As a grey hat, I might set my PC up as a WPAD (Windows Proxy Auto Detect) server. I might also tell any PC that wants to use my WPAD service to use my PC as a Proxy. I also might be sniffing everything on my PC that is acting as a Proxy for passwords. I might do this while at a Hotel or Coffee Shop.
I have not done anything to trespass on those PC's that fall into my trap except offer the trap. Their PC's automatically connected to me. Even though I am stealing their passwords, I did not initiate the connection.
Acording to the law, I am not tresspassing or hacking.
My username is thebertman. My password is 123456.
You have just been given a username and password in just the same way that my WPAD hack works.

Hacking your neighbors computer; Priceless.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/463/34907#34907