Hi VF,
Thanks for message. I share your frustration with Microsoft and on many occasions I have been left frustrated as well. But I realised a long time ago that its a simple lack of communication to users and many users have to investigate
and find solutions and explanations themselves. I have investigated and address your concerns below:
‘Again, my concern is that the list of Networks which appears in the sidebar includes every network within range, and the option to "connect automatically" is selected by default for every network. I would like to know why’
Yes your right, seems stupid to set ‘auto connect’ as default for profiles deliberately set up as ‘OPEN’ which would cause your PC to automatically connect to a potential
black-heart and be compromised because OPEN networks do not require (1) Access Configurations (knowing the SSID) and (2) Authentication (no need for knowing its security SSID encryption password because its already open and your gullible computer will walk
through the open trap door).
’So far, every network that has been identified within range is password protected. Since I do not have the password for any network other than my own, my computer will not actually be able to connect to any of them, even if it does attempt to connect automatically. ‘However, what happens if a non-password protected network appears within range? It would seem that Windows 8 is going to attempt to "connect automatically" to any network it identifies as being within range, regardless of whether I have ever connected to it in the past. If someone with malevolent intent wished to exploit a Windows 8 machine, it would appear that they would only need to set-up a non-password protected wi-fi network and lure every Windows 8 machine within range to connect to it. Or perhaps use something like the WiFi Pineapple device to troll for any Windows 8 machine that will connect to it and effect a Man-In-The-Middle attack. Hopefully you can understand that connecting to an unknown, untrusted network is a bad idea. Windows 8 seems intent to do exactly this by default.
After a lengthy investigation, I am glad to inform you that this security issue was a problem in the past but your Windows 8 machine is well protected from this issue (explained in detail below).
AUTOMATIC CONNECTIONS AND BROADCASTING OR NON-BROADCASTING (HIDDEN) WIFI PROFILES
Hidden networks are termed NON-BROADCASTING networks. The operating protocols of WIFI connections under Windows 8 and higher is that connection is MANUAL i.e you have to deliberately click on a network to connect to it and
re-using this same network is termed AUTOMATIC CONNECTION. In relation to hidden/unsecured/non-broadcasting network profiles, Windows 8 warns you of these in-range/out-of-range unsecured networks by the small ‘shield’ logo (Windows Defender) right next to
the unsecured wifi profile list when you click the ‘Available’ wifi profiles (under SETTINGS). The list of secure profiles list have no shield logo and require you to enter SSID details.
This connection principle works in reverse. Non-broadcast networks (hidden) do not broadcast their SSID, so they do not appear in the list of available wireless networks by default on Windows-based wireless clients. Therefore,
users need to know the SSID of hidden networks/profile and create a preferred wireless network with the SSID of the non-broadcast network MANUALLY. After the preferred wireless network has been created with the correct SSID, the Wireless Auto Configuration
facility in Windows will be able to connect to it. Therefore your machine CANNOT connect to a hidden network profile that it does not know about. Its the same for the hidden blackheart, if he wants to connect to your machine then his machine has to send your
machine a Beacon Frame message with a NULL SSID value, when your machine receives this then your machine adds this blackheart profile to its wireless ‘Available’ network list with the title “Unnamed Network” or “Other” because the Blackheart has given his
profile a NULL SSID. However, Windows Defender then attaches its small ‘shield’ next to it warning you this is unsecured network.
Getting back to your issue, at this point WINDOWS 8 gives you 2 OPTIONS which is normal ‘CONNECT’ button (this is a ONCE-ONLY CONNECTION and the profile your connecting too will not be remembered) or ‘AUTOMATICALLY CONNECT’
which saves the profile as the MAIN wifi network you want to connect to FOREVER including at START-UP (until you change to another). Microsoft changed Windows 8 so that it maintains an
ordered list of your preferred networks based on yourexplicit connect and disconnect actions, as well as the network
type. For example, if you manually disconnect from a network, Windows will no longer automatically connect to that network. If you decide to connect to a different network (while you are connected to a network), Windows will move the new network higher in
your preferred networks list. Windows automatically learns your preferences in order to manage this list for you. Therefore Windows will only ever connect to a network that you have deliberately
connected to before, nut only at your command. If you do end up seeing this sneaky pofile then use the NETSH commands I posted to exterminate it.
Therefore the ‘CONNECT AUTOMATICALLY’ is Microsoft geek language for connect by me MANUALLY choosing this network and REMEMBER this network as my main NETWORK, while CONNECT is connect by me MANUALLY but ONLY ONCE AND DO NOT
SAVE THIS PROFILE, and not its ordinary English language AUTOMATICALLY CONNECT (as you have correctly reasonably interpreted and caused you no end of worries).
WHAT IF I MANUALLY (AUTOMATICALLY) CONNECT TO AN UNSECURED NETWORK IN FUTURE?
Even before you can connect to any other network (including your smartphone to access it as a hotspot), Windows enables you to prevent any NETWORK SHARING. If you have set up your machine not to SHARE, then no other network
(both PRIVATE [OTHER DEVICES IN YOUR HOUSE] AND PUBLIC) can access your files or send you files with malicious attachments/code because blocking sharing will force other USERS/BLACKHEARTS trying to access your files to know the USERNAME and PASSWORD you have
set. Each Windows OS (7, 8.0, 8.1 ect) has different ways of going about this but it all comes under NETWORK AND SHARING CENTRE and all relates to the issue of NETWORK DISCOVERY options and you should TURN-OFF ALL PUBLIC FILE SHARING AND ALL PUBLIC DISCOVERY
OF YOUR NETWORKS AND TURN ON 128-BIT ENCRYPTION OF ANY OF YOUR SENDING WI-FI PACKETS. Check to see if your current active network is PUBLIC or PRIVATE:
a. Open ‘Network and Sharing Centre’.
b. Look at your current active network (WIFI adaptor and your ISP provider name) and it should say clearly PUBLIC or PRIVATE.
C. If PRIVATE then file sharing and access to your machine is only possible on your own PRIVATE network. If PUBLIC then you have switched on NETWORK DISCOVERY and other public devices and networks can see and discover yours.
ROUTER IS ADVERTISING ITS SSID?
You probably already know how to stop it but for others then access its settings and uncheck ‘BROADCAST SSID’ by typing 192.168.1.0 or 192.168.1.1 in your Browser. And while your at it change the CHANNEL NUMBER to something
else that your neighbours are not using.
BUT MY MACHINE IS ROAMIING AND LOOKING FOR OTHER NETWORK PROFILES TO CONNECT TO?
Only if you DO NOT HAVE AN ACTIVE CONNECTION. Once you click and are connected to your home Router then that is the end of the road for roaming connections because WIndows assigns the current active network profile as the PREFERRED’
network and will ALWAYS connect to this at start-up and only list other profiles in case you change your mind (showing you which ones are in-range and secure/unsecure). Every network you connected to is SAVED in your machines PROFILE list and the ones it has
connected to BEFORE will always be available for AUTOMATIC CONNECTION because you have entered these profiles SSID NAME AND PASSWORD, BUT ONLY IF YOUR MAIN PREFERRED CONNECTION IS UNAVAILABLE (hone wifi). However, even if yours is not available and your Machine
lists the ones you have connected to before then you still need to click on CONNECT AUTOMATICALLY to connect to them (if your going to use this connection frequently such as a Hotel) or click CONNECT (if its a one-off connection). Once you connect to these
others and do not want to connect again then go to ‘MANAGE WIFI’ click on ‘FORGET THESE PROFILES’ and they will be removed from saved list (that is why the list of profiles you have NOT CONNECTED TO DO NOT APPEAR under this list (i.e. your neighbor wifi profiles,
only the ones you have connected to).
BUT WHAT ABOUT WHEN I AM NOT AT HOME AND MY MACHINE IS FLOODED WITH UNSECURED NETWORK PROFILES HARASSING MY MACHINE?
Well for different OS there are different methods, but for WINDOWS 8 then do following steps (because I am responding VF who WAS using Windows 8):
- Open the Control Panel.
- Open “Network and Internet”.
- Select “Intel ProSet/Wireless Tools”.
- Select “Settings…” under “Intel Wifi HotSpot Assistant”.
- Remove all check boxes.
- Close out of the dialog box.
We have all been victims of Microsoft's incorrect geek terminology.
Hope this helps.
Many regards.