WI FI question

[fnkngrv]

Originally Posted by suckerface

While I certainly condone the use of good passwords, or passphrases ideally, with cluster/distributed computing becoming easier and easier to not only build, but rent (Amazon EC2, for example), cracking complex passwords that are strongly encrypted a trivial task. You've got your bases covered with your redirect server (props on that!), but some material to read for those who aren't familiar:

Older: http://www.infosecisland.com/blogvie...x-Minutes.html

Windows hashes, but same idea: http://www.techspot.com/news/51044-2...cord-time.html

Online pay service: http://gpuhash.com/

Also, heaven forbid anyone uses WEP, as that can be cracked in minutes, and WPS has a gaping flaw that is just as easy to exploit.

All great information for sure. I am a CISSP and with the history that I have with certain employers and clients I have had to do extensive security work. Since we are talking about WI-FI however and as previously stated I have my broadcast set to roughly 8-15 feet outside of my house depending on which part of the house you are at along with my security camera feed warnings I will know if someone is trying to penetrate and steal bandwidth . I also actually have my WPA2-PSK set to rotate the 4 network keys I use. My family hates it because it is such a pain when they try to add a new device especially since DHCP is also turned off and they have no clue how networks work.

As for the redirect I actually have that set so that if someone opens an internet browser page it goes to one that I built with an animated .gif og My Little Pony running through a field of colorful flowers and butterflies.

If you are talking about not just WI-FI, but actual IP based network attacks then sure folks can hack and will eventually break it, but the most disturbing part about it is that ISPs in the U.S.A. are now providing modem/router equipment that they control via a little known back door elevated account which does let them in even though they try to tell you otherwise. This I know is fact and you can do a search for it to find out how disturbing it really is. In this day and age you cannot live by the adage of "If you aren't doing anything wrong then you have nothing to worry about". This is the Cyber War Age and folks need to take heed.

I can give you a great example. TWC is my ISP. They do not do anything more than basic background checks on technicians AFAIK and been able to tell. IF they are savy and have any number of stupid reasons to penetrate someone's network they can and depending could even fall through the cracks in being audited by their own chain of command. A previous coworker who is a certified Ethical Hacker has tools set up on his network and only 3 weeks after upgrading to one of the new DOCSIS 3 Ubee Routers his network was probed and attemped to be hacked passed the router. He presented his logs to TWC and the technician was only reprimanded as he played it off as a "mistake".

[suckerface]

Originally Posted by fnkngrv

All great information for sure. I am a CISSP and with the history that I have with certain employers and clients I have had to do extensive security work. Since we are talking about WI-FI however and as previously stated I have my broadcast set to roughly 8-15 feet outside of my house depending on which part of the house you are at along with my security camera feed warnings I will know if someone is trying to penetrate and steal bandwidth . I also actually have my WPA2-PSK set to rotate the 4 network keys I use. My family hates it because it is such a pain when they try to add a new device especially since DHCP is also turned off and they have no clue how networks work.

As for the redirect I actually have that set so that if someone opens an internet browser page it goes to one that I built with an animated .gif og My Little Pony running through a field of colorful flowers and butterflies.

If you are talking about not just WI-FI, but actual IP based network attacks then sure folks can hack and will eventually break it, but the most disturbing part about it is that ISPs in the U.S.A. are now providing modem/router equipment that they control via a little known back door elevated account which does let them in even though they try to tell you otherwise. This I know is fact and you can do a search for it to find out how disturbing it really is. In this day and age you cannot live by the adage of "If you aren't doing anything wrong then you have nothing to worry about". This is the Cyber War Age and folks need to take heed.

I can give you a great example. TWC is my ISP. They do not do anything more than basic background checks on technicians AFAIK and been able to tell. IF they are savy and have any number of stupid reasons to penetrate someone's network they can and depending could even fall through the cracks in being audited by their own chain of command. A previous coworker who is a certified Ethical Hacker has tools set up on his network and only 3 weeks after upgrading to one of the new DOCSIS 3 Ubee Routers his network was probed and attemped to be hacked passed the router. He presented his logs to TWC and the technician was only reprimanded as he played it off as a "mistake".

Very well done, but to pose a situation: What about high gain antennas? Kind of defeats a close range broadcast ;) Granted, you have your bases covered otherwise, and I LOVE hearing about other people actually knowing WTF they're doing (no offense to anyone else :0P)

Your point of TWC (who is my ISP as well) is the #1 reason I supervise every install, buy my own modem/router, and do not let them touch my PC (there's no reason for them to, especially to install any software).

The last time they did it, I started doing some configuration of the network, checking IPs, and doing a speedtest. The technician stood there with his jaw open, completely amazed at what (a simple task) I was doing.

FWIW, though I'm not CISSP (vendor neutrality for me) my degrees are in Network Design and Network Security, so you can understand my appreciation of your work and input.

[fnkngrv]

Originally Posted by suckerface

Very well done, but to pose a situation: What about high gain antennas? Kind of defeats a close range broadcast ;)

You use the term "high gain antennas" where I live and someone would ask why you have DishNetwork or DirecTV in your car anyway?



Unless there are some spooks or otherwise deciding to "rough it" or be on a hunting trip for Moose in Northern Maine I think I will be ok...haha

[david_827]

Originally Posted by fnkngrv

As for the redirect I actually have that set so that if someone opens an internet browser page it goes to one that I built with an animated .gif og My Little Pony running through a field of colorful flowers and butterflies.

i would love to see the look on someones face when they end up on that page