Full Disclosure mailing list archives

Re: Wireless ISPs


From: Konstantin Gavrilenko <mlists () arhont com>
Date: Wed, 12 May 2004 00:37:28 +0100

there is a russian saying:
"If the party gets that mad, cranch the last gurkin"


For a less paranoid of you, who still believe that wep is secure enough solution. We maintain a complimentary site for our book on wireless hacking, that has a categorised collection of tools for wireless penetration testing, http://www.wi-foo.com/index-3.html



cheers,
kos



--
Respectfully,
Konstantin V. Gavrilenko

Arhont Ltd - Information Security

web:    http://www.arhont.com
        http://www.wi-foo.com
e-mail: k.gavrilenko () arhont com

tel: +44 (0) 870 44 31337
fax: +44 (0) 117 969 0141

PGP: Key ID - 0x4F3608F7
PGP: Server - keyserver.pgp.com




D B wrote:
I'm not real sure how to post this, nor am I sure of
the scope. I am still learning about computers.


All transactions done via secure websites are secure,
however the auto mailing feature to confirm orders
sometimes contains sensitive data. When the customer
is on a wireless connection, be it ISP or home LAN
that data is broadcasted in the clear for anyone
within range to eavesdrop. A wired internet connection
limits the number of people who have access to this
data simply by the nature of the internet putting it
within acceptable risk.

It is legal according to US law to eavesdrop on
wireless connections.
http://www.usdoj.gov/criminal/cybercrime/wiretap2510_2522.htm

The only solutions I can offer are one of two things.
1. Quit sending auto confirmations with sensitive data

2. Encrypt all wireless transmissions at least making
someone who gains access to this data prosecutable.
Please direct all flames to /dev/null

Dan Becker


        
                
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: