Re: Firesheep/Cain& Able

[John Ladwig <John.Ladwig () CSU MNSCU EDU>]

I'm wrestling again with the wisdom of turning WPA2-PSK on for all currently-unencrypted captive-portal type WLANs, 
using the SSID as the PSK, in order to get radio-side client-client isolation.

There's just that nagging question of user experience, and helpdesk calls...

    -jml 


-----Original Message-----
From: Hudson, Edward
Sent: 2010-11-01 09:41:33
To: Hudson, Edward;The EDUCAUSE Security Constituent Group Listserv
Cc: 
Subject: [SECURITY] Firesheep/Cain& Able


In light of the recent attention to "Firesheep" I am wondering if anyone is having issues and how they are addressing?
When used in conjunction with "Cain&Able" it appears able to sniff both wired and wireless traffic for login 
credentials and execute ARP Poisoning.
TIA
EH

Ed Hudson, CISM
Information Security Office
California State University, Chico
www.csuchico.edu/ires/security<http://www.csuchico.edu/ires/security>
Office: (530) 898-6307
Cell: 707-799-3250
ewhudson () csuchico edu