Author |
Message |
Neal
Forum Moderator
Joined: 18 Feb 2004
Posts: 7432
|
Posted:
Fri Jun 18, 2004 3:23 pm |
|
i moved house today, and was looking forward to a good few weeks with no internet.
But wouldnt you know it, someone within about 100 metres of me has an unsecured wireless network!
So here I am. Quality. |
|
|
|
|
chamadyelook
Site Subscriber
Joined: 04 Mar 2004
Posts: 196
|
Posted:
Fri Jun 18, 2004 4:40 pm |
|
Sweeeeet!!! noo that was a stroke of donald duck was it not nealy boy, oh and happy new hoose |
|
|
|
|
Chet T16
Retroholic
Joined: 12 Feb 2004
Posts: 5685
|
Posted:
Fri Jun 18, 2004 5:22 pm |
|
lmao thats class, i see you're still online too |
|
|
|
|
JB
Mr Quoter-vator
Joined: 16 Feb 2004
Posts: 7405
|
Posted:
Sat Jun 19, 2004 3:33 am |
|
so do they know u r using it? cant they tell? |
|
|
|
|
christian
Level 6 User
Joined: 10 Apr 2004
Posts: 150
|
Posted:
Sat Jun 19, 2004 5:56 pm |
|
if they can't even protect their WLAN, they won't surely be able to tell who else is using it |
|
|
|
|
Evo
Level 4 User
Joined: 10 Mar 2004
Posts: 89
|
Posted:
Sun Jun 20, 2004 5:19 am |
|
Wireless security is a feckin' knightmare. Having to do loads on it at work, got our ids stuff up and running along with the radius server but still not happy with it |
|
|
|
|
Neal
Forum Moderator
Joined: 18 Feb 2004
Posts: 7432
|
Posted:
Sun Jun 20, 2004 5:37 am |
|
i just use a MAC table on my access point. Noone can use my connection unless they give me their MAC address and I add it to my access point. 100% secure, no messing.
Although i appreciate that what youre talking about is a completely different issue. |
|
|
|
|
Mad Pierre
Level 10 User
Joined: 18 Jun 2004
Posts: 614
|
Posted:
Sun Jun 20, 2004 1:20 pm |
|
|
|
|
Soneji
Forum Moderator
Joined: 16 Feb 2004
Posts: 1356
|
Posted:
Sun Jun 20, 2004 6:24 pm |
|
Easiest thing you can do really, you can go on a 'wardrive' and float around the city seeing what something like airsnort will pick up... |
|
|
|
|
Evo
Level 4 User
Joined: 10 Mar 2004
Posts: 89
|
Posted:
Mon Jun 21, 2004 2:36 pm |
|
Neal 19 16v wrote: |
i just use a MAC table on my access point. Noone can use my connection unless they give me their MAC address and I add it to my access point. 100% secure, no messing.
Although i appreciate that what youre talking about is a completely different issue. |
100% secure? lol
By their very nature you are able to change a wireless card mac address. So someone with a tool like airsnort and some packet capture softwre like etherel can grab the mac address of a device connected to your AP, change its mac address to that same one. Then send a dissociation packet (I know I cannot spell) to the AP to kick the genuine machine off (2 machines with same nic cannot connect iirc) then connect away as you have an authentiated MAC.
OR you set your mac to that of the access point, the client thinks you are the ap and traffic gets routed through you (MITM attack).
Wireless is by no means secure, WPA with canging keys is the best bet atm, but even the home version of this which uses just one single passphrase is not great, its just one password that is stopping someone from accessing you network.
Er ok I will stop now.
House in the road next to me has an unsecure AP, I can sit in the car with a laptop and browse away. Also a big consultancy firm Pell Frishman had an unprotected AP in the ofice next to our building. We were able to connect to the network by standing otuside their front door, but that's where we left it. I didn't have a dhcp server running so couldn't pick up an ip automatically, didn't want to hang about and get a valid ip sorted as we had proved our point |
|
|
|
|
Soneji
Forum Moderator
Joined: 16 Feb 2004
Posts: 1356
|
Posted:
Tue Jun 22, 2004 2:50 am |
|
Did you mark the open network with spray paint? thats what true 1337 folk do! |
|
|
|
|
Evo
Level 4 User
Joined: 10 Mar 2004
Posts: 89
|
Posted:
Tue Jun 22, 2004 11:28 am |
|
lol warchalking
Think my boss kindly told them to pull their act together |
|
|
|
|
|