MiFi Security Issues Can Reveal User Location

MiFi devices are quite useful, as it allows users to share 3G wireless connections over a Wi-Fi network. Sharing is certainly caring, and everybody loves Wi-Fi, but it seems there MiFi might share information that you might not want to be shared. Folks have managed to identify a flaw in MiFi devices (from both Sprint and Verizon) that could allow attackers to gain access to the GPS location of the device without the user’s knowledge by using a combination of attacks. To make matters worse, the attack does not require authentication, making it a lot easier to exploit. It seems that the attacker can even download the entire device configuration, including clear text credentials, which certainly is something we’d all rather not happen.