[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Wireless ISPs
- To: full-disclosure@xxxxxxxxxxxxxxxx
- Subject: Re: [Full-Disclosure] Wireless ISPs
- From: Konstantin Gavrilenko <mlists@xxxxxxxxxx>
- Date: Wed, 12 May 2004 00:37:28 +0100
there is a russian saying:
"If the party gets that mad, cranch the last gurkin"
For a less paranoid of you, who still believe that wep is secure enough
solution. We maintain a complimentary site for our book on wireless
hacking, that has a categorised collection of tools for wireless
penetration testing, http://www.wi-foo.com/index-3.html
cheers,
kos
--
Respectfully,
Konstantin V. Gavrilenko
Arhont Ltd - Information Security
web: http://www.arhont.com
http://www.wi-foo.com
e-mail: k.gavrilenko@xxxxxxxxxx
tel: +44 (0) 870 44 31337
fax: +44 (0) 117 969 0141
PGP: Key ID - 0x4F3608F7
PGP: Server - keyserver.pgp.com
D B wrote:
I'm not real sure how to post this, nor am I sure of
the scope. I am still learning about computers.
All transactions done via secure websites are secure,
however the auto mailing feature to confirm orders
sometimes contains sensitive data. When the customer
is on a wireless connection, be it ISP or home LAN
that data is broadcasted in the clear for anyone
within range to eavesdrop. A wired internet connection
limits the number of people who have access to this
data simply by the nature of the internet putting it
within acceptable risk.
It is legal according to US law to eavesdrop on
wireless connections.
http://www.usdoj.gov/criminal/cybercrime/wiretap2510_2522.htm
The only solutions I can offer are one of two things.
1. Quit sending auto confirmations with sensitive data
2. Encrypt all wireless transmissions at least making
someone who gains access to this data prosecutable.
Please direct all flames to /dev/null
Dan Becker
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html