this post was submitted on 05 Oct 2023
50 points (90.3% liked)

Privacy

34218 readers
1361 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

can you recommend any (opensource or trusted) android apps to check who's using your wifi? or any cmd prompt code to search on the desktop?

a small doubt: can anyone hack your computer through WiFi? If so, How to prevent that (or) How to take measures after you think you been hacked?

all 22 comments
sorted by: hot top controversial new old
[–] anamethatisnt@lemmy.world 43 points 1 year ago* (last edited 1 year ago) (1 children)

Login to your router or wireless access point and check what devices are connected. Then setup mac adress filtering to improve your security, if you can be bothered to have to add your devices mac adresses manually.

mac adresses are easily spoofed though, so it isn't foolproof.

[–] deergon@lemmy.world 17 points 1 year ago (1 children)

Also note that mac addresses can change automatically on iOS, because of the Private Wifi Address feature

[–] exu@feditown.com 19 points 1 year ago

Same on Android, though the default is a random MAC per network/ssid

[–] sokkies@lemmyrs.org 21 points 1 year ago

Just log into your routers admin panel and see if there are any online devices online that arent yours? That would be my goto because then you can just block them from the panel?

otherwise via linux cli you can do arp-scan and youll see online devices in your subnet. Theres also a few options to scan different interfaces

[–] Boring@lemmy.ml 10 points 1 year ago

Checking the router is probably the only way to see if someone is active on your network.

Can anybody hack your computer? No. Most people only know how to run scripts that are known and patched in most operating systems.

There are skilled people who may be able to create an exploit or find a vulnerability in your computer, but they will mostly target businesses or people they know will be worth it to hack, so most likely they won't bother you.

Generally if your on your own WiFi, having a WPA-2+ personal password is enough, but the more paranoid may have an IDS/IPS on their home network.

If your out and about, I'd personally use a VPN. I don't like public ones and like to recommend setting one up on your home WiFi instead.

If you think you've been hacked.. change your passwords and run virus scans. If you still don't feel safe, backup your data and reinstall your operating system.

[–] slazer2au@lemmy.world 7 points 1 year ago (1 children)

Your best bet is to log into your modem and look at the ARP table to see what devices have recently talked on your network, and look at your DHCP pool to see what devices are currently assigned addresses.

can anyone hack your computer through WiFi?

Yes-ish. If you are running out of date installations or have weak user passwords on your PC then a remote compromise can happen.

If you think someone has compromised your wifi, first thing is to change your wifi password and router password. 12 characters including uppercase lowercase letters, numbers and symbols.

[–] Mikelius@lemmy.ml 6 points 1 year ago* (last edited 1 year ago)

I forward all router logs to a syslog server which then parses and alerts me of "unknown Mac addresses" joining the network as soon as even one log shows up. If you have a syslog server and some way to index/parse those logs, that's one way to do it

[–] besmtt@lemmy.world 3 points 1 year ago
[–] possiblylinux127@lemmy.zip 3 points 1 year ago* (last edited 1 year ago)

Couldn't you just monitor your WiFi at the router level?

Anyway you can use nmap to scan your entire network to find all connected devices. Its not foolproof but its a start

[–] neosheo@beehaw.org 1 points 1 year ago* (last edited 1 year ago)

You can use arpwatch. It reports new mac addresses on a given network interface.

Here's my setup. I have a raspberry pi running pihole and unbound. I set that raspberry pi as my primary dns on my router. Now in order to use the internet all devices will make dns queries over wifi (you can use a wired pi as well) to the pi which means it will also see all devices using your wifi and notify you when a new one shows up or if an ip changes mac addresses.

Keep in mind these notifications use smtp (email) and you most likely need a mail server to receive them.

I have a matrix server on my network that has postmoogle (email bridge) that can receive the emails from arpwatch and send them to me as a matrix message

[–] ShellMonkey@lemmy.socdojo.com -2 points 1 year ago (1 children)

WiFi is really no less secure than wired aside from being harder to keep people from having physical access, and since most home users don't use any kind of connectivity protection on wired ports it might even be seen as more secure.