Author Topic: WI-FI users: Secure your network or else...  (Read 1163 times)

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9886
WI-FI users: Secure your network or else...
« Reply #15 on: December 09, 2007, 08:30:19 PM »
Quote
Originally posted by SD67
There is no such thing as a 100% secure network that isn't switched off and unplugged.


Rubbish.

Offline Maverick

  • Plutonium Member
  • *******
  • Posts: 13916
WI-FI users: Secure your network or else...
« Reply #16 on: December 10, 2007, 11:24:26 AM »
gotta bite on this one. Vulcan what is the example of the secure unhackable network you have in mind.
DEFINITION OF A VETERAN
A Veteran - whether active duty, retired, national guard or reserve - is someone who, at one point in their life, wrote a check made payable to "The United States of America", for an amount of "up to and including my life."
Author Unknown

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9886
WI-FI users: Secure your network or else...
« Reply #17 on: December 10, 2007, 01:50:33 PM »
Quote
Originally posted by Maverick
gotta bite on this one. Vulcan what is the example of the secure unhackable network you have in mind.


For Wifi? Either via an IPSECVPN Client (3DES ro 256AES), SSL VPN Client, or WPA2-PEAP.

Offline Tattered

  • Copper Member
  • **
  • Posts: 127
WI-FI users: Secure your network or else...
« Reply #18 on: December 10, 2007, 01:55:30 PM »
Scary times.
.

Offline Boroda

  • Persona Non Grata
  • Platinum Member
  • ******
  • Posts: 5755
WI-FI users: Secure your network or else...
« Reply #19 on: December 10, 2007, 02:04:26 PM »
Quote
Originally posted by SD67
What I was getting at was it's a justification for invasion of privacy.
Now my network is secured (encrypted) but that does not mean it's not hackable. There is no such thing as a 100% secure network that isn't switched off and unplugged.
Now I don't want some do gooder hacking into my network, and then reporting me because I happen to have some pron there. None of it is anything illegal, but some would find it offensive, just as some find ankles and faces offensive.
What I was getting at is where is the line drawn between duty to report and invasion of privacy?
Where does freedom of speech fit in with file sharing and this new legislation?


I have to repeat that if you guys try teaching us "democracy" and it's an example - then I am all for totalitarism.

This is absolutely insane, the very concept of "guilt" is wasted completely. This is why I always insist that Orwell's 1984 was written about Western society.

Vulcan, every network is insecure. At least it can be "hacked" using thermo-rectal cryptoanalysis.

Offline Boroda

  • Persona Non Grata
  • Platinum Member
  • ******
  • Posts: 5755
WI-FI users: Secure your network or else...
« Reply #20 on: December 10, 2007, 02:09:34 PM »
Quote
Originally posted by Vulcan
For Wifi? Either via an IPSECVPN Client (3DES ro 256AES), SSL VPN Client, or WPA2-PEAP.



Offline Maverick

  • Plutonium Member
  • *******
  • Posts: 13916
WI-FI users: Secure your network or else...
« Reply #21 on: December 10, 2007, 02:10:19 PM »
Quote
Originally posted by Vulcan
For Wifi? Either via an IPSECVPN Client (3DES ro 256AES), SSL VPN Client, or WPA2-PEAP.


What makes you think anything devised by man cannot be hacked by another?
DEFINITION OF A VETERAN
A Veteran - whether active duty, retired, national guard or reserve - is someone who, at one point in their life, wrote a check made payable to "The United States of America", for an amount of "up to and including my life."
Author Unknown

Offline ChickenHawk

  • Silver Member
  • ****
  • Posts: 1010
WI-FI users: Secure your network or else...
« Reply #22 on: December 10, 2007, 02:22:04 PM »
In addition to encryption, you should use MAC address exclusion and only allow devices you know.  That makes it a tough nut to crack.
Do not attribute to malice what can be easily explained by incompetence, fear, ignorance or stupidity, because there are millions more garden variety idiots walking around in the world than there are blackhearted Machiavellis.

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9886
WI-FI users: Secure your network or else...
« Reply #23 on: December 10, 2007, 02:31:23 PM »
Quote
Originally posted by Maverick
What makes you think anything devised by man cannot be hacked by another?


Because the computing power required to crack a 3DES/AES encrypted session is greater than  the password rollover time.

Offline Tigeress

  • Silver Member
  • ****
  • Posts: 1260
WI-FI users: Secure your network or else...
« Reply #24 on: December 10, 2007, 02:38:31 PM »
This is the reason why We the People need to keep a close watch ourselves on Government...

The internet has been driving the government crazy for years because it is humankind's worldwide network, not the Government's network.

If I ever see child pornography, on the internet or elsewhere, I will call the police as we all should.

But... government monitoring of all internet traffic in hope's of catching something is not the way to go and just pushes the door open wider for more and more of government's disintegration of the privacy, thus liberty, of We the People.

We the People are not “suspects”; individuals meriting closer watch by virtue of legally defined reasonable suspicion are suspects.

TIGERESS

Offline Boroda

  • Persona Non Grata
  • Platinum Member
  • ******
  • Posts: 5755
WI-FI users: Secure your network or else...
« Reply #25 on: December 10, 2007, 03:06:39 PM »
Quote
Originally posted by Vulcan
Because the computing power required to crack a 3DES/AES encrypted session is greater than  the password rollover time.


See a picture above. Thermo-rectal cryptoanalisys brings you the result quite fast regardless to the password length.

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9886
WI-FI users: Secure your network or else...
« Reply #26 on: December 10, 2007, 04:04:16 PM »
Quote
Originally posted by Boroda
See a picture above. Thermo-rectal cryptoanalisys brings you the result quite fast regardless to the password length.


social engineering != hacking :)  (though it is far more effective imho). Have you read Mitnicks book Art of Deception?

p.s I could always add tokens or one time passwords (very easily too via an SSL VPN)

Offline Vipermann

  • Nickel Member
  • ***
  • Posts: 405
WI-FI users: Secure your network or else...
« Reply #27 on: December 10, 2007, 04:30:34 PM »
Quote
Originally posted by ChickenHawk
In addition to encryption, you should use MAC address exclusion and only allow devices you know.  That makes it a tough nut to crack.


A MAC address is very easy to emulate.
Get Busy Living Or Get Busy Dieing

Offline Boroda

  • Persona Non Grata
  • Platinum Member
  • ******
  • Posts: 5755
WI-FI users: Secure your network or else...
« Reply #28 on: December 10, 2007, 05:28:08 PM »
Quote
Originally posted by Vulcan
social engineering != hacking :)  (though it is far more effective imho). Have you read Mitnicks book Art of Deception?

p.s I could always add tokens or one time passwords (very easily too via an SSL VPN)


I am a bearded hippie equipped with a 1L beer can. I fix and reboot my neighbors Wi-Fi APs. 5 or 6 APs inside my reach, one of them at least 1km away in Northern River Port.

Biggest problem so far was getting a manufacturer's ID in Netstumbler and DLing an AP user manual to read a default access password. Usually I immediately change the default pwd so proud AP owners won't break anything down. Now call me a criminal. I don't care :)

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9886
WI-FI users: Secure your network or else...
« Reply #29 on: December 10, 2007, 05:43:00 PM »
Ahhh well I've been playing with Virtual APs, my real network secured via WPA2-PEAP and an 'open' network unsecured which redirects any access attempts to a goatse style page :) (for people like yourself)