A Shark on the Network
blog.nodenexus.com
A Shark on the Network
1–10 of 54 posts
Re: A Shark on the Network
#2kismet ?
Re: A Shark on the Network
#3A locksmith came to let me back into my apartment the other day. He told me that because the front lock was a 'commercial' lock, he'd have to charge me $50 extra. I asked him if he would charge the same if he used the same lock-picking technique on a residential lock (since this was a residence); he said yes. So then I asked him what was so special about a bump key for this lock versus a residential lock, since they're both just blanks cut to five-nines and this lock has no anti-bump pin. He said, nothing special. So I asked him, since the bump key works exactly the same on either lock, why was he charging me an extra $50?
He ended up dropping the extra.
Security is not a Dark Art, and there is no harm in teaching people how or why attacks work. If you can find it at a bookstore or via a Google search, it's safe to disseminate to the general public via blog.
Re: A Shark on the Network
#4"If you’re wondering why the network card has access to all messages on the network, consider that you need to see every message in order to determine which ones you are supposed to receive."
Whuuut
Re: A Shark on the Network
#5I've been thinking about this a lot lately. The ideal solution seems to be to encrypt traffic between all hosts on the local network. Are there any good resources for how to setup IPSEC or something on a local wifi network?
Re: A Shark on the Network
#6"If you’re wondering why the network card has access to all messages on the network, consider that you need to see every message in order to determine which ones you are supposed to receive." Whuuut
I'm not sure what's causing you confusion. In an over-the-air situation you need to grab all the traffic to ensure you aren't missing something addressed to you. Once you grab the traffic, you can drop or otherwise ignore traffic not meant for you.
This is why wifi is segmented into channels: to reduce the number of packets that devices need to sift through.
Re: A Shark on the Network
#7So I don't know anything about this stuff but looking at the XKCD example it looks really easy to see virtually everything my neighbours are doing on the web. What am I missing? Or is it really this insecure to use wireless?
Re: A Shark on the Network
#8I've been thinking about this a lot lately. The ideal solution seems to be to encrypt traffic between all hosts on the local network. Are there any good resources for how to setup IPSEC or something on a local wifi network?
The solution already exists in the form of WPA2-Enterprise auth (802.1x), but support is still fairly sparse on consumer devices like cheaper WiFi routers or media streamers. It's also difficult to configure and manage, for the average user.
Re: A Shark on the Network
#9So I don't know anything about this stuff but looking at the XKCD example it looks really easy to see virtually everything my neighbours are doing on the web. What am I missing? Or is it really this insecure to use wireless?
Without WEP or WPA, yes insecure wireless is insecure.
Re: A Shark on the Network
#10So I don't know anything about this stuff but looking at the XKCD example it looks really easy to see virtually everything my neighbours are doing on the web. What am I missing? Or is it really this insecure to use wireless?
[deleted]