151–160 of 232 posts
Earlier quoted context omitted.
And what about the people who don't/can't use the institution's network? Why should the institution be allowed to effectively monopolize the unlicensed airwaves?
Why not? It's unlicensed, so it's a free-for-all. If we don't like that, the answer is to license it. Which doesn't seem better to me.
Earlier quoted context omitted.
That surely would be noticed in any sort of rigorous certification program.
What 'rigorous certification program'? Aren't the only regulations that they comply with FCC rules about creating/accepting interference, frequency ranges, and transmission power? These regulations do not have any say on what is actually transmitted on those frequencies.
Earlier quoted context omitted.
>so it’s legal to send whatever packets you like within certain power constraints. No. https://boingboing.net/2014/10/03/fcc-fines-marriott-for-jam... >No person shall willfully or maliciously interfere with or cause interference to any radio communications of any station licensed or authorized by or under this chapter or operated by the United States Government. https://www.law.cornell.edu/uscode/text/47/333
I really disagree with that ruling and interpretation of that quoted part of the law. Jamming to me means radio interference via indiscriminate analog noise. If we expand the definition of jamming to the protocol level like exemplified here, the law gains broad authority to interpret any online interaction that makes your experience worse as "jamming." The law should really should stick to radio frequency enforcement…
If you’re objecting to the phrasing in the boingboing article (which called it “jamming”), ok, but the law seems clear to me and the interpretation thereof I think was correct.
Earlier quoted context omitted.
I really disagree with that ruling and interpretation of that quoted part of the law. Jamming to me means radio interference via indiscriminate analog noise. If we expand the definition of jamming to the protocol level like exemplified here, the law gains broad authority to interpret any online interaction that makes your experience worse as "jamming." The law should really should stick to radio frequency enforcement…
That's because you are ignorant of radio frequency technology, circa 1940. The only reason a shared frequency band like 2.4 GHz works at all is because we have invented technology that can implicitly synchronize with other senders through avoiding collisions with ongoing transmissions, e.g. through CSMA/CA. Obviously a band like 2.4 GHz will simply not work if devices were allowed to transmit permanently like an anal…
Earlier quoted context omitted.
Agreed. But evidence? I've tried to convince the businesses to talk to the police. But, what they heck do the police/businesses do? How do you prove that there is a crime? They probably would believe me and would probably knock on doors and probably get a warrent. Then what? I'm not a professional cyber security person so how do I prove that device if found is causing damage? Also, the device is intermittent. I can c…
I called the police once when I noticed a wifi AP that was MiTM'ing traffic at the local Kroger. They sent someone out and said it was a misconfigured system in the Deli. Guy was real nice and seemed to understand what I was worried about.
In Norway/Oslo there is a lot of people with equipment sending deauthentication packages, jamming neighboring equipment, and one of the main reason for slow Internet (lot of jitter). Did some research on this together with The Norwegian Communications Authority (NKOM) to isolate the problem. If you want to check for yourself if someone close by i sending deauthentication packages; fire up a Mac and: 1. Open Wi-Fi-dia…
Would you have any recommendation for those of us without a Mac?
In Norway/Oslo there is a lot of people with equipment sending deauthentication packages, jamming neighboring equipment, and one of the main reason for slow Internet (lot of jitter). Did some research on this together with The Norwegian Communications Authority (NKOM) to isolate the problem. If you want to check for yourself if someone close by i sending deauthentication packages; fire up a Mac and: 1. Open Wi-Fi-dia…
> by supporting WPA3 and PMF (encrypt management frames). OpenWRT 19.07 adds wpa3 support and the linux kernel supports 802.11w so probably many more APs could be secured.
Neat! Note that it is not enabled by default and requires installing the -openssl or -wolfssl variant of the hostapd, wpa_supplicant, or wpad package[1] and may require recreating the wireless config file.[2]
1. https://openwrt.org/releases/19.07/notes-19.07.0-rc2#wpa3_su...
2. https://forum.openwrt.org/t/wpa3-support-in-openwrt/10554/68
Earlier quoted context omitted.
I am saying not everyone is affected, only those who solely rely on wifi. Others have realized that a shared medium with questionable security is inherently unreliable and have other options at their disposal.
Ethernet is a shared medium as well if you want to talk to other devices on your network. So instead of deauth they do ARP poisoning.
Seems widespread; sad state of affairs... wonder how many locations suffer from (mis)configured APs battling each other.. https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortig... "In addition to monitoring rogue APs, you can actively prevent your users from connecting to them. When suppression is activated against an AP, the FortiGate WiFi controller sends deauthentication messages to the rogue AP’s clients, p…
Rogue APs are generally defined as APs that you don't manage but have been connected to your wired network. Obviously this could be a significant security risk. I don't think they're sending deauth messages to every client/AP they see. https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortig...
In Norway/Oslo there is a lot of people with equipment sending deauthentication packages, jamming neighboring equipment, and one of the main reason for slow Internet (lot of jitter). Did some research on this together with The Norwegian Communications Authority (NKOM) to isolate the problem. If you want to check for yourself if someone close by i sending deauthentication packages; fire up a Mac and: 1. Open Wi-Fi-dia…
Would you have any recommendation for those of us without a Mac?