1179356 - Randomize default wifi sharing password

Status: RESOLVED WORKSFORME

(Firefox OS Graveyard :: General, defect)

Description

[Fred Wenzel [:wenzel]]

Wi-Fi sharing ship with a default SSID and password.

We should probably randomize (part of) the password at first-run, so that not all fresh, unchanged FxOS devices have the same, known, Wi-Fi sharing password.

Reasoning: By providing a default value (rather than making the default settings invalid, which would force the user to choose) we are inviting people to read, but not change that value. Therefore, we should err on the side of "not too insecure by default" and randomize the value reasonably.

Comment 1

[:Atoll]

> We should probably randomize (part of) the password

Randomizing part of the SSID is *also* essential. See also (semi-related, but non-dupe) bug 1179341.

Comment 2

[Daniel Holbert [:dholbert]]

(In reply to Fred Wenzel [:wenzel] from comment #0)
> We should probably randomize (part of) the password at first-run, so that
> not all fresh, unchanged FxOS devices have the same, known, Wi-Fi sharing
> password.

Are you sure we don't already do this? I'm pretty sure I've ended up with a different Wi-Fi sharing password each time I've flashed my phone.  It seems to be of the form [random-city-name][random-4-digit-number].

Comment 3

[Fred Wenzel [:wenzel]]

(In reply to Daniel Holbert [:dholbert] from comment #2)
> Are you sure we don't already do this?

Nope, I am not sure. But I also have no idea how to verify, so I filed.

Comment 4

[Michael Henretty [:mikehenrty][:mhenretty]]

Yes, we do already do this. Maybe not the most secure scheme, but better than nothing :)