Slashdot Mirror


FBI Warns Companies About Wireless Warchalking

nobilid writes: "Well-meaning wireless activists have caught the attention of the U.S. Federal Bureau of Investigation. One of its agents has issued a warning about the popular practice of using chalk marks to show the location of wireless networks."

188 comments

  1. FBI don't take know shit. by Anonymous Coward · · Score: 0

    I'd listen to the FBI dude. After all, when it comes to telecommunications law, they are hard core! Look what happened to worldcom!.. oh wait, they are still in business despite losing 7 billion bucks.... Well... look at qwest!... oh.. no.. wait... they are too....

    Maybe it would make more sense to build a centralized website where people can update this information and the system would correllate it with a real time map that a user could print out if they wanted. Traveling to Houston for the week? Print out a map of the wireless areas and take it with you. Seems much easier than anything else and no legal problems.

    1. Re:FBI don't take know shit. by Anonymous Coward · · Score: 0

      Or you could take the other approach and just leave your laptop/PDA/whatever on and listening, and drive until you find somewhere that looks nice and has some sort of network available.

      That way you don't have the centralized information store that is targeted by lawsuit-happy types.

      As for Houston specifically, if you plan to visit the downtown area, note the vast number of "HayBooNet" APs. It's nuts. They add a lot of noise to the scans. It seems to be some kind of law firm, and they most likely won't let you on like the typical "out of the box" Linksys AP.

  2. Chalk marks? by Anonymous Coward · · Score: 0

    What about encription, surely that would be enough!!
    Well unless you live in London!

  3. misleading by Bilestoad · · Score: 5, Funny

    Hey, great way to distort the truth and make "wireless activists" sound important! From the headline you would think "wireless activists" had themselves drawn the scrutiny of the FBI.

    But all they said was that if you notice a chalk mark advertising your wireless network you should think about securing it. Well duh!

    And "wireless activists"? More like geeks with toys. I wonder how long the novelty lasts for the average "activist". It's a network. But without wires! WOW!

    1. Re:misleading by Anonymous Coward · · Score: 0

      It truly is great to roam around campus with a notebook and no wires and read slashdot. In my school we dont use chalk but acctual signs as to where you can go and still keep your connection. Who the hell uses chalk? 4

    2. Re:misleading by guttentag · · Score: 2

      I would be far more concerned if the headline read "FBI Warns Activists About Wireless Warchalking."

    3. Re:misleading by Sauron23 · · Score: 2, Informative

      I'd have to say people like Adam Shand, Nigel Ballard and the other core members at PTP have stayed fairly involved. Involved enough to be filing for non-profit status for PTP. With a fair chunk of the Portland metro are covered, for free. Portland's Pioneer Courthouse Square (city center) is covered, for free.
      essid: www.personaltelco.net

      At the same time the Starbucks in the same block is charging $$ for wireless access.

    4. Re:misleading by skroz · · Score: 3, Funny

      Exactly three days. The novelty lasts exactly three days. Fortunately, that's short enough that we don't need any survivor's groups and supoprt sponsors.

      --
      -- Minds are like parachutes... they work best when open.
    5. Re:misleading by Anonymous Coward · · Score: 0

      I guess nobody said they HAVE to have lives.

    6. Re:misleading by antirename · · Score: 2

      No big deal... just post guys in the windows with binoculars and tell them to call if they see guys with chalk or crayons. Maybe there should be a "fake" sign... That could be fun. Of course, no one pays any attention to security guys, whether they're from the government or private industry. Which makes it even more fun... if they're ignorant, they don't know if they plugged all the holes or not, do they?

  4. So? by leviramsey · · Score: 4, Insightful

    The FBI is not saying that setting up free wireless networks is a bad thing. They're warning companies that run WLANs to check for warchalking around their buildings and check their LANs for security. This is what they should be doing, but considering how many idiot admins there are out there, they need the FBI to give them security advice.

    Typical.

    1. Re:So? by capnjack41 · · Score: 1
      idiot admins there are out there, they need the FBI to give them security advice.

      It's like leaving your front door unlocked, letting people notice, and needing the FBI to step in and letting you know (although the article said that it's not an 'official' warning, just the passing on of helpful info).

    2. Re:So? by Anonymous Coward · · Score: 0

      College kids make great admins..just ask them.

    3. Re:So? by hendridm · · Score: 2, Insightful

      If it's bad to hire college graduates as admins, who should a company hire? Experienced people you say? What happens when those people eventually die of old age? Since the "college grads" could not be hired, they won't be experienced.

      I guess we'll just get rid of IT in about 40 years. A shame, really.

      Somebody has to hire us, or we'll never get experienced. Alas, this does not seem to be the trend. Perhaps I can go back to school and become a culinary artist. People will always have to eat, but we all know IT is a dead industry.

    4. Re:So? by antirename · · Score: 2

      Yeah, they should, but they don't. In most cases, security is in at least third place.... somewhere behind "does it work" and "can my secretary figure it out". Companies like to buy things, not do things. They buy a firewall, then leave it. Hotfixes? Have to hire someone, so it never happens. Oh yeah, and who's busy checking the logs from that software? After the first week, nobody. Oh well, they can always whine to the feds when they get rooted by a teenager in Pakistan.

    5. Re:So? by antirename · · Score: 2

      I'm trying to hire people... contract work, not long term. The money guy wants to be able to sit down and talk with whoever's coming in. Finding good people is hard... especially when it's your ass on the line if something doesn't work right.

  5. Right target for once. by undeg+chwech · · Score: 2, Insightful

    At least the FBI are warning the companies and not arresting the warchalkers.

  6. If companies don't bother... by Lawmeister · · Score: 4, Insightful

    to install M$ patches for well known exploits, what are the chances that they'll take the additional effort to lockdown their wireless networks, then modify all their client PC's?

    They will only do this after they've been 0wN3d. As per usual.

    1. Re:If companies don't bother... by antirename · · Score: 2

      No chance. None. And you'll stay late one Friday to clean up the mess.

    2. Re:If companies don't bother... by Rogerborg · · Score: 2
      • They will only do this after they've been 0wN3d. As per usual.

      Specifically, they will do it after it's been publically disclosed that they've been 0wN3d. Then they'll sic the MiBs on the white hat that told them they'd been owned. As per usual.

      --
      If you were blocking sigs, you wouldn't have to read this.
  7. Kinda Misleading by mo · · Score: 4, Interesting

    Wow, reading the header I though that the FBI is going after people who create the warchalk marks. But, if you RTA it's a lot less interesting. Basically, the FBI is saying that companies should be clued in if they get a warchalk marking an open WLAN next to their office. Duh. Dunno why I need the FBI to tell me that.

    1. Re:Kinda Misleading by Myco · · Score: 3, Informative

      I don't see what you're talking about. The headline starts "FBI Warns Companies." It states clearly what they're doing. It doesn't say "FBI Goes after Warchalk[ers,ing]" or anything like that.

    2. Re:Kinda Misleading by garcia · · Score: 4, Insightful

      you don't, but the companies do.

      Most would probably think that those marks were either a) gang related or b) random garbage.

    3. Re:Kinda Misleading by kyletinsley · · Score: 1

      This article title isn't that misleading, but a couple other ones I read gave that impression moreso. It's all the same bullshit memo from the FBI, but different people tried to skew it into a more interesting story to varying degrees:

      There was another one I read before that was even worse, but I can't seem to find it now. You can read the actual letter from the FBI here though: http://www.politechbot.com/p-03884.html.

    4. Re:Kinda Misleading by Sancho · · Score: 2

      No joke...that second one was:
      FBI warns 'warchalking' practice could expose business data to hackers--or terrorists.

      It's not the warchalking that exposes the data, it's the dumbasses not securing their networks!

    5. Re:Kinda Misleading by Anonymous Coward · · Score: 0

      "Basically, the FBI is saying that companies should be clued in if they get a warchalk marking an open WLAN next to their office. Duh. Dunno why I need the FBI to tell me that."

      Well, duh. The FBI isn't tell *you* that. They are telling the clueless people who have left their WLAN's open to access from the outside.

  8. kids... by skydude_20 · · Score: 1

    and i just they were just innocent kids doddling on the sidewalk

    --
    Jesus saves souls and redeems them for valuable cash prizes
    1. Re:kids... by Anonymous Coward · · Score: 0

      and i just they were just innocent kids doddling on the sidewalk

      I couldn't have said it more beautifully.

  9. Warchalk sightings by raju1kabir · · Score: 5, Interesting

    Has anyone actually come across any examples of warchalking in real life? (it doesn't count if you did it yourself, or if you found out about it from a news article and went to go see it).

    I walk and bike around DC more or less constantly and I've never seen one despite keeping my eyes peeled. And I know there's no shortage of WLAN networks here (netstumbled the 20-minute walk home from work and got about 40).

    --
    "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
    1. Re:Warchalk sightings by Peale · · Score: 2, Informative
    2. Re:Warchalk sightings by anjrober · · Score: 1

      this is the 'reading about it'...this was posted a while ago...that doesn't count...

    3. Re:Warchalk sightings by Anonymous Coward · · Score: 0

      this should not have been moderated. It was actually linked in the article. Bah.

    4. Re:Warchalk sightings by Anonymous Coward · · Score: 0

      On a business trip about a month ago, I was walking through downtown Bethesda and saw one... Didn't have my iBook with me to check it out though

    5. Re:Warchalk sightings by Herkum01 · · Score: 1

      Abe Simpson: Look here Bart, these are Hobbo signs(points to signs on a fence). They use these to communicate with each other.
      Bart Simpson: So what does these signs say?
      Abe Simpson: They say there is an attractive woman lives here, fine vittles and a hobbo graveyard in the basement!

      Bart & Abe:AAAAAAAAAAAAAAAAAA!

    6. Re:Warchalk sightings by Anonymous Coward · · Score: 0

      Maybe you should try communicating with those signs because you don't appear to even be able to spell "hobo".

    7. Re:Warchalk sightings by Anonymous Coward · · Score: 0

      you don't appear to even be able to spell "hobo"

      Wasn't Hobbo Bilbo's cousin?

    8. Re:Warchalk sightings by Peale · · Score: 2

      Hey, he asks his questions, he gets his answer.

      Although, I must say I don't think I should have been modded as a 'troll.'

  10. actual letter by martissimo · · Score: 5, Informative

    link to the actual Pittshburgh FBI email

    better read than the linked article which is kinda light on detail. interesting to note that the FBI states in it that using a 802.11 access point without "explicit authorization" may be a federal crime

    1. Re:actual letter by mgkimsal2 · · Score: 3, Informative


      "Identifying the presence of a wireless network may not be a
      criminal violation, however, there may be criminal violations if the
      network is actually accessed including theft of services, interception
      of communications, misuse of computing resources, up to and including
      violations of the Federal Computer Fraud and Abuse Statute, Theft of
      Trade Secrets, and other federal violations."


      If they wanted to press harder, essentially anyone who even 'wardrives' (what a stupid term!) looking around for open networks could be violating some federal law. You wouldn't be able to know if a network is open or not until you tried to access it, and you're attempt doesn't have explicit authorization. It'd be like tuning into a radio station (which plays just fine on your radio) that you didn't have authorization to listen to. You would be breaking the law just by checking if you get the station, because that's 'accessing' it.

      It's a bit of a stretch, I know, but damn it, this kind of stuff just gets my goat. With all the money people spend on wireless networks and subsequent 'consultants' why the hell can't they lock these things down too? Is it because the bulk of these people really shouldn't be adminning or setting up any sort of network in the first place? Probably.

    2. Re:actual letter by Anonymous Coward · · Score: 0

      I dunno, that's pretty far out there, on my laptop at least I don't have to even actively check to see if there are any open wireless networks, it just tells me if I have come into the range of a base station (that includes closed base stations)

      That would be like saying it's illegal to walk down the street and notice if someone's door were open or closed, not even go near the house, but just see that it's there.

    3. Re:actual letter by autarkeia · · Score: 2, Insightful

      To clarify: it does not mean operating an open 802.11 access point is a crime, but instead that using someone else's 802.11 access point without their permission is a crime. That's a good point, and should be used as the basis to prosecute spam and DOS attacks.

    4. Re:actual letter by Anonymous Coward · · Score: 0

      Better hope that Hamidi vs. Intel finally gets killed, and 'trespass to chattels' enshrined as a legitimate digital extension to common law, then.

    5. Re:actual letter by jafiwam · · Score: 1

      Would wardriving be an equivalent action to portscanning? As a query for interesting characteristics on a network that one is not authorized to access, they seem like they would be directly analogous.

      Following that, warchalking would be about the same as posting the results of "Hey, I found these ports open on this network" [Providing IP Address] in some newsgroup.

      Obviously, these things are not illegal (nor should they be), and certainly not a thing that someone would do unless they were at least thinking about doing something more interesting with the information.

      This seems like just another example of why one should pay pretty close attention to what is happening on a network. Keep your printer web servers out of Google, secure your wireless, patch your webservers. Duh.

  11. Signs by Tablizer · · Score: 5, Funny

    Someone disguised as a kid made a hop-scotch pattern next my driveway with chalk. They are out to get me. My foil hat is not working anymore! Help!

    1. Re:Signs by llamalicious · · Score: 2

      Obviously, that "kid" works for NASA.
      Please read Skiboo's reply to my post with important information regarding proper usage of tinfoil hats.

    2. Re:Signs by Anonymous Coward · · Score: 0

      MODERATORS Crack smoke wafts though air - Dumb shit moderator - Try to suck less, please
      KAZAA Fuck R I A A - Network sold behind their backs - Stupid fucking cunts Slashdot, Where Editors come to SUCK © ® (TM) HAIKUS Haiku: to the Slashfags. Fuck slash editors - The cumlicking fags they are - I shit upon them.......


      This author is gonna make NASA's mind-reader airport scanner bust a needle going off the scale, or cause a divide-by-zero error in the analysis software.

  12. In other news... by evilviper · · Score: 3, Funny

    In related news, this same FBI agent has filed another warning. This time, the warning talks about the dangers of writing down your passwords on post-it notes, and leaving ot near your computer.

    Oh, what a crazy new world we live in.

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  13. Phew... by TheHouseMouse · · Score: 1

    Thank god that an FBI member told us this info. I would've never checked to make sure my wlan was secure if it weren't for them advising me to do so. I was always under the assumption that my network was suppose to be insecure. Phew, excuse me while I drown in a pool of my own sarcasm.

    --
    Only the meek get pinched. The bold survive.
  14. Just read Slashdot by Anonymous Coward · · Score: 0

    Wouldn't it just be cheaper for companies just to hire one designated employee to sit around reading Slashdot, The Register and similar websites all day? Since my company is essentially already paying me for this service, they might as well just make it part of my job description...

    1. Re:Just read Slashdot by SoSueMe · · Score: 1

      "Pick Me!, Pick Me! I'm more than qualified!", cried a member of the chorus.

  15. Oh no! They're on to us! by Anonymous Coward · · Score: 0

    Stop using chalk! Start using... spray paint! They'll never find out we switched methods. They'll just assume it's kids doing graffiti!

  16. From the article... by Heem · · Score: 5, Insightful

    "The FBI is now telling companies that, if they see the chalk marks outside their offices, they should check the security of wireless networks and ensure they remain closed to outsiders. "

    Hey, how about you do this even if you DONT see chalk marks?

    --
    Don't Tread on Me
    1. Re:From the article... by Anonymous Coward · · Score: 0

      Dude with the recesion and all the american public can`t afford that kinds of warnings, tax dollars at work here!

    2. Re:From the article... by Anonymous Coward · · Score: 0

      > Hey, how about you do this even if you DONT see chalk marks?

      Because bad economy = IT first to get canned. I would leave my company's network open just as revenge.

    3. Re:From the article... by antirename · · Score: 2

      No, I don't feel the risk yet. I'll just give some lawyers a retainer, and donate to my congress critter. I feel much better now... something changed, right?

  17. You mean by Anonymous Coward · · Score: 0

    They're not all busy hunting down terrorists? Damn, Ashcroft had me fooled all along. I thought that was the FBI's expertise, particularly preventing actions like 9/11 from happening.

    1. Re:You mean by Anonymous Coward · · Score: 0

      but hackers are [cyber]terrorists!

  18. Who the hell by swaic · · Score: 1


    is making up these damn terms!

  19. description of the marks and thier uses by 10+Speed · · Score: 4, Informative

    Warchalking PDF

    A handy businesscard sized description of the marks and thier uses...

    1. Re:description of the marks and thier uses by Weffs11 · · Score: 1

      Thanks, I was just gonna ask what the marks are.

  20. Taking sailing lessons from the Titanic captain... by mellonhead · · Score: 3, Funny


    Well-meaning wireless activists have caught the attention of the U.S. Federal Bureau of Investigation. One of its agents has issued a warning about the popular practice of using chalk marks to show the location of wireless networks."

    And in other news...

    Careless FBI agents have caught the attention of well-meaning wireless activsts. One of its members has issued a warning about the frequent practice of losing laptop computers, not to mention weapons. As reported by CNN on July 19, 2001, "The FBI reported Tuesday it had tentatively determined that more than 400 firearms and another 184 laptop computers -- including one that contained classified information -- are unaccounted for."

  21. Warn? by jmd! · · Score: 5, Funny

    > One of its agents has issued a warning about the popular practice of using chalk marks

    Warn? WARN?! Why warn when you can just outlaw chalk! It's this kind of thinking that's getting government computers hacked and innocent civilians killed.

    1. Re:Warn? by Ziviyr · · Score: 1

      Why warn when you can just outlaw chalk!

      Really, we should have a branch of military that shoots on sight people found holding chalk. We could have them patrol schools since thats where drugs and gangs are.

      --

      Someone set us up the bomb, so shine we are!
    2. Re:Warn? by Anonymous Coward · · Score: 0

      Why warn when you can just outlaw chalk!

      If you outlaw chalk, then only outlaws will have chalk.

      And that is dangerous because they might......um....they might....um.....well, like do something really bad with it.

  22. we should extend this principle by jukal · · Score: 4, Funny

    ...why is it that only nerds come up with good things. Why don't everyone start chalking, when there's some good resource to steal...erm... use. Like, we could chalk the neighbour's wifes excellent pizza, another neighbour's apples, that lady who is always ready, local tobacco shop which sells marijuana as well. The list could go on and on! We could also invent a fancy name for it, though "war" is cool already :)

    1. Re:we should extend this principle by lpontiac · · Score: 2

      We could also invent a fancy name for it, though "war" is cool already :)

      War on Payment!

    2. Re:we should extend this principle by Anonymous Coward · · Score: 0
      "local tobacco shop which sells marijuana as well."

      Late night fast food places do this a lot. Ask for another company's food sometime when you go in there.

    3. Re:we should extend this principle by Anonymous Coward · · Score: 1, Informative

      Warchalking is a modern form of an old communication method. Read more about hobo signs. These signs were actually used for the kinds of things you jokingly suggest.

    4. Re:we should extend this principle by Tablizer · · Score: 3, Funny

      (* Why don't everyone start chalking, when there's some good resource to steal...erm... use. Like, we could chalk the neighbour's wifes excellent pizza, another neighbour's apples...*)

      My wife was wondering what that dusty mark was on her ass.

    5. Re:we should extend this principle by Anonymous Coward · · Score: 0

      Hey, what the heck. I've tried this before on a bet, I went into both Wendy's and McDonald's asking for a whopper (mainly because I like saying the word 'whopper') and they just looked at me funny, asking me if I meant a quarter pounder or a single with cheese. I've heard this before and between my friends we've tried a good 20 some fast food places around here without any luck. It's not like we can't find any other place to get weed, it'd just be nice to confirm or dispell this rumor that keeps getting floated around.

    6. Re:we should extend this principle by Tablizer · · Score: 2

      (* Warchalking is a modern form of an old communication method. *)

      Any relationship to this slashdot story?

    7. Re:we should extend this principle by Anonymous Coward · · Score: 0

      My wife was wondering what that dusty mark was on her ass.

      She knows, that's why she is smiling when you get home from work.

  23. bah by wo1verin3 · · Score: 1

    Have they banned chalk yet? Soon the chalk companies will be in same kind of trouble the Sharpee people are!

  24. What's the Big Deal? by dmarx · · Score: 2, Insightful

    The FBI is telling companies, "If you see this symbol outside your building, it probably means that your network is accessable from the outside. Make sure this is what you want." What's so wrong with that?

    --
    "Do I dare disturb the universe?"
  25. well meaning?? by blaine · · Score: 4, Interesting

    OK, these "wireless activists" go around searching for insecure wireless networks, and when they find them, instead of telling the owners of said networks about the problem, they covertly mark the information down so that others can use that network illegally.

    How the hell is this in any way "well meaning"?!

    I swear, only on slashdot ...

    --

    -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    1. Re:well meaning?? by Ziviyr · · Score: 1

      instead of telling the owners of said networks about the problem, they covertly mark the information down so that others can use that network illegally.

      This is the first time I've heard people were doing this covertly.

      Also an open wireless network is an open wireless network, they should like close it or something if they don't want people who have the signal being beamed through their skull using it.

      If people hop up and down going "WIRELESS, COOL! WIRELESS, COOL!" and then get posed with a question to which they respond "Security? Huh?" then they're hidelously unqualified and should be fired and blacklisted for compromising the business.

      You don't walk around holding your wallet open and point it at people and mutely follow them around within a certain area and expect some people aren't going to look and maybe even take. You shouldn't be surprised when it happens.

      --

      Someone set us up the bomb, so shine we are!
    2. Re:well meaning?? by BenHmm · · Score: 5, Insightful

      Because this isn't the point of warchalking. Most warchalkers - and I made the first ever warchalking mark - use them to mark out their own open nodes, for the sake of others using them. I've seen many many warchalking marks around London, and none of them is for an unintentionally available network.

      The FBI's whole premise is bollocks, and you shouldn't assume that because it's possible to mark up a wlan that isn't yours that people actually do.

    3. Re:well meaning?? by blaine · · Score: 3, Insightful

      Maybe I'm crazy, but every single article I've ever read about warchalking has implied to me that the purpose of warchalking was to break into networks not owned by you. This includes articles both by people for and by people against the practice. I have never heard of using warchalking in order to tell people about an intentionally accessible network.

      In fact, to me, that makes absolutely no sense. Why not just put up a flyer? Why use obscure chalk marks on the wall that can wash away? The only benefit that warchalking marks have over a flyer is that most people won't recognize them. The only reason that you wouldn't want people to recognize the marks is if you don't want the people running the network to realize that it is open.

      Might I also add that if you did "invent" warchalking, you chose just about the worst name possible. Every technical person I know who has heard that word immediately associates it with the term "wardialing". Wardialing is not a benevolent act, and in fact, is about as rude and hostile as possible. Perhaps you need to think a little more about these things next time around, and perhaps you need to talk to the people out there warchalking, because I've never been given any impression by their words and actions excepting that all they want is a free ride on a network that isn't theirs to play with.

      --

      -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    4. Re:well meaning?? by blaine · · Score: 2

      Bad analogy. A better one is as follows:

      You're a locksmith, and you're out doing some shopping. While stopping in a cafe, you happen to notice that the lock on their front door is a model of lock that you know from experience is easy to jimmy. However, instead of telling the owner, you go outside, step into an alley, and pull out some chalk. You then proceed to write out some marks on the wall that inform others who are knowledgeable about the marks exactly how to break into this cafe.

      Tell me again how this sort of activity is "well meaning"? Oh, that's right, it's the cafe owner's fault for not realizing the lock could be a problem. You're not doing anything wrong at all by intentionally telling only those with an interest in abusing this information about it, really.

      --

      -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    5. Re:well meaning?? by BenHmm · · Score: 4, Informative

      You may have been reading articles written by the clue-lacking. The NYT piece is good. BusinessWeek isn't bad either.

      Meanwhile, I totally agree about the name. It is misleading: but it, and the use of chalk for that matter, were just chosen because, well, they sound cool.

      As for why an icon and not a flyer - well, because iconography is inherently more understandable. Why have roadsigns that are symbols and not words? Because they're easy to understand, and to see.

      Have a look at Warchalking.org - Matt Jone's site, for better examples.

    6. Re:well meaning?? by blaine · · Score: 2

      Iconography is not inherently more understandable. It is more understandable when the icons used are well known and useful. Warchalking marks fall into neither of these. They are not (and most likely never will be) well known, and for most people, they are of no use.

      I mean, I'm the kind of person who could benefit from an intentionally open network, but you know what? I'm never going to take the time to learn yet another "standard" written by someone who felt the need to make things much more complex than is necessary. However, if I was in the city, and I saw a sign that said "If you'd like to use my wireless node, the info is: blah blah blah", that'd be easy to use, obvious, and useful to even those who aren't inherently technical people.

      To me, warchalking is just another geek attempt at being "cool" and "elite", as if knowing what chalk marks on the wall mean somehow makes someone a better person. That might not be the intent, but it's how it comes off to most people who aren't into it. It's an unnecessarily complex method of conveying information when there are already good methods of doing conveying such information.

      --

      -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    7. Re:well meaning?? by Pfhor · · Score: 3, Informative

      If you take a look at the war chalking card, which includes the 3 different symbols used. One of which is a Wep Node , where you can list the SSID and the contact email address of the person running the node (to ask for permission to get on).

      So war chalking is again a tool used to identify wireless access points. ones that are open, closed, and ones that require permission to access. How people use this tool is up to them.

    8. Re:well meaning?? by BenHmm · · Score: 2

      It's not complex - because you don't need to know the SSID to access an open node - you just need to know it's there in the first place. The additional information in a warchalking mark is totally superfluous.

      But fine, if you don't want to know that a big curly X on a wall means "Wireless bandwidth here" then go without. nerr nerrrdy nerrr nerrr.

    9. Re:well meaning?? by Anonymous Coward · · Score: 0

      The thing I noticed on that card image was:

      "leave a chalk symbol for others to find."

      That sort of implies the point is to get the word out, but in a way that the owner of the network wouldn't perceive.

    10. Re:well meaning?? by dattaway · · Score: 2

      These symbols assume everyone is still using 802.11b, not the new 5GHz "a" frequency. Google returns nothing. Perhaps "a)(" would be a good symbol for this juicy new band?

    11. Re:well meaning?? by dgp · · Score: 5, Insightful

      No no no. you've got it all wrong. The reason people should be warchalking is to mark OPEN nodes. Nodes that belong to groups like Personal Telco Project in Portland, OR, or Seattle Wireless, or Austin Wireless. These nodes are MEANT to be used for FREE by the PUBLIC. Thats why people should warchalk. Thats why there are two separate symbols, a closed circle for closed networks (meaning stay away) and an 'open circle' for open networks, saying go ahead and use it.

    12. Re:well meaning?? by Art+Tatum · · Score: 1
      To me, warchalking is just another geek attempt at being "cool" and "elite", as if knowing what chalk marks on the wall mean somehow makes someone a better person.

      To me, this post is just another lame attempt at labeling everything in sight, "Another geek attempt at being 'cool' and 'elite'".

      No matter where you go (aviation, skateboarders, newspaper editors, construction workers) there are various inside jokes, conventions, and forms of jargon in use. These things arise out of the ether and are not intended to be exclusionary or elitist. In fact, they usually aren't intended to be anything--they just happen. And people who complain about them come off looking like whiners.

      There isn't much that's more elitist than people who run around screaming about elitism.

    13. Re:well meaning?? by Anonymous Coward · · Score: 0

      'Attempting to be cool and elite' is very different from "elitism".

      Sort of like attempting to be social is different from socialism. (not that there's anything wrong with socialism).

      The words are related, but there is a clear distinction. Elitism does not mean what you seem to think it does.

    14. Re:well meaning?? by _Sprocket_ · · Score: 2


      Iconography is not inherently more understandable. It is more understandable when the icons used are well known and useful. Warchalking marks fall into neither of these. They are not (and most likely never will be) well known, and for most people, they are of no use.


      One is not going to immediately understand all symbology one encounters. But ignorance of a symbol system does not immediately negate that system's value or usefulness. How much of the public understands HAZMAT placards (including the NFPA Diamond) that they see on trucks and cargo transportation systems around them on a regular basis? Yet this is a very useful system that is, by Federal regulation, widely used.

      Fine, fine. But as you pointed out - what good are these Warchalking symbols if nobody understands them? You will find that as a meme, Warchalking has already made pretty good headway. It has gone from an odd, and somewhat obscure idea on a website to being referrenced to in numerous world-class publications and at least one public statement from a US Federal agency. The meme is being spread - whether it takes hold and survives will probably depend on how useful people find it.


      I mean, I'm the kind of person who could benefit from an intentionally open network, but you know what? I'm never going to take the time to learn yet another "standard" written by someone who felt the need to make things much more complex than is necessary. However, if I was in the city, and I saw a sign that said "If you'd like to use my wireless node, the info is: blah blah blah", that'd be easy to use, obvious, and useful to even those who aren't inherently technical people.


      This leads in to our next point - how useful is the Warchalking symbol system? Sure - one can advertise one's node via the various websites out there and posting a sign on a physical public bulletin board. But that would assume that those who could use your node already know about the website and had the forethought to jot down the information in advance. And public bulletinboards are rare enough in their own right. You might attract the ire of the local city if you stuck pieces of paper to the sides of buildings. You could write out "If you'd like to use my wireless node..." in chalk but that requires a LOT more effort to write and is not as easy to understand quickly if somebody is walking by.

      A chalk symbol is a non-damaging way of marking information that is both easy to mark and quick to understand if the individual has taken the time to learn the basic symbology.

      One final observation - I find it odd that you refuse to learn something that you claim you could benefit from. And then you claim the system is complex. I would suggest you actually take a look at the system you are criticizing. You may find it a lot less complex than you imagine. But be careful, you may loose the ignorance you seem place so much pride in.
    15. Re:well meaning?? by MoneyT · · Score: 2

      1) If you are a network admin, and you are an admin of a wireless network. And you are not up to date enough to at least have heard of warchalking and have some inkling as to what the odd markings outside your office meant, then you really deserve what's comming to you.

      2) If these people just walked into the main lobby and said "Your network is insecure" they would be escorted out the door. If they said "I just hacked your network" they would be arrested and thrown in jail. So how do you propose to inform the business without getting a kick in the ass or thrown in jail?

      3) What covert? It's friggen plain as day, you just have to be up to date. Which YOU SHOULD BE if you are an admin.

      --
      T Money
      World Domination with a plastic spoon since 1984
    16. Re:well meaning?? by Rogerborg · · Score: 2
      • when they find them, instead of telling the owners of said networks about the problem, they covertly mark the information down so that others can use that network illegally.

      Nice troll. There's nothing "covert" about it. That's the whole point. You are informing the network owner the same way that you are informing everybody else. If they choose to ignore your chalk, or they're too clueless to know what it means, then they weren't going to pay any attention to your attempts to tell them directly that they've got a problem.

      And that's not from speculation, that's from experience. My own employer's IT department wouldn't even listen to me (trusted peon) when I told them directly that their network was insecure. "What's the big deal?" was the gist of their response. So I warchalked it, and when management started asking what the "big butterfly thing" was outside the building, the network (as if by magic) got locked down.

      Warchalking - like any tool - can be used for good and bad purposes. But don't blame the tool, and don't make assumptions about the intentions of the toolmaker.

      --
      If you were blocking sigs, you wouldn't have to read this.
    17. Re:well meaning?? by Brendor · · Score: 1

      from the Article

      The chief information officer of the state of Utah, Phillip J. Windley, wrote Mr. Jones about his interest in using the symbols in state office buildings. "I was struck immediately when I was reading about war chalking that it was a way to solve a problem that we had, which is we have 22,000 people going to conference rooms in buildings that they don't necessarily work in every day," Mr. Windley said in an interview. "How do you tell them that there's wireless there?"

      Mr. Windley also likes the viruslike nature of the idea -- users will teach one another the symbols. Mr. Windley said he is already planning the signs as he prepares to deploy Wi-Fi in the most heavily trafficked buildings. "As we roll networks out, we'll put the signage out with the networks," he said.

  26. They can't... by kyletinsley · · Score: 4, Insightful

    At least the FBI are warning the companies and not arresting the warchalkers.

    Well maybe that's because warchalking isn't ILLEGAL... All they're doing is walking around with a laptop and noting when someone else is broadcasting networking signals in an area. It's against federal law to attack the computers on that network, or misuse their bandwidth to mess with other people's computers, but putting a chalk mark on a wall to signify that the schmucks inside need to tighten their security is probably the least destructive thing they could do to them. It's like publicly announcing a security hole in a Microsoft product, except they do so by taping a notice to the door of Microsoft's front lobby. Sure, it's public so anyone can read it, but the number of people who pass by it is very small (compared to putting this info on a web page like another poster mentioned), and most of those people are are very likely to be the Microsoft employees themselves...

    1. Re:They can't... by Sheetrock · · Score: 2, Informative
      I wouldn't make a blanket statement like this right now unless you have done some conclusive research into federal, state, and local laws or have some knowledge the rest of us aren't privy to. It strikes me as being very plausible that the laws on the books could be interpreted as making something as simple as turning on a laptop running Windows with a wireless LAN card in the area of somebody else's wireless network a crime, particularly if it is argued that warchalkers are doing this with the specific purpose of determining whether or not it is possible to use a network that doesn't belong to them. Just as, say, buying pills from the suspicious man on the corner to turn over to the authorities as proof of drug dealing or randomly turning handles on doors in a neighborhood to determine whether or not they're locked might be misinterpreted, warchalking too is something that people shouldn't bother with unless they're fully cognizant of how bad it's going to look if they get caught.

      Personally, I'd say screw it; security consultants get paid better than warchalkers, they're better appreciated, and they don't do jail time. There are plenty of better ways to be a good samaritan without having to second-guess the law.

      --

      Try not. Do or do not, there is no try.
      -- Dr. Spock, stardate 2822-3.




    2. Re:They can't... by undeg+chwech · · Score: 2, Insightful

      I didn't say it was illegal ... but would you have been surprised if the headline was "FBI arrests warchalkers" ?

    3. Re:They can't... by bsartist · · Score: 2

      Well maybe that's because warchalking isn't ILLEGAL

      I get what you're saying here, and for the most part I agree. But technically, unless you own the building you're chalking, you could get arrested for graffiti, vandalism, or some such.

      --
      Lost: Sig, white with black letters. No collar. Reward if found!
    4. Re:They can't... by A+coward+on+a+mouse · · Score: 1

      So... all I need to do to legally prevent my neighbor from using WLAN is to use it myself? This is great. I hate that guy.

      --
      If you mod me down, I will become more powerful than you can possibly imagine.
    5. Re:They can't... by Anonymous Coward · · Score: 0

      But its chalk, it washes off, I would hardly call that vandalism. You are not destroying any properity. If chalking things on sidewalks was illigal, the police would be out en-masse at your local university arresting the hundreds of people who write on the sidewalk.

    6. Re:They can't... by fliplap · · Score: 1

      IBM got in trouble for chalking ads, just because its tollerated doesn't make it legal.

    7. Re:They can't... by Alien+Being · · Score: 1

      BS. When it comes down to it, the only law anyone in the U.S. should give a rat's ass about is the constitution. Fight the rest with Uzis and hydrogen bombs if necessary.

    8. Re:They can't... by kyletinsley · · Score: 1

      IBM got in trouble for chalking ads, just because its tollerated doesn't make it legal

      IBM got in trouble because the marketing company they hired to put these things all over the place told them that the special 'semi-permanent' chalk they used wouldn't blow away in the wind, but would wash away with the first rain storm that came through... the problem was, it didn't. It was there for weeks, and the city (or county, I can't remember) had to pay people to come and clean it up.... just like would have to with spray paint or other non-temporary marking substances. Which means it was considered vandalism and destruction of public property because they had to pay money to fix it.

      This is obviously on much more massive scale initiated by a single entity, than a couple dozen individuals drawing a half-circle on a building with regular chalk. And my point was, that even if the city/county where this was done considered it vandalism, it is NOT A FEDERAL offense, so the FBI wouldn't be involved anyway. (Unless it was on a church property... gotta love the wacky hate crime laws).

    9. Re:They can't... by kyletinsley · · Score: 1

      It strikes me as being very plausible that the laws on the books could be interpreted as making something as simple as turning on a laptop running Windows with a wireless LAN card in the area of somebody else's wireless network a crime, particularly if it is argued that warchalkers are doing this with the specific purpose of determining whether or not it is possible to use a network that doesn't belong to them.

      Then why isn't the FBI swooping down and making massive arrests of everyone who does pings of entire class C's at a time? As a network administrator I stopped logging all of those ping scans and port scans a long time ago. It's just a waste of disk space to do so, because there are so many of them, and they happen every day. I had a colleague of mine who would actually call the fucking FBI and/or email them the logs of people portscanning his computers.... they don't give a shit about that. You know why? Because it is completely impossible to take over a computer and/or destroy data just by pinging its ports.

      Now pings/port scans are similar to warwalking/driving in that they can be used to identify potential targets for later hacking, and possibly give you information about what type of OS and software it is running based on the services that are listening publicly. But doing this is NOT hacking, and it is only using the packets in the ways they were intended, to see what the person's computer is announcing as publicly available services. Launching a DDOS attack on someone by flooding them with these same types of packets by the millions is NOT using them in the way they were intended to be used, and with the specific intent of disrupting the services provided by the target computer, and so it is illegal. But scanning with one packet at a time is not.

      I would argue that warwalking/driving is even LESS invasive than IP scanning, because the scanners are not brute forcing their way thru the address ranges. They are just standing on public property, using their own equipment to see who is broadcasting things through the air TO THEM. As long as all they're doing is noting the fact that they can have network access by standing in a certain spot, they are not doing anything wrong. If they go ahead and put a chalk mark on the wall or sidewalk, you could stretch the imagination to say they were 'vandalizing' every so slightly. But again, the FBI does not handle vandalism cases (except on church property), so the _FBI_ would not be arresting people for warchalking. Which was the point I was trying to make in the original post, although maybe not clearly enough.

      Of course in this crazy political atmosphere, all this may be changed with no notice, if some congressman decides to add "warchalking" to a list of suspicious "terrorist acts", and BOOM now it's a federal crime. So of course, as you sort of indicated, anyone who plans on doing this should be paying close attention to national political developments.

      Just as, say, buying pills from the suspicious man on the corner to turn over to the authorities as proof of drug dealing or randomly turning handles on doors in a neighborhood to determine whether or not they're locked might be misinterpreted, warchalking too is something that people shouldn't bother with unless they're fully cognizant of how bad it's going to look if they get caught.

      That's not a very good example (the buying drugs one). You're using an example of doing something that is CLEARLY illegal, and has been sucessfully arrested for and prosecuted and sentenced MILLIONS of times, to argue that something else which only MIGHT BE misinterpreted as illegal and has NEVER been arrested for, should clearly be considered illegal. (Hope that understandable.) The example of turning handles on doors in a neighborhood is less clear cut, but has anyone in the history of man ever done that though? There ARE people who go to every door in a neighborhood (selling cookies/makeup/Jesus), but they don't ever try the door knob if there's no answer. And there people with criminal intent who would go up and try the doorknob on a house to check for an easy access point, but they typically steal all the shit in the house and then get the hell out of that neighborhood as quickly as possible.

      I think the FBI was only making a public announcement about these activities to warn the general (corporate) public about the POSSIBILITY of people entering their networks from the "inside", since most people wouldn't even consider it. Most people are going to understand by now that a computer stuck on the internet on its own is going to get probed, and mostly have someone try to hack it. But it's not that general of knowledge that people outside your building can access your network from within your side of your firewall, if you're using a wireless LAN. They were just using warchalkings as proof-of-concept of the warning they were giving, and the media bastards tried to skew it to sound more ominous, which is of course, what they do. But as you obviously know, the laws are only enforced thru interpretation, so everyone should consult a lawyer before attempting anything more complicated than wiping your ass...

  27. Workaround by Anonymous Coward · · Score: 0

    Once people start checking for these things, more advanced hax0rs ("advanced hax0rs"? Didn't know they exsisted...) will use those cool markers that you can only see under blacklight!!!

  28. Interesting Location by CajunArson · · Score: 1

    The FBI agent in question issued the warning for
    Pittsburgh, home of Carnegie Mellon University (so what?) Well CMU has one of the most elaborate wireless networks in the country, and a whole bunch of guys who are experts at using it (and probably are responsible for many of the chalkings).
    Also, I have an access point I was using at my old school in Indiana where very few other people
    had wireless setups (Purdue only had it in 2 buildings, but that has expanded since I left). Anyway, my point is that from my room in a Pittsburgh townhouse, Kismet found 2 other access points, and I'm sure that would only grow if I went war-walking with my laptop. I'm no longer using the access point, because even though it might sound cool to share your connection, if you can't control who is using it, you run all kinds of risk for legal liability. If someone were to use an access point I owned to trigger DDOS attacks, I would be the one to get screwed, and wireless just makes doing that a little too easy.

    --
    AntiFA: An abbreviation for Anti First Amendment.
  29. So it seems someone at the FBI... by Rui+del-Negro · · Score: 2

    ...watches "Click Online" on the BBC. That will shut up a lot of people who say they are completely clueless. :-)

    RMN
    ~~~

    1. Re:So it seems someone at the FBI... by Art+Tatum · · Score: 1

      Being watched by someone at the FBI doesn't necessarily validate anything. :-)

    2. Re:So it seems someone at the FBI... by Rui+del-Negro · · Score: 2

      Well, statistics show that if the FBI is watching you, there's a good chance you are at least not a terrorist. ;-)

      RMN
      ~~~

  30. Destroying Hop-Scotch players by Lieutenant_Dan · · Score: 0

    I mean, there I was, along with my buddies from the pub playing hop-scotch, when the federales busted us for drawing lines on the sidewalk.

    Also, what the fsck is a "subnet mask"?

    When only law enforcement agencies are allowed to hack into wireless networks then the terrorists have already won.

    --
    Wearing pants should always be optional.
  31. "Well-meaning wireless activists" by frostgiant · · Score: 1

    "Well-meaning wireless activists". Yeah. I am sure they are "well-meaning". If you saw these marks, would you understand them? Or are they for other people who understand them to breach your security and get on your network. Do not make this sound like some noble cause because it is not!

    1. Re:"Well-meaning wireless activists" by Anonymous Coward · · Score: 1, Insightful

      If you leave your lights on at night with the windows open does this make it immoral for me to stand outside and read my newspaper in the glow emitted?

    2. Re:"Well-meaning wireless activists" by Anonymous Coward · · Score: 0

      YES! that's my light damn it, give it back!

  32. It's not easy to report holes by mgkimsal2 · · Score: 5, Insightful

    Have you ever TRIED telling someone that you're not employed by that they have security issues? (If you're an employee, it's still a hard enough issue sometimes, depending on politics).

    I had a friend who had a friend who ran a webshop, with everything running NT. We benignly poked around for all of about 90 seconds probing for 2 known NT holes (had been known about for over a year at that point) and found the entire database for a local HR company completely exposed via the web (SQL Server 7 I believe it was). Repeated phone calls and emails to that shop went unnoticed. Notifying the HR company that their data was exposed and that they should notify their webshop resulted in threats of lawsuits and other less legal retaliatory measures for 'hacking', 'breaking in', etc.

    Walking in to someone's house through their open front door is seen as bad, even if you're simply trying to tell them that their door is open and they should close/lock it because of burglars. Hell, you might even be a master locksmith, but they'll probably still call the police.

    It's just not that easy to tell the network owners they are vulnerable. You may very well face 'hacking' charges.

    1. Re:It's not easy to report holes by blaine · · Score: 4, Insightful

      So you're saying that, because it's too hard to tell someone about the problem, it's better to share that information covertly to others who will abuse it?

      This isn't like revealing security problems in software publicly for all to see. Warchalking is in no way going to help the problem, because the covert nature of it pretty much precludes any possibility of the owner of the network finding out about the problem. It'd be one thing to send a letter to them, or, alternately, try to publicize the problem somewhere. However, warchalking does not take a public approach. All it does is make the problem worse, by inviting unscrupulous people to come in and abuse the network.

      --

      -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    2. Re:It's not easy to report holes by mgkimsal2 · · Score: 3, Interesting

      I don't subscribe to the idea that these people are doing something 'covertly'. If it was 'covert' they wouldn't put it out in public, for starters. It'd be on a password-protected website or something else harders to get to.

      Also, as many others have pointed out, some people chalk themselves to let people know that they can use the wireless access.

      Your point was that people should tell the network point owner about the 'openness'. I say no - let people find out for themselves. Unless a company has some sort of 'contact us' form for technical people to submit real technical issues (website problems, security issues, etc) that will in fact be addressed by technical people who won't respond with lawsuits, I'm not bothering to do their work for them for free.

      try to publicize the problem somewhere
      Putting chalk marks outside a building seems pretty public to me. I guess they could make the chalk marks larger, but then you'd be in trouble for graffitti (IBM/Linux chalkings). Warchalking IS a public approach, but it's not necessarily signifying a 'problem' - it's just pointing out a circumstance. The label of 'problem' is for the network owner to decide.

    3. Re:It's not easy to report holes by bokmann · · Score: 5, Funny

      A guy I know had a wireless network appear in his building one day... and it wasn't his... it belonged to another company in the same building.

      He periodically sent pages to their printer that said in big letters, "The wireless network is insecure! Please secure your wireless network!"

      After a couple of weeks, it went away.

    4. Re:It's not easy to report holes by mgkimsal2 · · Score: 2

      That's classic. :)

    5. Re:It's not easy to report holes by blaine · · Score: 2

      Warchalk marks are not public because the people who would benefit from the information (ie. the network owners) most likely aren't going to know what the hell the information means. The may be in public places, but nobody (aside from a few geeks) is going to know what they say.

      I mean, this is like saying "Of course I told the network owner about the problem! I wrote out the pertinent information very clearly on the wall, in sanskrit!"

      --

      -[Blaine]- "'Oh dear,' says God, 'I hadn't thought of that,' and promptly vanishes in a puff of logic."
    6. Re:It's not easy to report holes by Anonymous Coward · · Score: 0

      If the network owners don't know what it means, then they can learn. For years people have had to learn obscure shit to better secure their networks, these few marks seem pretty simplistic by comparison.

    7. Re:It's not easy to report holes by TicTacTux · · Score: 1
      ...You can still sue them for indecent exposure. ;-)

      Or if you find evidence of 'creative accounting' (if you don't know what that is, ask Arthur Andersen LLP), even better.

      Here [Switzerland] the 'law of the day' sez if it doesn't need special knowledge/skills to break into a network, it is regarded equivalent to an accidental glimpse just like you see someone hackin' in his PIN at an ATM.

      --
      Use The Source, Luke!
    8. Re:It's not easy to report holes by Anonymous Coward · · Score: 0

      Warchalk marks are not public because the people who would benefit from the information (ie. the network owners) most likely aren't going to know what the hell the information means.

      War chalking is NOT done for the benefit of the owners. It's done for the benefit of people who want to connect to a node in that area.

      But that has anything to do with the info being 'public', anyway. If warchalking were really intends for the nefarious purpose the FBI claims, would the originators really be discussing it in the NY Times or putting up a website with a key to the marks?

    9. Re:It's not easy to report holes by Tablizer · · Score: 5, Funny

      (* He periodically sent pages to their printer that said in big letters, "The wireless network is insecure! Please secure your wireless network!" After a couple of weeks, it went away. *)

      The printer went away?

      You're right, they *do* have security problems :-P

    10. Re:It's not easy to report holes by Jeff+DeMaagd · · Score: 2

      A guy I know had a wireless network appear in his building one day... and it wasn't his... it belonged to another company in the same building.

      He periodically sent pages to their printer that said in big letters, "The wireless network is insecure! Please secure your wireless network!"


      I think that is funny.

      I think that this might be the best way to warn of security issues. Certainly not contact them directly, if you don't identify yourself, they don't believe your credibility, if you do ID yourself, you open yourself up to liability, and any traceable method of contacting them is bad.

      They still won't be happy, but happiness is rarely a response you get from anyone whose ignorance is blown.

    11. Re:It's not easy to report holes by st_george · · Score: 0

      Very true. I took over 3 days to persuade someone at Dell that their Excel-file price list was infected with a new virus (om/tristate, IIRC).

      I only found it because I had the newest AV updates available, and this found something in the file, even though it didn't know what it was. NAI confirmed it was a new one called Tristate, and that it was nasty (it later gained a payload that changed data in files in a non-reversible way).

      Dell had this file as the price list for the dell.co.uk for a full week. God knows how many people downloaded it. When they *did* remove it, they put a message saying there had been a 'technical problem' - not quite the 'Sorry, you may have downloaded an infected file, here's how to remove it' message I would have liked to have seen.

      Of course, when the press found out (I told them, pissed of at Dell's lack of movement and/or remorse, their statement said 'it was down within 30 minutes of the right poeple finding out' - the fact someone had tried for 3 days at his own expense to let them know was not mentioned...

    12. Re:It's not easy to report holes by Ionizor · · Score: 1

      Nevermind that... Have you ever tried telling someone that you ARE employed by that they have security issues? Every member of the Primary domain all across North America (that's 100 000 users for those who are counting) has Administrator access to every user terminal on the network.

      I've told them this is stupid. They won't listen to me because I'm just the student.

      So I've stopped telling them about security issues I come across as they clearly don't give a damn. The classic quote in response to a file and print sharing hole that would let anyone retrieve all the real names and usernames on a domain controller was "Thanks but concentrate on BIOS updates."

      --

      --
      Todd's Law: All things being equal, you lose!
  33. stupid linking by Scudsucker · · Score: 1

    One of its agents has issued a warning about the popular practice of using chalk marks

    The point of a referal link is so we can find out what you are talking about, not to send us to another page with another bad link explaining what Warchalking is.

  34. Thoughts by Anonymous Coward · · Score: 0

    So, the FBI, they of the "terrorists, what terrorists? oh, them in the plane" mentality, finally get round to spotting that corporate America is merrily beaming its data out to anyone who wants to look for it and who gets written up as being to blame? The hackers. Not the IT security consultants pocketing the greenbacks for another audit.

    Two questions:
    1) don't the FBI have better things to do than worry about a few geeks and their chalk?
    2) why this blame culture against hackers? they're the ones finding the weaknesses (for free) that the paid-for consultants missed?

  35. THE ARMY OF THE 12 Monk... Wait its just WLAN Crap by Anonymous Coward · · Score: 0

    I bet dude that is investigating the chalk markings was sent by bruce willis himself to make sure we don't screw up the future with knowledge of knowing where each WLAN node is.

  36. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  37. sigh by Mr]-[at · · Score: 1

    2002-08-16 16:33:47 FBI warchalking (articles,news) (rejected)

  38. Protect yourself by wazzzup · · Score: 5, Informative

    There's a great article at Extreme Tech that discusses 802.11b insecurity and what you can do to make it secure enough to make it uninteresting to the casual bandwidth thief - particularly if there are enough wide open networks in the vicinity.

    In a nutshell:

    1. Enable WEP. Yes it can be hacked but it does add a barrier to entry that the casual wardriver won't bother with if there are other wide open networks around.

    2. Change the default SSID. Don't change it to your company's name or your street address as it makes it easier to zero in on your location.

    3. Disable "broadcast SSID" if your access point allows it. That way the SSID of the client must match the SSID of the access point. Having it enabled allows any SSID to be accepted.

    4. Change the default password of your access point. Programs like NetStumbler display your access point MAC address which can then be used to determine what make and model your access point is. Once it's known what you've got, the default password may be easily known.

    5. Control access via MAC addresses. Yes, MAC addresses can be spoofed but it requires an extra level of sophistication for the would-be bandwidth thief to get in.

    6. Disable DHCP in your wireless router. Allow access via static IP's from your NIC's MAC addresses. Yes, IP addresses can be sniffed out but it's another barrier put up for the casual "drive by".

    7. Change your IP subnet. If you're using a wireless router and you've disabled DHCP, change the default subnet addresses as well, otherwise it's easy to guess a valid IP address.

    8. Move your access point away from windows. Move it to the center of your building to make the signal to the street that much weaker.

    9. Buy access points with flashable firmware. Helps you keep up with changing security protocols rather than being stuck with the ones that came with the access point.

    10. Some access point manufacturer's have non-standard security features. Orinoco access points are able to "close" thier networks by not broadcasting thier SSID. They also have additional (not 802.11b standard) authentication features such as RADIUS servers.

    11. Use VPN. Virtual Private Networks add a level of encrytion and authentication to your network

    Yes, these methods can all be easily circumvented to somebody that really wants to get in. As long as you try to make it a pain in the arse to get in, then the crushing masses of 802.11b networks out there that have zero barriers to entry make your little bubble a waste of time.

    1. Re:Protect yourself by BlowCat · · Score: 1
      Move your access point away from windows.
      And by the way, move Windows away from your access point :-)
  39. Important FBI notice (in tomorrow's paper) by LupusUF · · Score: 4, Funny

    Notice,
    If you are in a business that leaves it's doors unlocked at night, and you notice that someone writes "DUL" (which is engineer speak for doors unlocked) in chalk outside of your office building you might think about locking your doors at night.

    When installing doors many people forget to lock them, and malicious users can check your doors and gain access to your company's building.

  40. signs by Anonymous Coward · · Score: 0

    first crop signs
    now chalk signs.
    atleast the first signs had to do with intelligent life forms
    -Phiber

  41. bad example? by mgkimsal2 · · Score: 2

    bad example - anyone else could see the lock on the front door too, any could bring to bear their knowledge of locks on that with or without your symbols. It's much harder to 'see' invisible bandwidth availability that it is to see the type of lock on a door.

    The store owner probably wouldn't press charges against a locksmith who happened to walk by the store, stick his head through the open door and say 'hey, I see this lock here is insecure - you should get it replaced with a better lock'. Random Joe walking in off the street to company X saying 'hey, your wireless network is insecure - trust me' is not going to get the same respect. There aren't federal laws about looking at someone's lock on a front door. There ARE federal laws against 'looking' at someone's network (you have to interact with it at some level to gain ANY knowledge about it at all).

  42. Just Curious.... by cyberon22 · · Score: 5, Interesting

    Realistically, why bother?

    If the FBI is concerned with the unauthorized use of wireless networks, they'd be better off cracking down on Starbucks, airport coffee bars, or even Bryant Park, NY.

    Frankly, I'm surprised people still bother to hack from home. If I was looking to break into a guarded system, the FIRST thing I'd do would be to on a casual jaunt for a warhacking hotspot. The explosion of public 802.11 spaces opens up completely unprecedented possibilities for physical and network anonymity. The REAL question becomes what happens when someone actually uses this type of vulnerability to cause real and substantive damage to someone. Is Starbucks criminally negligant when one of their network users DOSes the DOD?

    If the FBI wants to get companies to lock-down 802.11 services, all they need to do is remind firms of their legal liability for "unauthorized" uses of unguarded 802.11 networks.

  43. Flaw in arguments of "Warchalkers" by Henry+Stern · · Score: 2, Insightful

    Warchalkers have questioned the scare stories surrounding the phenomena, saying that anyone with malicious intent is unlikely to publicly mark their target.

    It's not the warchalkers themselves that are the great security risk, it's the people who are going to use the open WLANs for malicious purposes who otherwise wouldn't have done the legwork to go out and find the open holes.

  44. Google's cache by tellurian · · Score: 1
  45. Know Your Enemy by Anonymous Coward · · Score: 4, Informative
    Yes, these methods can all be easily circumvented to somebody that really wants to get in.

    1. Enable WEP...and enjoy the 20% bandwidth loss. Airsnort.

    2. Change the default SSID. SSIDs are not needed to zero down on the AP. Triangulation and GPS are effective enough.

    3. Disable "broadcast SSID". The beacon frames can easily be captured otherwise. Attack by enabling your cards monitor mode (not to be confused with promiscious mode which only captures packets on the current network), sniffing all air traffic.

    4. Change the default password of your access point. However, I'd like to point out even changing ones password can be insecure. My access point, and I'm sure others as well, send the admin password in a urlencoded form, unencrypted, in plaintext for anyone with a monitor-mode NIC to sniff.

    5. Control access via MAC addresses. Spoofing as trivial as ifconfig eth0 down; ifconfig eth0 hw ether 00:00:00:00:00:01; ifconfig eth0 up. On OpenBSD use sea.c. Use arping to sniff MACs.

    6. Disable DHCP in your wireless router. Static IP addressing, subnet range determined from arping. Private addressing:

    • 10.0.0.0 - 10.255.255.255 (10/8 prefix)
    • 172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
    • 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)

    7. Change your IP subnet. See above.

    8. Move your access point away from windows. No match for high-gain antennae.

    Hope this helps an aspiring black hat! Remember, no network is completely secure. WaReZ anyone?

    1. Re:Know Your Enemy by Jeff+DeMaagd · · Score: 2

      Remember, no network is completely secure

      You definitely have a point, but for areas where there are a lot of wireless networks, implementing many of the suggestions make it annoying enough for the typical hacker where it is easier to move on to the next target.

    2. Re:Know Your Enemy by Alsee · · Score: 2

      Sound like the looney toons school of security...

      Hacker J Fudd: Be werry werry qwiet. I'm hacking wabbitco.
      Rabbitco: You can't hack Rabbitco. It's DUCK season!
      Rabbitco points to hastily painted sign saying "Duck season".
      Rabbitco: Let me help you... there's Duck Inc. right there!
      Duck Inc.: Rabbit season!
      Rabbitco: Duck season!
      Duck Inc.: Rabbit season!
      Rabbitco: Duck season!

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  46. Well meaning wireless activists? by bsartist · · Score: 2

    Oh, come on. Let's call it like it is, shall we? It's not "well meaning wireless activists," it's "cheapskate freeloaders on the lookout for free bandwidth."

    --
    Lost: Sig, white with black letters. No collar. Reward if found!
  47. Ahem... by Art+Tatum · · Score: 2, Offtopic
    Democrats announce new "War on Payment"
    Roberta Norris -- AP

    The Democrats in Congress today announced a new "War on Payment," joining the "War on Terror," "War on Drugs," "War on Poverty," "War on War," and the lesser known "War on A-Bunch-Of-Other-Stuff-That-Makes-A-Complete-Mocke ry-Of-The-Horror-That-War-Really-Is." Democrat leaders say that Payment is a looming threat to American peace and prosperity and that we must all work together to eliminate it before everyone runs out of money with which to pay for things.

    President Bush has embraced the War on Payment, hoping to capitalize on its rising popularity. Some of the more conservative members of the Republican party, however, are worried that the President has again forgotten which party he is in. One party official, who has requested anonymity, has stated: "What does that idiot think he's doing? This War on Payment is nothing more than Marxism! I'm going to vote for Gore in the next election--at least I know what side he's on!"

    Some Democrats have admitted to confusion over the President's emphatic support but are happy with it, however confusing it may be. Senator Ted Kennedy (D-MA) said, "I'm very pleased with the President's selling out, I mean, cooperation on this issue as I was pleased with the work we did together on the education bill last year. The President really is quite a fine turncoat! I mean, uh, visionary. Yeah! that's it! Visionary!"

    1. Re:Ahem... by beersoft · · Score: 1

      thats funny.

      almost as much fun as finding the ewc for bodyparts for the skip at work or convincing w2k to raid 5 some hard disks
      - owen (needing more beer and smokes)

  48. Warchalking is good for security by 3583+Bytes+Free · · Score: 1
    Fact: You can't just call someone up and tell them that their network is insecure without risking being jailed for terrorist hacking or whatnot.

    Fact: Most people who have insecure networks don't know that they are insecure.

    Fact: People who know about vulnerabilities are are in a position to correct them will often do nothing unless it is public knowledge.

    Given these facts, it is actually a service to warchalk (as long as the companies know what it means, thank you very much FBI). It is an anonymous way to warn someone that they have an insecure network and makes it a public enough statement that they can't ignore it. It is a services just as it is a service to post software vulnerabilities. Some people who are suddenly forced to address known issues may not like it, but it is good for them, and good for society in general.

  49. The derivation of the "warchalking" by WIAKywbfatw · · Score: 1, Redundant

    The phrase "warchalking" is derived from the the hacking term "wardialling".

    Hackers would programme their computers to search for all phone lines that returned data tones - ie, networks that they could hack into. This exhaustive searching was known as "wardialling".

    Hence "warchalking", a similar process that uses chalk markings.

    Also, driving around looking for unsecure wireless networks to tap into and possibly exploit is called "wardriving".

    Who makes this stuff up? Well, I guess we all do.

    --

    "Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
    1. Re:The derivation of the "warchalking" by Anonymous Coward · · Score: 0

      The term "Wardialing" was derived from the movie "War Games" where the main character uses a computer program to dial every number in sunnyvale callifornia in search of a video game company.

      recompile.org

  50. wardialing by option8 · · Score: 2

    The phrases "wardriving" and "warchalking" derive from the early days of computer hacking when curious users programmed their computers to search for all phone lines that returned data tones. The exhaustive searching was known as "wardialling". ... which is derived from the name of the popular '80s movie "war games" (starring matthew broderick) where the prototypical "hacker" hero uses an automated modem-dialing program to test all possible phone numbers for accessible modem-connected computers. The movie brought into the public eye such programs, which were traded among early "hackers" on BBS and other systems and called "War Dialers."

    sorry. i think part of the article was cut off there at the end...

    1. Re:wardialing by Anonymous Coward · · Score: 0

      Doesn't the phrase wardialing pre-date the movie ? As in, didn't Captain Crunch the guy who worked at Apple call it that when he did it in the late 70's ?

    2. Re:wardialing by mazor · · Score: 1

      Wardialing? Never heard of that. We called it daemon dialing, and that was long before the movie "War Games" came out.

      -mazor

  51. Oh look! by Anonymous Coward · · Score: 0

    Another old story already reported elsewhere.

  52. I thought they used paint by Ungrounded+Lightning · · Score: 2

    IBM got in trouble for chalking ads

    I thought they got in trouble for PAINTING ads. Is that incorrect?

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:I thought they used paint by RadioTV · · Score: 1

      They were using semi-permanent chalk based paint.

      --
      I have great faith in fools - self confidence my friends call it. - Edgar Allan Poe
  53. FBI Honeypots by octalgirl · · Score: 2, Interesting

    The FBI is taking a serious notice on Wardriving. Here's a SecurityFocus article on how they are setting up Honeypots, FBI stings to catch warchalkers, although it claims they are just trying to get a feel for whats really out there.

    1. Re:FBI Honeypots by Anonymous Coward · · Score: 0

      so whenever they have a signal,
      they open the windowblinds and 50people with binoculars start looking for kids with a laptop?

      or are those kids supposed to leave their name and address on the accesspoints?

  54. Ummmmmmmmmm. . . by kfg · · Score: 1

    They should hire people who read carefully and don't off ranting on their own tangent like some wet behind the ears *kid* who's only interested in his own problems, rather than the one the company pays him to work on?

    Just a guess.

    KFG

    1. Re:Ummmmmmmmmm. . . by hendridm · · Score: 2, Insightful

      > like some wet behind the ears *kid* who's only interested in his own problems, rather than the one the company pays him to work on?

      So you're suggesting I should worry about my company's problem instead of my own? Did you not understand from my post that I am unemployed? Even if I wasn't, I could give two shits about a company who is going to can me when one of the two following conditions are met:

      1. There is yet another recession, or
      2. I am making too much money and will be replaced for someone who they can pay less.

      Why should I look out for my company when they won't look out for me. I have to keep my own and my family's well-being in mind. Admit it - there is no job security in IT. If you think I am doing something else wrong, I welcome further comments. That's how we kids learn.

    2. Re:Ummmmmmmmmm. . . by antirename · · Score: 2

      Maybe working for a smaller company would help. Think small business, then think several of those that can pay their bills. Then hire your friends :) It's worked for me, more or less.

    3. Re:Ummmmmmmmmm. . . by kfg · · Score: 1

      See? You did it again. You didn't read my post carefully enough to determine what I explicitly stated was my "suggestion," and replied with what you wanted me to have suggested.

      I suggested you read posts more carefully and respond relevantly.

      The first poster spoke of *kids*, you responded with a rant about *grads.*

      Focus dude.

      KFG

  55. A message from the NCA.. by cant_get_a_good_nick · · Score: 2

    National Chalk Association. Chalk doesn't kill people, guns kill people.

  56. Reminds me of a Simpsons' quote by teslatug · · Score: 2

    Loan Officer : We are gonna have to take your house if you don't pay your mortgage. Homer : I'll take the numbers off my house. Loan Officer : We'll look for the house with no numbers. Homer : I'll take the numbers off my neighbor's house. Loan Officer : We'll look for the house next to the one with no numbers. Homer : D'oh!

  57. They should change the name by wirefarm · · Score: 2

    Dumb name in light of the current state of the world.
    They should change it to: 'Terror Chalking'...

    --
    -- My Weblog.
  58. Is 802.11b really impossible to lock down? by soccerfreak · · Score: 0

    I'm no computer geek like most slashdotters but it seems as though 802.11b is pretty easy to hack. It seems like it's fairly easy, even though all security features are enabled, for people to "sniff" packets for information and get onto the wireless network. As I said I'm no techie but with passwords for email, webmail, server access ect. being broadcast, is it really this easy for someone to sit in a car across the street and steal all the information they can find on a wireless network? Why is it not possible to have a secure solution that even someone like me could set up?

    1. Re:Is 802.11b really impossible to lock down? by fungus · · Score: 1

      He forgot to comment #11.

      Using a good VPN can help. Virtual private networks are used to link computers over insecure connections.

      Many of them would need the attacker to have a much higher level of sophistication. (Use a firewall to block everything but the VPN port)

  59. True enough by Art+Tatum · · Score: 1

    Perhaps they should just start arresting everybody that they don't pay any attention to?

    1. Re:True enough by Rui+del-Negro · · Score: 2

      Yes, but then they'd be paying attention to them. Tricky, see?

      Al Capone was arrested for tax evasion. I suspect that if Bin Laden is ever caught, it'll be for downloading MP3s.

      RMN
      ~~~

    2. Re:True enough by Art+Tatum · · Score: 1

      Man, I wish Douglas Adams were still alive. He would appreciate this thread.

  60. Permission settings as expressions of intent. by Ungrounded+Lightning · · Score: 2

    It strikes me as being very plausible that the laws on the books could be interpreted as making something as simple as turning on a laptop running Windows with a wireless LAN card in the area of somebody else's wireless network a crime, particularly if it is argued that warchalkers are doing this with the specific purpose of determining whether or not it is possible to use a network that doesn't belong to them.

    That is indeed one possible interpretation. And the FBI hints that they think it might be interpreted that way in their letter on the subject.

    But there is another interpretation possible.

    For decades - essentially since permission systems came into being - many computer users have treated file and account permissions not just as technological means of protection (like locking a door), but as expressions of intent (like latching a screen door to indicate that permission to enter is required).

    Even before there were laws and court decisions on the subject there were often company policies. And in the absense of company policies there was courteousy and custom. Oversimplified: If a file was read-any it was OK for anybody to look at it, without prior permission and without notice afterward. If it was read-user-only, even a system administrator would normally ask before "breaking the lock" and examining the contents.

    Now with the WEP encryption scheme totally cracked, its usefulness as a technological means of protecting data is over. (That will have to be done with firewall configurations.) But its usefulness as an EXPRESSION OF INTENT is unimpaired.

    And many owners of wireless gateways - commercial or otherwise - may wish to allow them to be used as a convenience by users in the area. Some reasons a business might do this are:

    - To allow visitors (business partners, salesmen, job applicants, etc.) to use their laptops. (Use an encrypted tunnel from the laptop to the home office for business, surf the web or check mail while waiting, etc.) This is in the same category as providing a phone in the waiting room, a drinking fountain, an outlet for laptop power, and not charging a fare to use the elevator.

    - To provide internet access to passers by in the hope that others will do the same, thus making it available to THEIR employees in the field.

    - To attract customers (i.e. coffee shops).

    - To "be a good neighbor" or "make a statement" about internet freedom, by letting nearby residents and passers-by access the net through their link. (There are a number of companies who do this.)

    So it's not unreasonable to assume that an open wireless LAN might be deliberate.

    A reasonable interpretation of 802.11 and firewall configurations as expressions of intent might be:

    - WEP enabled: Ask for permission.

    - WEP disabled, DHCP enabled, packets routed to/from the internet: It's OK for anyone to use this port as a convenience. (The sysadmin has INSTRUCTED the system to ACTIVELY ASSIST anyone trying to connect - or has at least not turned it off if it came out-of-the-box that way.) Please don't abuse our hospitality by cracking our machines, soaking up enough bandwidth to impair the business functions (like streaming video during business hours) or getting the company in legal trouble (like launching DoS attacks, cracking .mil sites, or downloading MP3s).

    Now if it's "WEP disabled, no firewall between the port and the LAN machines" the message is "clueless system administrator" - a professional behaving in an unprofessional manner. (The implied intent would be "our business is wide open for you to review" - and that's not a reasonable expectation.)

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:Permission settings as expressions of intent. by Sheetrock · · Score: 2

      I prefer your interpretation, of course, as I think it's closer to common sense than the direction we've been taking with laws regarding both computer security and usage of the airwaves. I'm just urging prudence to the one or two people potentially present that'll run off and try warchalking in their town because someone has said it's perfectly legal in this forum. There's enough legal haziness around this issue to make it a risk even if logic would dictate otherwise,

      --

      Try not. Do or do not, there is no try.
      -- Dr. Spock, stardate 2822-3.




  61. hrmmmm... by jglow · · Score: 2, Funny

    "If you notice these symbols at your place of business, it is likely your network has been identified publicly," warns the guidance from the FBI.

    The FBI are obviously masters of the obvious here...

    --


    There's no "I" in Linux.. err..
  62. Response by hendridm · · Score: 1

    > The first poster spoke of *kids*, you responded with a rant about *grads.* Focus dude.

    Ok, I know you're just fucking with me and trying to get a rise out of me, but I think anyone reading your statement would get the impression you were accusing me of being a "wet-behind-the-ears *kid*". Am I wrong?

  63. Furthermore by hendridm · · Score: 2, Insightful

    Ok, the original poster is suggesting that a college student is a *kid*, and you are suggesting that a college *graduate* is not a kid.

    What the difference? 0-4 years in age? At what point does someone become qualified to work in a particular position. The day after graduation? What about 6 months before graduation, or are they miraculously much more intelligent the day after graduation?

    I guess I don't see the different between a "college kid" and a recent "college grad", since we all know a college degree doesn't dictate skill, just how much bullshit you are willing to put up with (work ethic).

  64. Do we need a good samaritan hacker law? by macemoneta · · Score: 2

    This problem keeps coming up; well meaning individuals that find a problem are then punished for their attempt at a good deed.

    Without some protection for these individuals, no one will report problems for fear of legal entanglement. This obviously leaves the establishement exposed to those that do have less altruistic motives.

    It sounds like something that Homeland Security should be taking on, that would actually have a benefit to our country's security.

    --

    Can You Say Linux? I Knew That You Could.

  65. People aren't so mean spirited. by catwh0re · · Score: 1

    Geeks in general like the war chalking idea, it gives them the net when they are out. Hence they aren't so likely to begin h@x0Ring networks once they get the opportunity, otherwise people will take heed to secure their networks and ruin the fun of wireless networking. Besides if people were so interested in hacking someone's computer, why not do it the easy way, there are tonnes of IIS servers just waiting to be hacked.

  66. My concern is not businesses by InnovATIONS · · Score: 2, Insightful
    My worry is not so much about businesses (who presumably have security personnel and at least a few people who are with it enough to recognize warchalking marks) but the fact that these same wireless devices are being pushed like crazy to home users because they supposedly are so easy to set up.

    Such users are much closer to the street and have less blocking mass between the transmitter and the street compared to a business user. These users are far less likely to change default security settings and passwords. Yet as a source of freeloading bandwidth or disguizing an attack they are very fruitfull. It is like those X10 cameras that they push to consumers, most of which someone with a few dollars of parts picked up at an electronics store can see the signal from your cameras from the street. But this is not a fact at all warned against by the hucksters pushing these devices everywhere you look.

  67. Sloppy Activist story... by Mulletproof · · Score: 2

    Activist? I don't know if you'd use that term for anybody just going around marking the locations of wireless networks. You're encompassing an awful lot of everyday "normal" people if you use those weak standards as your activist baseline.

    Then there's this bit about the curious hacker...
    "Before now many curious hackers have gone on "wardriving" expeditions which involve them driving around an area logging the location of the wireless networks. Many companies using wireless do not do enough to make them secure and stop people outside the organisation using them."

    I guess we know the author is obviously slanted with the "Hacker's Manifesto" side of the issue as these "curious" hackers are trespassing on pivate property; And you simply can't make the argument that since the door was open, they have a right to be there. Yep, they're curious and gee, we just happened to gloss over the fact they're breaking and entering, volating the law, etc, thus the FBI "trival" interest, right?

    Even if I agreed with the philosophy, this is simply a badly written story. Yeck.

    --
    You need a FREE iPod Nano
  68. Want free net-auditing ? by freaker_TuC · · Score: 1

    ... just go outside and look for chalk markings in the form of a open circle on your walls!

    There's your network ! Maybe they even mention the speed of it so you can be sure it's working fully.

    At certain cities you have multiple persons checking for your network and it's all at no cost!

    --
    --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
  69. Where do you get the 20% bandwidth loss figure? by wideangle · · Score: 2
    ET tested six access points and concluded:

    "... On average, enabling 64-bit WEP encryption extracts an approximate 5% performance penalty. Depending on your need for security versus speed, that penalty may be a little or a lot. The same average 5% penalty applies when WEP is enabled in high speed mode."

  70. "Wardriving" == "Trainspotting"? by Curtis+Interruptus · · Score: 1

    I'm afraid that using the words "activists" and "war" prejudice others in advance. In reality, I think "trainspotting" has more in common with "wardriving" than the so-called "activists" would like to admit. For those who don't know what trainspotting is (aside from the movie), it's a slightly offbeat hobby wherein people watch trains go by, writing down the make/model of the trains and cars to compile lists and share with other enthusiasts. Now doesn't that sound familiar? Substitute the words "SSID/WEP/signal strength" for "make/model" and you've got a pretty good analagous situation. I haven't heard anyone call it "wartraining", though.

  71. New Security Procedure? by budalite · · Score: 1

    So, we now have a new periodic network security procedure to put on our daily/weekly to-do calender. Go out and walk around the building(s) to see if we have been warchalked. At least, we'll get a little exercise...