<OT> War driveing for dollars....

[Federico Voges]

Jerry McBride wrote:

>Not that I'm a hacker, black hat type, but just a curious guy...
>
>I took my laptop to work this morning, running kismet. It scanned my path all 
>the way from home to workplace... some 20 odd miles. Along the way kismet 
>detected 117 wireless installations. Imagine that... just a leasurely drive 
>to work and I pass through 117 fields of opportunity.
>
>The really shocking thing was that less than 20% used encryption and fewer 
>than 10% used anything more than the default setup included with the wireless 
>device. Wow! 
>
>Ten of the 117 detections were were using essid's that could be easily be 
>identified with the names or operations of a business and were legitimate 
>commercial operations. Which I contacted this afternoon, with five of them 
>making arrangements for me to survey their wireless setups. 
>
>The other five simply didn't believe me when I explained how I came to contact 
>them... It was like trying to explain how airplanes fly to someone that never 
>saw one.... Amazing.
>
>Wow, it's a lot like taking candy from a baby....
>
>  
>
That's nothing.... I work in the same building were the UK Labour Party 
had their campaign HQ. One day, my boss (which also is the head of 
securtity for the company), found an open wireless network (no WEP/WPA 
or anything). SSID? LabourSecure! :)

Needles to say, he went down to the ground floor, introduced himself and 
told them about his finding. They didn't fix that. After he came back, 
he asked out netsec team to change our SSID (it used to be the company 
name).

BTW: We use certificates on our wireless network (never managed to 
configure xsupplicant to use PEAP on Linux)

Cheers.

-- 
Federico Voges.

Running: Mac OS X 10.4.2 (build 8C46)
Kernel:  8.2.0 Power Macintosh
Procesor: PowerPC G4 @ 1.67GHz
Uptime:   0:31  up 2 days,  4:38, 1 user, load averages: 0.79 1.14 1.05


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.linux-sxs.org/pipermail/linux-users/attachments/20050821/2ec27c79/attachment.htm