lol
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.