Slashdot Mirror

During the actual exploit didn't you notice the MAC address was not a third party but was one for Apple? IP Address was 192.168.1.50 MAC address was 00:17:F2:41:31:6D MAC Address Prefix Vendor 0017F2 Apple Computer This was covered but a lot of people either didn't see it or just chose to ignore it. I am going to bet he did that ifconfig on purpose knowing that people that really pay attention will see that. Or he did that to just throw confusion in the whole deal. http://www.smallworks.com/archives/00000461.htm http://www.smallworks.com/~jim/maynor_exploit_video.mov And for a little humour me$ whois microsoftie.com Registrant: Microsoft Corporation One Microsoft Way Redmond, WA 98052 US Domain name: MICROSOFTIE.COM Administrative Contact: Administrator, Domain domains@microsoft.com One Microsoft Way Redmond, WA 98052 US +1.4258828080

During the actual exploit didn't you notice the MAC address was not a third party but was one for Apple? IP Address was 192.168.1.50 MAC address was 00:17:F2:41:31:6D MAC Address Prefix Vendor 0017F2 Apple Computer This was covered but a lot of people either didn't see it or just chose to ignore it. I am going to bet he did that ifconfig on purpose knowing that people that really pay attention will see that. Or he did that to just throw confusion in the whole deal. http://www.smallworks.com/archives/00000461.htm http://www.smallworks.com/~jim/maynor_exploit_video.mov And for a little humour me$ whois microsoftie.com Registrant: Microsoft Corporation One Microsoft Way Redmond, WA 98052 US Domain name: MICROSOFTIE.COM Administrative Contact: Administrator, Domain domains@microsoft.com One Microsoft Way Redmond, WA 98052 US +1.4258828080

The SCO case includes some behind the scenes activities that might cause an otherwise sane person some paranoid thoughts. http://www.linuxbusinessweek.com/story/48789.htm?D E=1 The suicide of Noorda's granddaughter and heir to the fortune he built up at Novell and Canopy (the holding company that is SCO); the legal and family proceedings revolving around his Alzheimer's disease http://www.informationweek.com/news/showArticle.jh tml?articleID=193200278&subSection=Breaking+News; the suicide of Robert Penrose, a key canopy partner shortly after his firing from the Canopy http://www.smallworks.com/archives/00000250.htm and other details too lurid for even slashdot.

Canopy (and Noorda's family and associates,) apparently are not people who have both oars in the water.

Does anyone want to speculate as to whether PJ has a right to fear these deaths were other than self-inflicted? Under the circumstances, would YOU feel threatened by these people?

It's another piece of the MS attack on the term. It's no mistake.

Does anybody remember "Did the term "Open Source" mean anything, any longer?"

e.g. http://www.smallworks.com/archives/00000472.htm

• threatened Bruce Perens
• vowed to beat Jim Thompson to , simply because he called ESR a liar on teh internets.
• thinks that Western society is literally at war with Islam.
• believes black people are stupider than white people

Ok, I submitted a story, but in case it gets rejected, here you go:

Jon Ellch and Dave Maynor have raised quite some noise about ther recent wifi exploits. But some clever sleuthing from a blogger has dug up some some damning evidence. Most notably a high resolution version of the video (2) where you can see Maynor claiming he is using an external card. He further states that he got an ip 192.168.1.50, but according to the ifconfig output, the mac address associated with that ip is 00-17-F2-41-31-6D. According to the IEEE OUI that mac address belongs to apple. The problem here is that Secureworks claims they he did not hack the apple driver but an external card's driver. Thus the video was faked.

Ok, I submitted a story, but in case it gets rejected, here you go:

Jon Ellch and Dave Maynor have raised quite some noise about ther recent wifi exploits. But some clever sleuthing from a blogger has dug up some some damning evidence. Most notably a high resolution version of the video (2) where you can see Maynor claiming he is using an external card. He further states that he got an ip 192.168.1.50, but according to the ifconfig output, the mac address associated with that ip is 00-17-F2-41-31-6D. According to the IEEE OUI that mac address belongs to apple. The problem here is that Secureworks claims they he did not hack the apple driver but an external card's driver. Thus the video was faked.

*fixed the links:
Here's a mirror: maynor video screenshots (image 6)
If you check the mac address you will see that it's an apple mac address. See the IEEE OUI list.

So, what we have is:
a) Maynor claiming he is using an external card
b) Maynor claiming that the ip they got is 192.168.1.50 (see the video)
c) According to the screenshot the mac address associated with that ip is 00-17-F2-41-31-6D
d) According to the IEEE OUI that mac address belongs to apple
e) Maynor claiming he did not hack the apple driver but an external card's driver

THE VIDEO WAS FAKED. END OF STORY

Oops, the image ran out of bandwith, here's a mirror: maynor video screenshots (image 6)
If you check the mac address you will see that it's an apple mac address. See the IEEE OUI list.

So, what we have is:
a) Maynor claiming he is using an external card
b) Maynor claiming that the ip they got is 192.168.1.50 (see the video)
c) According to the screenshot the mac address associated with that ip is 00-17-F2-41-31-6D
d) According to the IEEE OUI that mac address belongs to apple
e) Maynor claiming he did not hack the apple driver but an external card's driver

THE VIDEO WAS FAKED. END OF STORY

The video was fabricated, see: http://www.smallworks.com/archives/00000461.htm?
Secureworks claims the card used was a usb device, however a high resolution video of the attack shows the mac address and the device (en1) was actually a apple wifi card.
Here is a screenshot of when he typed ifconfig: screenshot you'll see that even tho the claimed it was an external wifi card that was compromised, the connection has gone through the regular airport connection. The smallworks article goes into details, but the video was faked, no question about it.

This guy has a higher-quality copy of the original exploit video, where he points out something pretty suspicious: though Maynor states they are using the unnamed third-party Wi-Fi card, the few seconds where the output of ifconfig is displayed indicate that the IP address they mention (192.168.1.50) is in fact attached to the internal Airport card (en1).

The suicides referred to are those of Val Noorda Kreidel (daughter of technology entrepreneur and Canopy founder Ray Noorda) and Robert Penrose (Canopy Employee). See this blog entry for details and links.

Also:
http://sltrib.com/business/ci_2617160
http://management.itmanagersjournal.com/print.pl?s id=05/03/28/071212
http://yro.slashdot.org/comments.pl?sid=143850&cid =12055828

As long as 802.11 MAC will be used for such networks, it won't "blow". I think they've to invent new wireless communication technique to build mesh networks of thousands of nodes.

See http://www.smallworks.com/archives/00000072.htm for interesting text about this.