What is 'Wi-Fi auto-join' and what security risk does it create for mobile devices in public areas?
- A.Wi-Fi auto-join is a feature that automatically optimizes Wi-Fi channel selection
- B.Wi-Fi auto-join requires the user's fingerprint for each new connection attempt
- C.Wi-Fi auto-join automatically connects to previously remembered networks by matching SSID; an attacker can create a hotspot with the same SSID as a popular network (e.g., 'airport_wifi') in any location, causing devices to silently join the rogue network for MITM attacks
- D.Wi-Fi auto-join only activates when the device is on a charge to prevent battery drain
Why C is correct
Both Android and iOS maintain a list of 'trusted' SSIDs from previous connections. Auto-join reconnects without user interaction. An attacker with a strong signal broadcasting a common SSID (home network, corporate network, coffee shop) can hijack the connection. Mitigation: iOS introduced 'Ask to Join Networks' and 'Auto-join Hotspot' controls; Android allows per-network auto-join disabling. Enterprise MDM can push Wi-Fi profiles with specific BSSID restrictions.
Know someone studying for Mobile Security Fundamentals? Send them this one.