Author Topic: Unprotected Wireless Lans? (Read 47,019 times)

jgpaiva · « **Reply #25 on:** April 05, 2006, 10:03 AM »

Quote from: f0dder on April 05, 2006, 09:39 AM

WEP passwords can be bruteforced in a reasonable amount of time... but you don't even have to do that to gain access, afaik... Something about packet injection that I haven't bothered to look into.

Yes, f0dder, that's one of the main reasons i made this thread, to have an idea of the real dangers of having such network.
But the thing is: you have to do some digging to crack a wep network (i've made some without success). Another thing is that my router is quite bad, it doesn't even cover my house deccently, which means that it doesn't cover anything more than my neighbours' appartments. And i know every of my neighbours, and they're all old people that i don't think even have a computer at home

So, i feel quite secure, i just keep the password on the router for safe-keeping.

Carol Haynes · « **Reply #26 on:** April 24, 2006, 09:18 AM »

I quite liked this:

jgpaiva · « **Reply #27 on:** April 24, 2006, 09:24 AM »

Quote from: Carol Haynes on April 24, 2006, 09:18 AM

I quite liked this:

Nice one, Carol

wr975 · « **Reply #28 on:** April 24, 2006, 10:02 AM »

Quote

have a clue about WLAN's today use to secure their wireless networks (WPA with AEP/TKIP).

I read somewhere about someone who said WPA/TKIP is insecure and can be broken (not brute force)... After a long read: TKIP is insecure with short passwords only. $:-\$

I'm using WPA/AES anyway, but I took the recommendation to use really strong passwords generated by http://www.grc.com/passwords

I've also configured and activated the MAC-Filter; network cards which are allowed. I know it's no problems for real hackers, but good enough for script kiddies.

And every some time I check for firmware updates. This shouldn't be necessary, but the admin log-on tells the name of the router (I wish it wouldn't do so). Any possible hacker sees the router I use, researches possible exploits and he's in...

f0dder · « **Reply #29 on:** April 24, 2006, 10:09 AM »

Trust In Steve - heh $:-\$

wr975 · « **Reply #30 on:** April 24, 2006, 10:22 AM »

No, No.. it wasn't Steve who wrote the thing about TKIP. It was an article I found at digg.com some months ago.

f0dder · « **Reply #31 on:** April 24, 2006, 10:24 AM »

Well, I mean his passwords page. He doesn't document the algorithm(s) he use, nor how he gathers entropy...

wr975 · « **Reply #32 on:** April 24, 2006, 10:38 AM »

I see. In the text he's writing something about server noise, but I guess he won't tell all his "secrets".

f0dder · « **Reply #33 on:** April 24, 2006, 10:44 AM »

He says "deterministic binary noise" - deterministic means there's no real source of randomness, so nothing fancy probably. The fact that he always uses buzzwords and don't disclose anything makes him untrustworthy to me, especially since it's long proven that security through obscurity never works.

IVOLGA · « **Reply #34 on:** April 24, 2006, 06:08 PM »

Жуть какая, нихрена не понимаю, но оч хочу золотой ключик от каморки папы Карло....

. Целую, Ваша на веки . Птичка, которая на проводе.

wr975 · « **Reply #35 on:** April 24, 2006, 07:21 PM »

Quote from: IVOLGA on April 24, 2006, 06:08 PM

Жуть какая, нихрена не понимаю, но оч хочу золотой ключик от каморки папы Карло.... . Целую, Ваша на веки . Птичка, которая на проводе.

Английский язык, пожалуйста?

(Used an online dictionary)

Carol Haynes · « **Reply #36 on:** April 24, 2006, 07:32 PM »

According to Babelfish that translates to:

Quote

Horror what, nikhrena I do not understand, but och I want gold small key from the closet of dad of Porta..... Tsela, Vash to the eyelids. Bird, which on the wire.

English, if you please?

Sorry - none the wiser ... so much for automated translations!!!

app103 · « **Reply #37 on:** April 24, 2006, 07:49 PM »

Quote from: IVOLGA on April 24, 2006, 06:08 PM

Жуть какая, нихрена не понимаю, но оч хочу золотой ключик от каморки папы Карло.... . Целую, Ваша на веки . Птичка, которая на проводе.

which translates to...

"Horror what, нихрена I do not understand, but оч I want gold ключик from a closet of daddy Karlo..... The whole, yours on веки. A birdy, which on a wire. "

I used the same translator

I think that means they are in love with Cody? A marriage proposal, maybe?

mouser · « **Reply #38 on:** April 24, 2006, 08:06 PM »

heheheheh

jgpaiva · « **Reply #39 on:** April 24, 2006, 10:14 PM »

Quote from: app103 on April 24, 2006, 07:49 PM

I think that means they are in love with Cody? A marriage proposal, maybe?

Would he be answering to my signature?

rjbull · « **Reply #40 on:** April 28, 2006, 01:09 PM »

Quote from: moerl on March 30, 2006, 12:22 AM

I find it strange Netstumbler lists ALL protected WLAN's as WEP-protected

Have you tried Boingo? It's really a tool for finding WiFi hotspots, but apparently contains a signal strength meter. It's free, but I think the install tries to sign you up to their network. I haven't tried either program, but was just wondering.

Edvard · « **Reply #41 on:** April 28, 2006, 03:38 PM »

I thought he was giving an example of a secure password

gjehle · « **Reply #42 on:** May 05, 2006, 01:17 PM »

none, mine is save, and i disabled my cousin's wifi next door
and i live pretty much in the country side

dancin39 · « **Reply #43 on:** May 16, 2006, 05:30 AM »

:huh:Don't understand why anyone with wireless would not secure it. dumb...... dumb.....
Thank gawd mine is secured.

f0dder · « **Reply #44 on:** May 16, 2006, 09:43 AM »

Quote from: dancin39 on May 16, 2006, 05:30 AM

:huh:Don't understand why anyone with wireless would not secure it. dumb...... dumb.....
Thank gawd mine is secured.

Because wireless today is so easy to setup that any Joe User can do it... but the accesspoints usually come without preconfigured security, because that would make them harder to set up. And well, once connected and working, why would Joe User need to read further in the manual?

Edvard · « **Reply #45 on:** May 16, 2006, 08:55 PM »

I have heard rumors of freaky distances connecting to wireless lans... like 3-5 miles connecting to a University hub. Anybody heard of that?

stansrailpix · « **Reply #46 on:** May 17, 2006, 04:25 AM »

I can usually see 2 or 3 networks that have no protection at all. One was my neighbor, who I helped encrypy.

OldElmerFudd · « **Reply #47 on:** June 25, 2006, 08:37 PM »

I have several machines/peripherals tied together in a partly wired and mostly wireless setup. Except for a couple of times, Bite-sized trouble and I live just far enough away from other houses in a residential area that we've never run into the issue. Our stuff's very secure, so it's not a problem for us.
I've never gone looking for any wlans with the laptop; just not my style.

OEF

gsull · « **Reply #48 on:** June 26, 2006, 08:14 AM »

Quote from: dancin39 on May 16, 2006, 05:30 AM

:huh:Don't understand why anyone with wireless would not secure it. dumb...... dumb.....
Thank gawd mine is secured.

Because some of us actually know what we're doing, and want to share with people who aren't able to afford internet, or just want to google something on their pocketpc as they're walking by.

Quote from: Edvard on May 16, 2006, 08:55 PM

I have heard rumors of freaky distances connecting to wireless lans... like 3-5 miles connecting to a University hub. Anybody heard of that?

I think the record, unpowered, is something insane like 70 miles. Realistically, 5 miles or less should work without a hitch provided you have good line of sight. I set up streaming video for a surveillance station, streaming 16 video cameras 24/7, all the way accross a small city. The station was on a hill, and the buildings they were watching had roofs visible from the hill. We used some small antennas to insure a stable connection, but it was pretty stable with 2 off-the-shelf access points.

rjbull · « **Reply #49 on:** June 26, 2006, 09:41 AM »

Quote from: gsull on June 26, 2006, 08:14 AM

Quote from: dancin39 on May 16, 2006, 05:30 AM
:huh:Don't understand why anyone with wireless would not secure it. dumb...... dumb.....
Thank gawd mine is secured.

Because some of us actually know what we're doing, and want to share with people who aren't able to afford internet, or just want to google something on their pocketpc as they're walking by.

That's public-spirited, but dangerous. I'm in the UK, which is currently paranoid about paedophiles. Such people could download kiddie porn through your unsecured connection - and the police would trace it to you, and it's your life and reputation that would be destroyed. Over here, it's not worth taking the risk of an unsecured connection.