Light

Episode #898 Quiz

Wi-Peep
Date: 2022-11-22 | Length: 2 hrs | Episode page at twit.tv

About this episode

Firefox 107 fixed high-severity vulnerabilities; Google paid $391.5 million over misleading location tracking and added deletion controls; Red Hat now signs ZIP release hashes with detached GPG signatures and 4096-bit keys to protect supply-chain integrity; an OMB quantum inventory deadline looms, and Wi-Peep can locate noncooperative WiFi devices via spoofed beacons.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the core mechanism Wi-Peep used to make non-cooperative WiFi devices reveal themselves before localizing them?

Question 1

According to the episode, what was the core mechanism Wi-Peep used to make non-cooperative WiFi devices reveal themselves before localizing them?

It forced clients to reauthenticate by replaying captured WPA handshakes from outside the network It harvested probe requests by waiting for devices to announce themselves during passive scanning It injected a fake beacon imitating the access point to trigger responses from all connected devices It used a directional antenna array to identify devices by triangulating their received signal strength

Question 2: What timing problem did Wi-Peep have to correct in order to estimate distance from ACK round trips?

Question 2

What timing problem did Wi-Peep have to correct in order to estimate distance from ACK round trips?

The beacon interval drifted by several seconds depending on access-point firmware The retransmission timeout changed with channel congestion and had to be learned from traffic volume The round-trip ACK delay was fixed at 1 millisecond and had to be subtracted from each measurement The Short Interframe Space varied in practice from 8 to 13 microseconds instead of the mandated 10

Question 3: What scale and platform did the researchers report for the Wi-Peep hardware itself?

Question 3

What scale and platform did the researchers report for the Wi-Peep hardware itself?

About 10 grams in weight and less than $20 in cost About 100 grams in weight and roughly $200 in cost About 1 kilogram in weight and roughly $2,000 in cost About 50 grams in weight and roughly $500 in cost

Question 4: What did the researchers report about Wi-Peep’s real-world location accuracy and environment?

Question 4

What did the researchers report about Wi-Peep’s real-world location accuracy and environment?

It located WiFi devices across three floors with a median error of 1.2 meters in around two minutes It located WiFi devices across two floors with a median error of 5 meters after manual calibration It located WiFi devices across one floor with a median error of 10 meters in under ten seconds It located WiFi devices only outdoors with sub-meter error after a single pass

Question 5: What mitigation did the episode say would be needed to defeat Wi-Peep-style localization in future WiFi chipsets?

Question 5

What mitigation did the episode say would be needed to defeat Wi-Peep-style localization in future WiFi chipsets?

Forcing all devices to use lower transmit power so timing measurements become unstable Disabling MAC address transmission so devices can no longer answer ACKs Encrypting beacon frames so passive discovery cannot identify devices on the network Randomizing the Short Interframe Space interval so time-of-flight cannot be inferred

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.