Live data from Hacker News

A Hacker's Story: Let me tell you just how easily I can steal your personal data

techvibes.com

31–33 of 33 posts

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#31
post #14
post #13

Earlier quoted context omitted.

Try Cain Able, its it probably the best ARP spoofing tool around for pc.

You don't need to ARP spoof on an open wireless network. But Cain is in my standard pentest toolset for various reasons, not just ARP spoofing.

You don't need to ARP spoof on an open wireless network.

Right... which is why he didn't mention wireless networks...

That's like saying, yes SQL injection is powerful, but it doesn't work on CSRF vulnerabilities -- complete non sequitur.

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#32

Earlier quoted context omitted.

Wireshark won't ARP poison either, afaik.

, etc I mean, I even explicitly mentioned Ettercap, which does ARP spoof. Is there a way I could have made that clearer?

Maybe it was just late and I was too tired for it to make sense. Sorry.

Re: A Hacker's Story: Let me tell you just how easily I can steal your personal data

#33
post #12

Earlier quoted context omitted.

Does there exist legal precedent for this? It would seem hard to argue for expectation of privacy on an unsecured wireless network on a protocol without TLS.

Why is that so? A landline phone is also trivial to tap into. Should you not expect some degree of privacy on the phone?

Do you not picture a distinction between a landline (non-cordless) phone and wireless internet?

By 'trivial' to tap into, you mean I'd have to physically cut your line somewhere and attach a listening device, right? It seems very reasonable to expect privacy on a physical point to point wire.

With Wifi, if you're my neighbor, I need to sit at home with my computer and your photons come straight to my antenna. It's like you're giving them to me. I don't see the similarities.

Post reply on HN