https://bugs.kde.org/show_bug.cgi?id=435430

--- Comment #5 from Alexander Popel <adamantga...@gmail.com> ---
(In reply to Nate Graham from comment #2)
> Marking as critical since this can cause your wifi password to silently get
> to sent to the router of a different network controlled by someone else
> (possibly malicious).

AFAIK, only password's hash gets transmitted, so it wouldn't be any different
than sending the password to your own router, since most of WiFi-capable
devices can intercept the handshake. You don't need an evil router :)

So it's not that critical in terms of security. Maybe only if the network that
gets selected is an open one - then if you didn't pay attention you might be
sending private data on a public network. But I don't know how networkmanager
would react to you providing a password for an open network - maybe that's an
error.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to