[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Netstumbler] Browse Networks
"Like Thorn stated a few days ago, it's illegal, dumb, and just plain
goddamned rude."
Well, that's not EXACTLY what I said, but it certainly is the sentiment! :)
The practicalities are such that wireless attacks* differ little from
"regular" attacks, except in the medium. In many ways, such attacks are
probably easier, because so many admins are unaware of the security issues
or perhaps even the existence of a rogue.
However, that the admin is that unwise or uneducated about security does not
diminish or absolve the user from the legalities. If someone is foolish
enough to leave the keys in his car, it still does not make it legal for a
passerby to steal it.
Thorn
*Yes, I said "attacks." Let us not mince words here.
-----Original Message-----
From: Scott Peterson [mailto:scott@xxxxxxxxxxxxx]
Sent: Tuesday, June 24, 2003 10:50
To: netstumbler@xxxxxxxxxxxxxx
Subject: RE: [Netstumbler] Browse Networks
"There's quite a strong argument that if you connect to an AP,
it's unsecured, it's running DHCP and it gives you an IP address and a
gateway and you can then get an internet connection, then you've been
welcomed to use a free gateway."
"they may be public networks"
Who are you? The Amazing Kreskin? How can you deem an AP free for
public use just because the SSID isn't the default one? If the owner
has no qualms about drive-by surfing, then the AP will be clearly
labeled as such.
Ex:
FREE NET
stumblerswelcome
surf_dont_snoop
Find an AP like these, and you can connect without fear of
repercussions. AP's with default settings or SSIDs you can't interpret?
Then it is best to keep moving. Just because it hands you an IP doesn't
mean you are allowed to connect. Like Thorn stated a few days ago, it's
illegal, dumb, and just plain goddamned rude.
I get the feeling that stumblers that "borrow" connections are the same
people that drink other people's beer at a party, since they were too
cheap to bring their own.
"duh, it was in the fridge so it must be free."
"Notice that I haven't once referred to any legal issues in this post.
I'm really not interested in these, but rather in practicalities."
You had better be interested in the legalities. If jokers like you keep
accessing networks illegally, you will be moving the focus of WarDriving
from raising security awareness to drive-by h4x0ring. This community
does not need to be stigmatized because of cheapskates like you.
-MrWhite
-----Original Message-----
From: Julian Bond [mailto:julian_bond@xxxxxxxxxxxx]
Sent: Tuesday, June 24, 2003 8:48 AM
To: netstumbler@xxxxxxxxxxxxxx
Subject: Re: [Netstumbler] Browse Networks
Headshot <headshot_001@xxxxxxxxxxxxxx> wrote:
>Around my area there are some 802 networks. Some are secure - some are
not.
>I DO NOT want to break into the secure networks. I figure that if some
are
>unsecure (WEP not on) then they may be public networks. What I was
asking is
>how, using a WinXP machine, can I connect and browse files / services /
>whatever to find out what they do.
1) Fire up netstumbler.
2) Look for non-WEP APs
3) If an AP has an obvious manufacturers SSID such as "linksys" it's
highly likely to be a wide open AP put up by a clueless admin.
4) If the SSID looks like it might be deliberately open (eg "tmobile")
use XP to associate with it.
5) If the AP gives you a DHCP IP address, open the browser and see if
you can access any websites. If it's deliberate, then it's highly likely
to take you to a sign in page
6) Login, sign up, pay your money and surf away.
Back to 3) There's quite a strong argument that if you connect to an AP,
it's unsecured, it's running DHCP and it gives you an IP address and a
gateway and you can then get an internet connection, then you've been
welcomed to use a free gateway. This argument is made stronger because
Win XP (and some other OSs) will do all this for you without you raising
a finger. And if you happen to have Outlook running at the time it will
go and collect your email on it's own as well. The argument against this
is that if you take a consumer grade AP out the box and plug it in, then
this is what you get even if you never meant to share your connection.
Hence 4). You shouldn't really take advantage of the "Default Linksys
Community Network" just because it's there.
Notice that I haven't once referred to any legal issues in this post.
I'm really not interested in these, but rather in practicalities.
Headshot raises a good point "they may be public networks". Indeed they
may. So look for Non-WEP and a non-default SSID. If you get DHCP, I
think it's reasonable to assume that the sharing is deliberate.
--
Julian Bond Email&MSM: julian.bond@xxxxxxxxxxxx
Webmaster: http://www.ecademy.com/
Personal WebLog: http://www.voidstar.com/
M: +44 (0)77 5907 2173 T: +44 (0)192 0412 433
-----------------------------------------------------------------------
List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
List-Archive: http://www.michinganwireless.org/archive
-----------------------------------------------------------------------
---
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.491 / Virus Database: 290 - Release Date: 6/18/2003
---
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.491 / Virus Database: 290 - Release Date: 6/18/2003
-----------------------------------------------------------------------
List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
List-Archive: http://www.michinganwireless.org/archive
-----------------------------------------------------------------------
-----------------------------------------------------------------------
List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
List-Archive: http://www.michinganwireless.org/archive
-----------------------------------------------------------------------