Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Hacker's Story: Let me tell you just how easily I can steal your personal data

techvibes.com

Post reply on HN
Print view View original

11–20 of 33 posts

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#12

Post by varjag »

rottencupcakes wrote: post #8
mmaro wrote: post #2

Someone is eventually going to go to prison after stupidly uploading evidence of themselves wiretapping a wireless network they don't own. There's also an interesting double standard here: would it be quite so acceptable to casually listen in on people's GSM calls or wireless house phone calls?

Does there exist legal precedent for this? It would seem hard to argue for expectation of privacy on an unsecured wireless network on a protocol without TLS.

Why is that so?

A landline phone is also trivial to tap into. Should you not expect some degree of privacy on the phone?

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#13

Post by nands »

Locke1689 wrote: post #6
girlzhack wrote: post #3

Let me tell you an even easier way hack - download Firesheep

Firesheep is just an automated GUI for what we've been doing all along. Ettercap, wireshark, etc are far more flexible and can be used to execute a wider variety of attacks. Firesheep, for example, won't ARP poison on a wired network.

Try Cain Able, its it probably the best ARP spoofing tool around for pc.

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#14

Post by _b8r0 »

nands wrote: post #13
Locke1689 wrote: post #6

Earlier quoted context omitted.

Firesheep is just an automated GUI for what we've been doing all along. Ettercap, wireshark, etc are far more flexible and can be used to execute a wider variety of attacks. Firesheep, for example, won't ARP poison on a wired network.

Try Cain Able, its it probably the best ARP spoofing tool around for pc.

You don't need to ARP spoof on an open wireless network.

But Cain is in my standard pentest toolset for various reasons, not just ARP spoofing.

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#15

Post by gloob »

varjag wrote: post #12
rottencupcakes wrote: post #8

Earlier quoted context omitted.

Does there exist legal precedent for this? It would seem hard to argue for expectation of privacy on an unsecured wireless network on a protocol without TLS.

Why is that so? A landline phone is also trivial to tap into. Should you not expect some degree of privacy on the phone?

Phones, like mail, are a special case in a whole bunch of ways, legally, is my (Not A Lawyer) understanding. Using them as a basis for comparison is probably not going to reveal a lot.

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#16

Post by rexyo »

nands wrote: post #13
Locke1689 wrote: post #6

Earlier quoted context omitted.

Firesheep is just an automated GUI for what we've been doing all along. Ettercap, wireshark, etc are far more flexible and can be used to execute a wider variety of attacks. Firesheep, for example, won't ARP poison on a wired network.

Try Cain Able, its it probably the best ARP spoofing tool around for pc.

I am on a unix platform, why should I use Cain Able?

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#18

Post by mcherm »

watty wrote: post #17

I'm sorry but looking at packets on an unsecured network is in no way "hacking". Even cracking a WPA network and using a MITM attack is trivial with all the tools and tutorials available.

What is your point? The fact that it is trivial was the point of the article.
Post reply on HN