A patron complains of a fake hotspot at a library branch. Branches publish “Library-Guest” as the official SSID. What should wireless OSINT start with?
Select an answer to reveal the explanation.
Short Explanation
Before yelling “imposter,” write down what the real library network is supposed to be called. Official names and any public BSSID vendor notes are the baseline. Knocking patrons off Wi-Fi or cloning the SSID is the opposite of OSINT.
Full Explanation
Impersonation findings require a baseline: library-published SSIDs, and public BSSID/OUI details when available, are the first wireless-OSINT inventory before a nearby name is called look-alike or unexpected. Deauthenticating patrons and standing up a competing AP are offensive techniques, not PORP. Substring matches such as “Library” in an SSID do not authenticate a network. The report should cite the official list and the observation date.