bk99.de entertain the web since 1997

bk99.de
CCC · Wi-FiCurated

Running HostAP Wi-Fi networks securely on Linux

Summary

Jan Fiegert explains how Linux provides an access point with HostAP and secures it with WPA-PSK or WPA-EAP. A working access point is not yet a trustworthy network without suitable authentication. Open drivers enable network functions that would otherwise be reserved for special hardware.

Ideas

  • The HostAP driver puts supported Prism cards into access point mode.
  • WPA-PSK suits small networks with a shared key.
  • WPA-EAP separates network login and individual identities.

Recommendations

  • Use individual credentials as soon as several independent users share the Wi-Fi.
  • Separate the wireless network, management access and internal services with clear firewall rules.

References

Watch the talk

Search the Web Archive

CCC · 2020

Running your own Matrix server on Arch Linux

Brendan Abolivier explains Matrix as a federated communication standard and shows how your own homeserver on Arch Linux becomes part of the network. Decentralisation distributes control but increases the demands on operations and moderation. Self-hosting only creates sovereignty with reliable updates, backups and key protection.

CCC · 2026

MeshCore on 868 MHz: A decentralised radio network without the internet

Christian Stankowic and CodeSalat show how MeshCore and Meshtastic enable independent text networks and custom mesh bots with inexpensive LoRa hardware. Both projects build decentralised text networks on LoRa radio technology. Under suitable conditions, messages can cover many kilometres across several nodes.

CCC · 2022

Linux security monitoring with audit events

Hilko Bengen shows how Linux auditd delivers fine-grained host events and how the unwieldy format can be made usable for attack detection with reasonable effort. Network monitoring only detects many attacks together with context from the affected host. More telemetry only helps if events are reliably correlated and prioritised.