Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Secure your wireless networks, or else
ZDNet ^ | Friday, October 15 | Robert Vamosi

Posted on 10/18/2004 4:38:28 PM PDT by gitmo

snip

Fictional scenario

At this year's Black Hat Briefing in Las Vegas, the annual Hacker court involved a scenario where a houseboat sailing up and down the Potomac River was able to use various unsecured wireless networks to access troop deployment plans from the Naval Academy at Annapolis. Presented in the form of a mock court case--including a real live federal court judge--the prosecution laid out how it identified various Web addresses used to launch the intrusion on the Naval Academy. However, when federal agents arrived at the homes matching the Internet addresses, they found the computer hard drives to be lacking any evidence of the crime. All of the homes, however, had 802.11 networks that were not secure, and all bordered the Potomac. Through some silly testimony that I won't explain here, prosecutors ultimately revealed that a houseboat sailing on the river had the ability to receive wireless signals from shore; the occupants of the boat had used the onshore wireless networks to commit their crimes. The prosecution provided forensic evidence of the houseboat's laptop, which contained the incriminating data.

Think that scenario is pretty far-fetched? Not so. snip

(Excerpt) Read more at reviews-zdnet.com.com ...


TOPICS: Crime/Corruption; Extended News; Government; Technical
KEYWORDS: cybersecurity; fbi; hacker; internet; security; terrorist; wireless
Navigation: use the links below to view more comments.
first 1-2021-4041-57 next last
I've covered most of his recommendations on my home network. But he says to "place your access points (APs) outside your firewall. If you place your APs inside the firewall and someone breaks into your WLAN, he or she has access to your intranet, too. " I'm don't know how to do this on a home router.

gitmo

1 posted on 10/18/2004 4:38:29 PM PDT by gitmo
[ Post Reply | Private Reply | View Replies]

To: gitmo

Another reason to hardwire...


2 posted on 10/18/2004 4:40:32 PM PDT by GW and Twins Pawpaw (Sheepdog for Five [My grandkids are way more important than any lefty's feelings!])
[ Post Reply | Private Reply | To 1 | View Replies]

To: gitmo

I wish I could block all these useless animated GIF's.


3 posted on 10/18/2004 4:40:44 PM PDT by bikepacker67
[ Post Reply | Private Reply | To 1 | View Replies]

To: bikepacker67

BUMP!


4 posted on 10/18/2004 4:41:19 PM PDT by Publius6961 (The most abundant things in the universe are hydrogen and stupidity.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: gitmo

Good point. It can't be done with most Home Router-AP combos.

But then again, you can use the MAC Address list at home, because unlike at many offices you don't have computers comeing and going all that often.

If your firewall-router-ap has Mac Address lists, its the best security option you can use.


5 posted on 10/18/2004 4:44:18 PM PDT by konaice
[ Post Reply | Private Reply | To 1 | View Replies]

To: GW and Twins Pawpaw
Another reason to hardwire...

Exactly.

6 posted on 10/18/2004 4:44:58 PM PDT by Musket
[ Post Reply | Private Reply | To 2 | View Replies]

To: bikepacker67

If you are using IE, go to TOOLS / INTERNET OPTIONS / ADVANCED. De-select "Play animations in web pages".


7 posted on 10/18/2004 4:45:13 PM PDT by gitmo (Thanks, Mel. I needed that.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: konaice

I'll have to check. Thanks.


8 posted on 10/18/2004 4:46:07 PM PDT by gitmo (Thanks, Mel. I needed that.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: gitmo

Good post. Too many people plug it in and turn it on!


9 posted on 10/18/2004 4:46:38 PM PDT by rocksblues (Sorry John, we remember and will never forget your treason!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: konaice

Can a MAC address be spoofed?


10 posted on 10/18/2004 4:47:35 PM PDT by Musket
[ Post Reply | Private Reply | To 5 | View Replies]

To: gitmo
You miss my point... I don't want to block ALL animated GIF's, just the useless ones </hint>
11 posted on 10/18/2004 4:48:24 PM PDT by bikepacker67
[ Post Reply | Private Reply | To 7 | View Replies]

To: Musket

I'll take my chances. Can't beat sitting on the couch, watching Fox, and FReeping on a laptop...


12 posted on 10/18/2004 4:48:31 PM PDT by ItisaReligionofPeace (I'm from the government and I'm here to help.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: rocksblues

I did that at first. I figured as long as my personal use wasn't suffering I'd be glad to let my neighbors get some free bandwidth. My individual PCs were pretty well secured.

But I got to thinking about hackers driving down the road and using my access point to launch an attack on some company. Or terrorists using it for anonymous messages to their cohorts. So I enabled WEP, gave the network a unique name, etc. It's a bit of a hassle sometimes, but that's the price of responsibility.


13 posted on 10/18/2004 4:50:50 PM PDT by gitmo (Thanks, Mel. I needed that.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: Musket
re #10

yes.

14 posted on 10/18/2004 4:51:00 PM PDT by Michael Barnes
[ Post Reply | Private Reply | To 10 | View Replies]

To: bikepacker67

In that case, go to TOOLS / INTERNET OPTIONS / ADVANCED. De-select "Play useless animations in web pages".


15 posted on 10/18/2004 4:51:52 PM PDT by gitmo (Thanks, Mel. I needed that.)
[ Post Reply | Private Reply | To 11 | View Replies]

To: GW and Twins Pawpaw
Another reason to hardwire...

Heck, I'll go one better. Who needs a stupid computer when I've got a perfectly good typewriter. Figuring out new technology is just too intimidating, we might as well stick to what we know. And beyond that, denigrate what we don't know.

16 posted on 10/18/2004 4:53:19 PM PDT by tdadams ('Unfit for Command' is full of lies... it quotes John Kerry)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Musket

Can mac addresses be spoofed?

In normal network cards, yes.
But its really hard to do so with a wireless card because
access to this level of control is protected by federal regulation. (They can't let you tinker with the radio or all hell would break loose).

But even if hackers could change it, they would have no way of knowing which mac addresses are in your Mac Address list.

(Mac addresses are fuzzy addresses like 00-D0-B7-1D-F2-EB hard wired into the network card, and globally unique.)


17 posted on 10/18/2004 4:53:47 PM PDT by konaice
[ Post Reply | Private Reply | To 10 | View Replies]

To: konaice

MAC address' are easily spoofed. Especially if you are'nt running encryption in which case they can be sniffed trivially.


18 posted on 10/18/2004 4:54:09 PM PDT by Dinsdale
[ Post Reply | Private Reply | To 5 | View Replies]

To: gitmo

LOL!


19 posted on 10/18/2004 4:54:22 PM PDT by BullDog108 (Know Your Enemy! http://bvml.org/webmaster/enemy.html)
[ Post Reply | Private Reply | To 15 | View Replies]

To: gitmo

LOL - if t'were only that easy!


20 posted on 10/18/2004 4:54:53 PM PDT by bikepacker67
[ Post Reply | Private Reply | To 15 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-57 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson