Wi-Fi Honeypots a New Hacker Trap

Wi-Fi Honeypots a New Hacker Trap
Kevin Poulsen, SecurityFocus 2002-07-29

War drivers beware, the next wireless network you tap might be part of an elaborate sting.

Wi Fi Honeypots a New Hacker Trap 2002-07-29
Anonymous (1 replies)

Interesting article but not enough detail. I ran my own wireless honeypot from January to end of may, and will put it back online in September when I move back into the dorms. More info on www.hacksrus.com/~recompiler . Any comments and suggestions would be appreciated....

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-08-05
Anonymous

Great article, is there really a way to secure wireless technology?...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
JP (2 replies)

Yes -imagine the potential confrontation:

A few lines of code to parse off the first 3 bytes of the evesdropper's MAC address. Use those to look up the vendor of the WLAN card: http://standards.ieee.org/regauth/oui/oui.txt

Knowing the card and recognizing it visually could help identify the cul...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
Anonymous

Ummm... Wrong JP. MAC Addresses on a wireless card are a joke. The MAC Address can be changed to whatever you want it to be, and thus any results garnished by this system would be invalid. Most wardrivers know this. I change my MAC address any time I wardrive to something random...and sometimes...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-30
Finity

A directional antenna would find the culprit very fast. Something that the amateur radio community does that is similar to this is called a foxhunt. Someone makes a little transmitter and the first person to find it wins. This would be a lot of fun, and not too hard to do with a wireless network ...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
Anonymous (4 replies)

Can you say "entrapment"?...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
Anonymous

It's not entrapment because they have a warning banner, and they have no plans to prosecute, or so they say. I was never even asked to turn over the log files from my wireless honeypot by the sysadmin....

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
draconius (2 replies)

that sounds like a good idea, if the person you catch is {trying} to use the honeypot in a malicious manner, or trying to steal bandwidth. but what about the people such as myself, who don't do that sort of thing? what ifI am just curious to see what is open in my town? what if I Want to inform t...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-29
Loki (2 replies)

It is wrong. You CAN be prosecuted, and it is NOT entrapment.

When you drive around town, looking for a WAP, with intent of using it w/o permission, it is akin to trying to buy something using a random numbered credit card.

Whenever I catch someone poking around in my wNet, I usually will Nuk...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-30
Anonymous (2 replies)

If it's your WLAN then YOU should be responsible for stopping it's broadcasts at the perimeter of your property.

No way am I responsible for what YOUR radio waves do when they hit my PC.

Cracking is a different story so I wont go into that, but for simply receiving an UNREQUESTED radio wave on...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-31
Anonymous

Hear Hear... I agree with you.If you remember the satellite issue back in 1980.. The courts ruled that it was not unlawful to intercept satellite comunications(ie HBO etc. just to decrypt it. That is why they broadcast industry scambled to secure there transmissions.(no pune intended).

It is up to ...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-08-01
Anonymous

Actually the prolbem is it is just not listening, it is the reply signal that you are resonsible for....

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-30
James (1 replies)

Correct, you can be prosecuted & end up like this guy:

Ethical hacker faces war driving charges:

http://www.theregister.co.uk/content/55/26397.html...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-30
Anonymous

Yeah, but this guy was also dumb enough to demonstrate it to witnesses......

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-08-01
Anonymous

http://www.chron.com/cs/CDA/story.hts/tech/news/1507766

this guy got prosecuted although he just informed them about the vulnerabilities in good faith

...

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-07-30
Anonymous

Can YOU say "tresspass"? It isn't a law enforcement organization that set this up....

[ more ] [ reply ]

Wi Fi Honeypots a New Hacker Trap 2002-08-02
Anonymous

can you say, "It's stealing so you shouldn't be doing it anyway?"...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-30
An$^&85^C%6875

i know it feels good to help other people, but why the heck would you. its cover your ass in this type of stuff...and being from dc it makes me nervous, i wouldnt touch it. if you wanna hack, do it on your own stuff. and if you have a wireless network assign static ips, watch logs, and use weps (giv...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-30
Anonymous

Pinning down the scanning tool is going to be difficult. Especially when it does not send polling requests. I.E. Kismet.

kr...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-30
Alpha (4 replies)

If someone was interested in making the wireless hacker community look good for a change, if whenever you found an open network, you sent a message to its admin informing them of its openness, theres always the chance you could be hitting a honeypot like this. You always hear about the attacks, but...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-31
Philiak

Well put, Alpha.

I, for one, am gonna try to make the news without the spread of FUD....

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
The Apocrypha

This is all well and good in theory, and yes would be nice. White Hats unless already high profile people in the IT industry hardly EVER get any regnition for their good will and nature. How many corperations with open non honeypot networks are likely to say "Oh yeah we could have been nuked, or our...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-03
Anonymous

A lot of times, it is almost impossible to FIND the administrator......

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-06
Fozzee

But how do you really know who the contact is? Thats the beauty of Wireless is that theres no regulation, no one to report to, no registry of who uses what. Without a very descriptive SSID or a highly directional antenna, Contacting an admin would be almost impossible....

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-31
Anonymous (2 replies)

Signal strength correlation between AP's would narrow down a person's location quite substantially. A few hundred bucks would build a nice little rotating Yagi or small dish that could yeild good LOB's (lines of bearing). Stick one at each AP (in a radome) and run a covert direction finding backbo...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
Matthew Z

I don't think they will ever be able to make a case against simply accessing a wireless network if it extends outside the physical boundaries of the facility in which it's housed, or if the intruder must take unreasonable measures to get access to the network (such as climbing over a fence, entering...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
Anonymous (2 replies)

Yeah right,

That may work on a very limited small scale but more than likely would fall due to the amount and density of devices in a given area.

Keep in mind that if I am 'war driving' or just snooping, I don't have to use a LAN antenna. Using a different antenna I could be 1-7 Miles away f...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-07
Anonymous

Yeh, yer right... It wouldn't ever work. The best they would be able to do would be to get a picture from two or three different sites of the place you had your vehicle parked, or where you lived, or the hotel you were in, or whatever... The bottom line is, you had better be moving at the moment o...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-10
Anonymous

Heh, just keep on believing that... Seven miles, even 20 miles are not *REALLY* protection when employed by a mind like yours.

Osiris...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-07-31
BigZ (3 replies)

What about everyone open up their access points then we have a big FREE wireless network?

The whole concept just like the Internet. No matter where you go you will have access. May be it will is good that we just secure wireless traffic but let it open to everyone....

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
Philiak

Yeah, let someone INSIDE your network, then stop them from doing whatever they'd like toy your data. Yeah, right.

A form of free worldwide wireless isp seems to be what you're advocating. Not gonna happen. "Profiteering gluttons", remember?...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
Matthew Z

Umm.. no.

Do you have any idea how expensive bandwidth really is?...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-01
Anonymous

That's a nieve statement if I ever saw one. Open up your access point and wait for your cable provider to cut off your service, or for the FBI to cuff you and stuff you for kiddieporn from your IP address ends up on the net. Eventually when your household appliances get smart and interconnected, str...

[ more ] [ reply ]

Uninformed End Users 2002-08-01
Anonymous

I'm not quite sure how uninformed end users who just plug and play Wireless Networks would get prosecuted. I feel prosecution can't happen unless u'r licensed to to have a wireless network....

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-02
Anonymous

Sure. open up your network to anyone for free. Good idea.

what happens when the FBI comes knocking at YOUR door, because YOUR assigned ip address has been tracked back by your isp to someone hacking into a bank.

Worse yet, used to spam -:)

...

[ more ] [ reply ]

Wi-Fi Honeypots a New Hacker Trap 2002-08-03
Anonymous

It is rather funny that activities that most of us assume should be just as legal as reading a sign on the front of a building are considered hacking by the law enforcement neophytes. It would be nice (not for the defendant though) to have a court draw clearer lines between what is legal and what i...

[ more ] [ reply ]

WiFi Hacker Demo 2005-07-13
Anonymous

Anyone who's interested in wireless hacking should take a look at this demo:

http://www.lucidlink.com/wireless_hackers.asp

and everyone who uses WiFi and doesn't want other people hacking in should definitely take a look...

[ more ] [ reply ]