Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Peddling Snake Oil as Security
Richard Forno, 2002-04-17

Wireless security vendors are trying to create a market where none exists. As always, the key to better wireless security is better practice, not new products.

Comments Mode:
Peddling Snake Oil as Security 2002-04-17
Nicholas Weaver (1 replies)
Peddling Snake Oil as Security 2002-04-19
Anonymous
Peddling Snake Oil as Security 2002-04-17
M@SomeBigTelecom
Peddling Snake Oil as Security 2002-04-18
Mark Levine (1 replies)
VLANs and Internet routing 2002-04-19
Anonymous (2 replies)
VLANs and Internet routing 2002-04-19
Mark Levine
It's a layer 2 issue not 3. I never said they would have access to the internet through the companies ISP. Simply that outside parties can use your wireless lan as a transport.

An example: corp.com has a large campus that they want to provide wireless access for their laptop users. So they setup an isolated network bordered by a firewall/VPN gateway. The corp.com users connect via VPN to the corp.com core. All is well. Now on the north side of the large campus AgentX (with no internet access) runs Airsnort and finds out the SSID for the nearest wireless access point. He calls AgentZ (who has a cable modem), who lives on the south side of the campus 8 miles away, and tells him the SSID. Now AgentX can forward traffic to AgentZ, thereby using corp.com's wireless network. Now AgentX downloads porn all day at 5 mbps and corp.com is wondering why the wireless network is so darn slow.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/75/11992#11992
VLANs and Internet routing 2002-04-19
Nicholas Weaver
Peddling Snake Oil as Security 2002-04-19
net@ether (2 replies)
Peddling Snake Oil as Security 2002-04-19
Anonymous (1 replies)
Peddling Snake Oil as Security 2002-04-23
Anonymous
Peddling Snake Oil as Security 2002-04-22
Anonymous
Peddling Snake Oil as Security 2002-04-19
Glenn Larsson (ichinin@suespammers.org)
Wireless Security, Specifically 2002-04-19
Mike Outmesguine
Peddling Snake Oil as Security 2002-04-21
Hetalkumar Joshi
Peddling Snake Oil as Security 2002-04-22
Anonymous
Peddling Snake Oil as Security 2002-04-22
Anonymous
Peddling Snake Oil as Security 2002-04-23
crazynetworkguy
Peddling Snake Oil as Security 2002-04-28
Anonymous
Peddling Snake Oil as Security 2002-05-07
big ROB







 

Privacy Statement
Copyright 2009, SecurityFocus