Slashdot Mirror


Unfinished Windows 7 Hotspot Feature Exploited

An anonymous reader writes with this excerpt from Engadget: "It wasn't all that long ago that Microsoft was talking up the Virtual WiFi feature developed by Microsoft Research and set for inclusion in Windows 7, but something got lost along the road to release day, and the functionality never officially made it into the OS. As you might expect with anything as big and complicated as an operating system though, some of that code did make it into the final release, and there was apparently enough of it for the folks at Nomadio to exploit into a full fledged feature. That's now become Connectify, a free application from the company that effectively turns any Windows 7 computer into a virtual WiFi hotspot — letting you, for instance, wirelessly tether a number of devices to your laptop at location where only an Ethernet jack is available, or even tether a number of laptops together at a coffee shop that charges for WiFi."

47 of 234 comments (clear)

  1. It'll be gone shortly by KeithH · · Score: 2, Interesting

    If these are undocumented APIs, then you can bet that they'll be removed or otherwise disabled in the first service pack.

  2. Re:Wow by RichardDeVries · · Score: 4, Informative

    Exactly. I can do this with Ubuntu, too.

    --
    Error 001
    Security Scan and Virus Detection do not work with your operating system.
  3. Bloat... by torkus · · Score: 4, Funny

    Not surprising really. The secret formula for CokeCola is probably hidden in there too.

    I wonder how many 'libraries of congress' could fit in the space occupied by unused but deployed windows code.

    --
    You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    1. Re:Bloat... by Anonymous Coward · · Score: 2, Insightful

      You non-haters need to start hating more.

    2. Re:Bloat... by jbezorg · · Score: 2, Insightful

      And if Microsoft and Windows are one of your biggest concerns in the World, you really need to get a grip and a life.

      Where does feeling compelled to pontificate about personal philosophy on the internet fit in on that scale?

      --
      I've lost all my marbles except one & It's fun to test angular & centripetal acceleration in my skull
    3. Re:Bloat... by jazzduck · · Score: 2, Interesting

      And if Microsoft and Windows are one of your biggest concerns in the World, you really need to get a grip and a life.

      I dunno, I think that if Windows is your biggest concern, you've clearly figured out all the other more important aspects of life, and therefore you've probably got a better grip on the world.

      ;-)

      --
      A cat is no trade for integrity!
  4. Stealing by Reason58 · · Score: 5, Funny

    or even tether a number of laptops together at a coffee shop that charges for WiFi

    That coffee shop has to pay for its connection, and bandwidth is a limited resource. Is Engadget going to instruct us on how to distract the employees while you pour free coffee into your thermos too?

    1. Re:Stealing by StormyWeather · · Score: 3, Funny

      Low tech solution. Show em yer boobies.

      If they are man boobies, it might even work better as a distraction, but the lawsuit for emotional scarring will probably be more than the cup o coffee.

    2. Re:Stealing by BarryJacobsen · · Score: 2, Funny

      or even tether a number of laptops together at a coffee shop that charges for WiFi

      That coffee shop has to pay for its connection, and bandwidth is a limited resource. Is Engadget going to instruct us on how to distract the employees while you pour free coffee into your thermos too?

      Don't be silly - Engadget would never support you distracting an employee to steal coffee! The review for the device that distracts the employee for you is due any moment now, though.

    3. Re:Stealing by Duradin · · Score: 2, Insightful

      Bandwidth isn't the only limited resource. Physical space is a limited resource.

      That "overpriced" coffee includes the rent for the space (resources) you take up. If the place is charging for WiFi then it is because too many people were ordering a single small coffee of the day and then plunking themselves down for the day with their laptop and not ordering anything else.

      If you like the coffee house enough to go there and make use of its services you should also be willing to pay for them. Really good coffee houses are hard to find and its a shame when a group of freeloaders disrupts things so that enough of the paying regulars go somewhere else and the place goes under.

      When enough of the WiFi leeches become paying customers, the WiFi might become free again. If something is annoying for the regulars a good manager would want to change that, if it was affordable to do so. Pay WiFi is annoying to everybody.

      "I like making use of your establishment but I don't feel the need to contribute towards its ongoing operations." seems to be all too common of an attitude these days.

    4. Re:Stealing by Dogtanian · · Score: 5, Insightful

      Is Engadget going to instruct us on how to distract the employees while you pour free coffee into your thermos too?

      Hrm... Bad analogy.

      The Cofeeshop already sold you the coffee (bandwidth) by the temporary key and you are simply pouring it in someone else's cup free of charge by running windows 7.

      Another bad analogy. Okay, my turn to play the silly moral analogy game...

      This is more akin to visiting a place that gives free refills, and you constantly pouring it in someone else's cup, then doing the same for all your friends, in the process using far more coffee than you would reasonably have drunk yourself. You know damn well that wasn't the deal that was being offered. (*)

      You're ultimately gaming the system- regardless of what "agreement" you think you have with them, it's probably against the spirit of the deal. Doing this type of thing with (e.g.) small businesses that aren't too assholish is ultimately what forces them to include irritating small-print restrictions on such services which I'm willing to bet people would be the first to whine about.

      (*) Please *don't* say "that was the agreement I get an hour's free Internet with my $1.50 coffee, it's mine, I can do what I like with it, their bad business model isn't my problem". There probably wasn't an "agreement" in that much detail- lots of thing in a given society function on implicit understanding of how they work (e.g. you don't get arrested for trespassing if you enter some random shop because any reasonable person would say that's how shops work). Or they may well have some small print in some terms and conditions that you (understandably) didn't want to read before you took up their offer. Or whatever... even if it was "legal", see the final paragraph above.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    5. Re:Stealing by Duradin · · Score: 3, Insightful

      "Um, if the coffee house let you use wifi all day after purchasing a single item, what is wrong with taking advantage of that? The coffee house goes under? So what, it was a bad business plan then and should be left to die."

      This is why we can't have nice things.

      "Ya right, like corportations aren't trying to screw you out of every cent possible either. Turn about is fair play you know."

      Not every business is a soulless corporation... Though behavior like that will be sure to leave the big corps as the only ones left standing.

  5. Re:Wow by fedcb22 · · Score: 2, Informative

    Why set it up as adhoc? If you have a decent card you can put it into master mode and broadcast like an AP.

  6. Does it work with any wifi card?? by xtracto · · Score: 2, Interesting

    I read the article and it does not make clear if it will work with any card.

    I ask this because I was looking to do this some time ago (I want to connect my DS and Wii to internet using my existing PC as an access point) and, although there was some software (now discontinued) that allowed you to do that on WIndows, and on Linux you had to spend your time with ifconfig and whatnot (it was never clear for me, but the first step was to change your wifi card to AP mode).

    Thus I wonder if this Vista feature would make it possible use the computer as an AP with all types of wireless cards.

    --
    Ubuntu is an African word meaning 'I can't configure Debian'
  7. Re:just like.. internet sharing by Anonymous Coward · · Score: 4, Informative

    No. OSX does not allow you to use a single wireless card for both 1) connecting to a wireless network, and 2) broadcasting itself as a hotspot.

    Windows has had Internet Sharing since the 90's (oh dear, did Apple not invent that feature?!). The new feature here is virtualizing the wireless card so it behaves as though it's two wireless cards. Try that on any version of OSX and let me know how it goes.

  8. Re:just like.. internet sharing by gabebear · · Score: 5, Informative

    Is that similar to the Internet Connection Sharing that Windows has had since (at least) Windows 95?

    Yes and no, Windows ICS is only DHCP/NAT software. OSX Internet Sharing also allows you to configure your Wifi card into access point mode. Connectify is promising to allow you to run Windows wifi cards in access-point mode WHILE using it in regular structured mode... which seems like a dubious claim. The makers of Connectify haven't yet listed which cards they are going to support.

    In short

    • Windows ICS is just a simple DHCP and NAT server
    • OSX IS is a simple DHCP and NAT server, plus access-point mode supporting WEP
    • Connectify claims to be a DHCP and NAT server, plus access-point mode supporting WPA, plus structured mode
  9. Re:Wow by maxume · · Score: 4, Informative

    It's better than ICS, the host laptop shows up as an access point that the other laptops can connect to (in my experience, connecting to an access point is quite a lot easier than setting up an ad hoc network).

    --
    Nerd rage is the funniest rage.
  10. Re:Wow by gbjbaanb · · Score: 5, Funny

    Why do you need EVDO Broadband to connect with a guy in the back of the bus?

    because you missed it and had to catch the next one?

  11. Standard functionality... by Nethemas+the+Great · · Score: 2, Informative

    This has been standard and expected functionality in Linux for years; practically as long as wi-fi cards have been supported. Why the hell is this news? Microsoft didn't even complete the support, it's a third party hack... This is worse than the claim that Aero Glass was revolutionary.

    --
    Two of my imaginary friends reproduced once ... with negative results.
    1. Re:Standard functionality... by crow · · Score: 3, Informative

      Yes, you can do virtual access points with the Mad WiFi drivers, but I'm not aware of any other drivers that support that. I use this to have my Linux home server provide both a public open network and a private encrypted network with a single physical wireless card.

      But it's certainly not standard functionality, or I could have used any supported WiFi card and not be tied to a specific driver.

  12. Re:Wow by Josh04 · · Score: 2, Informative

    Actually, it does. Loads of wireless cards are capable of being put in AP mode, which is not the same as ad-hoc. This is not different.

  13. Re:Wow by lwsimon · · Score: 4, Informative

    No, ICS sets up an ad-hoc network. This sets the card into master mode *while simultaneously allowing you to send and recieve on another network*.

    It really is pretty cool

    --
    Learn about Photography Basics.
  14. Re:Wow by CrashNBrn · · Score: 5, Informative
    From TFA (reformatting/emphasis mine):

    The resulting Connectify differs from ICS that Windows already supports via an "ad hoc" network connection, which lets several Windows computers share a single connection.
    1) It shows up as a real wireless access point.
    2) ICS returns to default settings every time you shut down a connection.
    3) You can join another wireless network and still run the Connectify Hotspot on the same Wi-Fi card.

  15. Re:Wow by jo_ham · · Score: 5, Informative

    It does indeed show up as an access point.

    On OS X itself (that is set up this way) the Airport icon changes into a base station icon with an arrow to show you the card is running in AP mode instead of ad-hoc wireless network (which is a different icon again) or normal wireless client mode.

  16. Direct Link to Download by ticklemeozmo · · Score: 4, Informative

    They were vigilant about blocking mailinator domains, so if you just want the direct link to download: http://www.connectify.me/a103dk/ConnectifyInstaller.exe Or visit: http://www.connectify.me/thanks.html

    --
    When modding "Informative", please make sure it both has a source and IS actually informative.
    1. Re:Direct Link to Download by daveime · · Score: 3, Informative

      Offtopic I know, but your sig, really ...

      There is a bottle of Coca Cola on my computer desk. There is a 7-month old puppy sitting by my side.

      The fact that the bottle of Coca Cola is on my desk *is* informative. Who's the source, the fucking dog ?

  17. Re:Can someone please tell me.. by dougisfunny · · Score: 3, Funny

    Time zone differences?

    --
    This is not the funny you're looking for.
  18. Re:just like.. internet sharing by maxume · · Score: 2, Informative

    This software is nicer than that, it is using the same wireless hardware to connect to the internet and to offer the access point.

    --
    Nerd rage is the funniest rage.
  19. Re:Internet sharing? by jfim · · Score: 4, Informative

    What is the difference between this and creating an ad-hoc network and enabling internet connection sharing for the physical port in Vista (and XP, and OS X, and Linux)?

    It's an actual access point, not an ad hoc network. My Android Dev Phone 1(which does not support connecting to ad hoc networks) can connect to it.

  20. "Virtual" hotspot? by Captain_Chaos · · Score: 4, Interesting

    Why a "virtual" hotspot? What's virtual about it? If this turns a Windows PC into a Wi-Fi access point, then surely that's a hotspot plain and simple?

    1. Re:"Virtual" hotspot? by Toonol · · Score: 5, Funny

      "Virtual" because it's on a computer, duh. "Cyber" would be an acceptable alternative prefix.

      "2.0" could be added as a suffix, if it used Javascript.

    2. Re:"Virtual" hotspot? by blitzkrieg3 · · Score: 2, Informative

      I think the people who modded this "Informative" are a bit misinformed.

    3. Re:"Virtual" hotspot? by CannonballHead · · Score: 2, Funny

      Online Rich Web Application with Cloud Based Virtual Cyber Hotspot 2.0!

  21. Re:Hey Frank remember this? by Anonymous Coward · · Score: 5, Funny

    you know, when I hear of a windows feature being "exploited" the utilization of a useful feature is not what comes to mind.

  22. Re:Can someone please tell me.. by Kippesoep · · Score: 3, Funny

    Or maybe they're just ahead of their time. This feature is obviously intended for Windows 8 only.

  23. Re:Wow by rvw · · Score: 4, Informative

    Yeah but when you do you cannot connect to another hotspot anymore. And that's what this is about. And this is currently not possible in OSX, and probably not in OS9 (I cannot check that).

  24. Re:Wow by blackraven14250 · · Score: 5, Informative

    This isn't even remotely ad-hoc networking. This is turning a regular computer into an access point. You can also connect to one wireless network, then set yourself up as an access point to that network, which normally would require two separate network cards.

    Mods, please RTFS. People saying "Ad-hoc has been around for years" and similar keep getting all the mod points, even though they're completely missing the point. Apple has something like this since Leopard, not anytime before like everyone here keeps mentioning.

  25. Re:Wow by morgan_greywolf · · Score: 3, Informative

    Yes. You can do this with wicd

  26. Been around since 2005 by modemboy · · Score: 5, Informative

    So this feature was created by Microsoft Research back in 2005, and has been available for download ever since: http://research.microsoft.com/en-us/downloads/994abd5f-53d1-4dba-a9d8-8ba1dcccead7/

    I fail to see how this is news, they included it by default in Win 7 and someone accessed it, yay. This has been doable for 4 years...

    1. Re:Been around since 2005 by binaryspiral · · Score: 3, Funny

      I fail to see how this is news, they included it by default in Win 7 and someone accessed it, yay. This has been doable for 4 years...

      Someone created a free download that put a GUI on the feature that just about any user can figure out... that makes it news.

  27. Clearing the Static by huckamania · · Score: 2, Informative

    The resulting Connectify differs from the Internet connection sharing that Windows already supports via an "ad hoc" network connection, which lets several Windows computers share a single connection. "For one thing, it shows up as a real wireless access point," Gizis said. "Two, Internet connection sharing has issues. It returns to the default settings every time you shut down a connection. And three, you can join another wireless network and still run the Connectify Hotspot on the same Wi-Fi card."

    One application came immediately to mind, Gizis continued. "You're sitting in a coffee shop that charges you for a wireless connection. With Connectify, I can pay for that connection, and still have all my other devices, like my iPhone, connected to the Internet."

  28. Re:just like.. internet sharing by jazzduck · · Score: 2, Insightful

    It's odd you should say this, because I've had a Windows guru/sysadmin try several times to get this working (with his Dell running XP), and every time he's given up after about 45 minutes of messing with configuration settings. I myself tried it on both of my work-issued PCs (an HP and a Lenovo, both running XP) and found it completely impossible. Of the many Windows users I know, none have ever successfully used their laptop as an AP or a reverse bridge (providing connectivity over ethernet from a single wireless connection).

    Therefore, you are either lying, or a statistical anomaly. I trust you're recounting the story accurately, so I'm going to conclude that your success is the exception rather than the rule.

    --
    A cat is no trade for integrity!
  29. Re:Wow by amicusNYCL · · Score: 3, Insightful

    This is not an exploit as in a vulnerability, this is exploiting a feature in the sense of taking advantage of and using it. The story is just that Microsoft released the OS without doing this themselves. It's entirely possible that Microsoft intended to release something down the road that enabled all of this, so it may make sense to ship the OS with most of the base code so that it doesn't need to be downloaded again later.

    According to TFA the lower-level implementation code was there, but the driver-level code had not been finished because of an apparent lack of driver support. The company who finished this feature says that they realized that they already had all of the needed code in their other networking products.

    But, let's be serious, you just wanted to write "M$", didn't you?

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  30. Re:Wow by ProfessionalCookie · · Score: 2, Funny

    Uhhh...yes it does, and always has. Sorry you were living in the stone age ;)

  31. Re:Wow by VertigoAce · · Score: 4, Insightful

    It appears the UI isn't in Windows 7, but the feature is definitely there. If you have Windows 7 with a recent WiFi driver (virtual WLAN support is required for Win7 logo program), just type "netsh wlan start hostednetwork" and it'll create the virtual WLAN. Type "netsh wlan set hostednetwork" to see the options for SSID, passphrase, etc. The documentation for this is on MSDN.

  32. Hardware Supported / Limitations by clyde_cadiddlehopper · · Score: 2, Informative
    This comes from the FAQ at the download site (www.connectify.me)

    "These older devices are known to be compatible:

    Intel 5100/5300 (with latest drivers from Intel's site, version 13.0.0.107)

    Ralink RT2870 (in many 802.11n USB dongles)

    Broadcom 4310-series (in many Dell laptops)

    Realtek RTL8187SE (with the drivers that came with Windows 7)

    D-link AirPlus G DWL-G510 Wireless PCI Adapter (driver version 3.0.1.0)

    Dell 5520 (builtin many Dell laptops)

    Atheros AR5007EG with 8.0.0.238 firmware

    These older devices are known to be incompatible:

    Intel 3945/4965,2200BG (most Intel cards, unfortunately)

    Realtek RTL8187 (like in older 802.11bg USB dongles)

    Zydas ZD1211 (also in 802.11bg USB dongles)

    Broadcom 4320-series (in many Dell laptops)

    Atheros AR9285 (likely others too)

    D-Link AirPlus G DWL-G122

    Mac Book Builtin Broadcom devices"

    --
    Obi-Wan: "I felt a great disturbance in the Force, as if millions of voices suddenly cried out in terror and were sudden
  33. Re:Wow by Anonymous Coward · · Score: 3, Funny

    You have to type cryptic commands into a terminal? Windows isn't ready for the desktop.