Home
JAQForum Ver 24.01
Log In or Join  
Active Topics
Local Time 06:01 29 Nov 2024 Privacy Policy
Jump to

Notice. New forum software under development. It's going to miss a few functions and look a bit ugly for a while, but I'm working on it full time now as the old forum was too unstable. Couple days, all good. If you notice any issues, please contact me.

Forum Index : Microcontroller and PC projects : Security risk using pico w?

Author Message
andreas

Senior Member

Joined: 07/12/2020
Location: Germany
Posts: 209
Posted: 10:58am 11 Apr 2023
Copy link to clipboard 
Print this post

Hello,

I have two raspberry pi pico w using webmite (RC3) and both show the same mac address (!) in the fritzbox listing.

Fritzbox has a security setting not to allow new wireless clients, when they are not registered before. I'm using this setting as additional security and was astonished that the second pico could access the wlan without extra registration.

If the mac address is the same on both devices, the fritzbox is regarding both devices as registred and allows the connection.

But then anybody could connect his pico to my wlan, if he knows wireless key.

Is this a bug or a feature?  

-andreas
 
matherp
Guru

Joined: 11/12/2012
Location: United Kingdom
Posts: 9139
Posted: 11:07am 11 Apr 2023
Copy link to clipboard 
Print this post

I've got two and they have different MAC addresses

WebMite 28:cd:c1:07:8e:b1 192.168.1.127
WebMite 28:cd:c1:00:49:78 192.168.1.111
 
andreas

Senior Member

Joined: 07/12/2020
Location: Germany
Posts: 209
Posted: 11:15am 11 Apr 2023
Copy link to clipboard 
Print this post

  matherp said  I've got two and they have different MAC addresses

WebMite 28:cd:c1:07:8e:b1 192.168.1.127
WebMite 28:cd:c1:00:49:78 192.168.1.111


funny I have two with this mac 28:CD:C1:00:A3:93




oh!!! I see the mac addresses are not equal! my mistake!

-andreas
Edited 2023-04-11 21:22 by andreas
 
matherp
Guru

Joined: 11/12/2012
Location: United Kingdom
Posts: 9139
Posted: 11:17am 11 Apr 2023
Copy link to clipboard 
Print this post

According to your post they are different A3:93 and a3:29
 
andreas

Senior Member

Joined: 07/12/2020
Location: Germany
Posts: 209
Posted: 11:23am 11 Apr 2023
Copy link to clipboard 
Print this post

  matherp said  According to your post they are different A3:93 and a3:29


yes! thank you! but it was registered and I didn't register the second one.
Edited 2023-04-11 21:25 by andreas
 
pwillard
Senior Member

Joined: 07/06/2022
Location: United States
Posts: 292
Posted: 12:07pm 11 Apr 2023
Copy link to clipboard 
Print this post

Wouldn't that indicate a bug in your Fritzbox?
 
andreas

Senior Member

Joined: 07/12/2020
Location: Germany
Posts: 209
Posted: 04:35pm 11 Apr 2023
Copy link to clipboard 
Print this post

  pwillard said  Wouldn't that indicate a bug in your Fritzbox?


My assumption is, that I have registered the pico sometime before when I was experimenting with that device and forgot it. So the fritzbox did remember that mac address.

By the way, currently I'm testing "refresh" as part of the "index.html" file header. The ip address is the address of the pico w and the 60 is 60 seconds to reload the page. So when I'm showing a changing value like pin(TEMP) it will update itself every 60 seconds.


<meta http-equiv="refresh" content="60; URL=http://192.168.178.74/">


<html>
<head>
<title>WebMite Server</title>
<meta http-equiv="refresh" content="60; URL=http://192.168.178.74/">
<link rel="icon" type="image/x-icon" sizes="16x16" href="data:image/png;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAIAAAAAEABAAAAAAAgAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAP//ADMA/wD/AAQAFf8AAAIACABZAP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAUAVQBVAAUABQUABQBQBVAFBQAFAFAFBQAAVQBVAAUFBQAAAAAABVAAAAAAAAAAAAAAAAAAACREMzERAAAAJkRDMxEQAAAmZEQzMREAAAZmREMzERAAAGZkRDMxEQAABmZEQzMREAAAZmREMzERAAAGZkRDMxH//wAAuzMAALrtAACa7QAArzMAAKv/AACf/wAA//8AAAA/AAAAHwAAAA8AAIAHAADAAwAA4AEAAPAAAAD4AAAA" />
</head>
<body>
<h1>{mystring$}</h1>
<p>This is running on a Raspberry Pi Pico W</p>
<img src="picture.png" alt="Raspberry Pi Pico W">
<p>Temperatur: {myfloat!}</p>
<p>Datum & Uhrzeit: {DateTime$(now)}</p>
<br>
</body>
</html>
 
Hans

Senior Member

Joined: 18/10/2022
Location: Canada
Posts: 116
Posted: 07:08pm 11 Apr 2023
Copy link to clipboard 
Print this post

  andreas said   yes! thank you! but it was registered and I didn't register the second one.


MAC addresses are unique and set by the hardware manufacture. The 1st set of numbers can be looked up on line as to who the manufacture is at MAC address vendor lookup This is not something that can typically be changed or assigned to another device.

I still remember wheyyyyyyyyyy back in time you used to be able to assign your own MAC addresses to certain network cards, what a bad idea that was!

All this to say, it's not Peter's programming.

Hans ...
 
andreas

Senior Member

Joined: 07/12/2020
Location: Germany
Posts: 209
Posted: 07:11pm 11 Apr 2023
Copy link to clipboard 
Print this post

  Hans said  
  andreas said   yes! thank you! but it was registered and I didn't register the second one.


MAC addresses are unique and set by the hardware manufacture. The 1st set of numbers can be looked up on line as to who the manufacture is at MAC address vendor lookup This is not something that can typically be changed or assigned to another device.

I still remember wheyyyyyyyyyy back in time you used to be able to assign your own MAC addresses to certain network cards, what a bad idea that was!

All this to say, it's not Peter's programming.

Hans ...


you are right I already said: "oh!!! I see the mac addresses are not equal! my mistake!"
 
Hans

Senior Member

Joined: 18/10/2022
Location: Canada
Posts: 116
Posted: 08:38pm 11 Apr 2023
Copy link to clipboard 
Print this post

  andreas said  
you are right I already said: "oh!!! I see the mac addresses are not equal! my mistake!"



Sorry, my apologizes, I missed that!  

Hans ...
 
Print this page


To reply to this topic, you need to log in.

© JAQ Software 2024