Hotspot security issue

[akopac]

Walter’s article at the following link explains issue IHad too. :-)

https://waltsworkbench.com/securing-a-wifi-hotspot-with-wpa2-using-networkmanager-on-a-raspberry-pi-running-bookworm-aka-debian-12/

Thanks
Andy

[XECDesign]

Could you explain what the issue is? What are you seeing? What would you expect to see? What is the incorrect behaviour and what is the security issue (aside from WPA itself being generally not very secure to begin with)?

References to the NetworkManager and other relevant documentation to substantiate the claims would be helpful.

While I am far from a WLAN expert, the little bit I do know goes against everything in the article. Maybe it was written with the help of a hallucinating LLM.

Ignoring everything wrong with it and just taking the core claims into account:

With WPA2, the passphrase with which you configure your connection needs to first be hashed into a 64 character key.

Optionally. See the 802-11-wireless-security.psk description on this page.

The GUI does not properly configure the connection protocol to be used.

It leaves the value unset which allows WPA and WPA2/RSN connections. The step in the article just disables the more secure of the options (WPA2/RSN) without explaining why? Isn't that the opposite of what the article claims to accomplish?

The GUI does not properly configure the security algorithm to be used.

It follows the recommendation from the documentation - "for maximum compatibility leave this property empty". This choice confuses me a little, because as far as I understanding the ability to choose between CCMP and TKIP is a feature of WPA2/RSN, whereas WPA (forced in the previous step) is locked to the less secure TKIP.