Slashdot Mirror
Toronto, The Naked City
PunWork writes "In an effort to promote wireless network security, Toronto consulting firm IpEverywhere (pun intended) has published a map of downtown Toronto, showing the location of both encrypted and unencrypted ('naked') wireless networks. Is this going to help spread awareness, or is this just going to encourage people to abuse the (apparently) ignorant? The Toronto Star has a story about the map and the consulting firm here."
Just climb on top of the CN tower with your scanning gear.
I dun get it.
slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
fp
Like Toronto's local wardrivers don't have maps that blow that one out of the water.
Finally, math books without any of that base 6 crap in them.
"Sources: U.S. going to 'high' terror alert"
Now, don't confuse this alert with Canary! This is more of a mustardy gold. Now if we go to DEFCON 5 "BLOOD," that means there is a really bad alert. It means we know for sure that there will be terrorism because the CIA contracted it to happen. We have been elevated from the elevated level.
Now, when we are in LOW mode, don't bother even looking for terrorists because they don't exist then because Tom Ridge hasn't seen any, and the payouts are sufficient at the moment to prevent any and all blowback.
In my own PROFESSIONAL opinion, we should have a few more levels, brown a level called SHITTY, color BROWN (could be called DOO DOO for the youngsters) , and yet another YELLOW alert called PISSED (which really represents the modality of the morons, totalitarians and fascists hiding in bunkers coming up with this crap - pissed drunk).
Now, enemies of the state are dubbed enemy combatants and habeus corpus of citizens can be suspended and trivialized even more than usual! More fun! Also, kiss amendment 1,2 and 5 away. (no you cant talk about it, no you cant have a gun and no, your attorney client privledge issupspended) Also kiss ***"The Posse Comitatus Act of 1878 " bye bye!
The Posse Comitatus Act of 1878"
20 Stat. L., 145
June 18, 1878
CHAP. 263 - An act making appropriations for the support of the Army for the fiscal year ending June thirtieth, eighteen hundred and seventy-nine, and for other purposes.
SEC. 15. From and after the passage of this act it shall not be lawful to employ any part of the Army of the United States, as a posse comitatus, or otherwise, for the purpose of executing the laws, except in such cases and under such circumstances as such employment of said force may be expressly authorized by the Constitution or by act of Congress; and no money appropriated by this act shall be used to pay any of the expenses incurred in the employment of any troops in violation of this section And any person willfully violating the provisions of this section shall be deemed guilty of a misdemeanor and on conviction thereof shall be punished by fine not exceeding ten thousand dollars or imprisonment not exceeding two years or by both such fine and imprisonment.
10 U.S.C. (United States Code) 375
Sec. 375. Restriction on direct participation by military personnel:
The Secretary of Defense shall prescribe such regulations as may be necessary to ensure that any activity (including the provision of any equipment or facility or the assignment or detail of any personnel) under this chapter does not include or permit direct participation by a member of the Army, Navy, Air Force, or Marine Corps in a search, seizure, arrest, or other similar activity unless participation in such activity by such member is otherwise authorized by law.
18 U.S.C. 1385
Sec. 1385. Use of Army and Air Force as posse comitatus
Whoever, except in cases and under circumstances expressly authorized by the Constitution or Act of
Congress, willfully uses any part of the Army or the Air Force as a posse comitatus or otherwise to
execute the laws shall be fined under this title or imprisoned not more than two years, or both.
Editor's Note: The only exemption has to do with nuclear materials (18 U.S.C. 831 (e)
But at the Pentagon, at the Federal Emergency Management Agency (FEMA) and at the new Office of Homeland Security (Now being elevated to a 170,000 strong super Agency), officials have been busy updating those plans, particularly the way they relate to using the military as a kind of domestic national police for "continuity of government." For those unaware of fed-speak, this means the protecting of elected officials and bureaucrats from the rest of us, who are viewed as the potential enemy.
Many people feel that the Posse Comitatus act of 1878, might protect them from a police state combining the military and civil law enforcement, with heavy managerial input by the US Department of Justice. But laws are already on the books authorizing martial law, including Section 32CFR 501.4** of the Code of Federal Regulations. These are the rules written by unelected bureaucrats that govern our lives.
In broad based terms, the CFR simply states: "Martial law depends for its justification upon public necessity." **(If you have Adobe Acrobat Reader installed you can view 32 CFR 501.4 in PDF format by double clicking this hyperlink with your left mouse button. You can download by right clicking and then left clicking.) (http://www.dojgov.net/32_CFR_501.pdf)
And let us not forget that vast emergency federal powers by decree dates at least to John Kennedy, who issued a raft of such orders during the Cold War. You can read recent Executive Orders and look up the topics of all modern Executive Orders by going to http://www.archives.gov/search/index.html National Archives and Records. They are difficult to pull up and include Executive Orders 12919, 12656 and 13228. In force today, they reveal how easily our individual liberties and constitutional government can be set aside. For downloads of documents, Right Click on the above Executive Order hyperlinks and Left Click to view or download.
[ http://www.dojgov.net/12919.pdf , http://www.dojgov.net/12656.pdf ; http://www.dojgov.net/13228.pdf ]
With constitutional government "temporarily" placed in the garbage heap, the American people would be subject to direct control by unelected bureaucrats scrambling to shore up a jack boot heel on the dreams of our Founding Fathers.
"Congress shall make no law.." BWAHAHAHAHAH , boy, I'm going to WHOP you!
Bah!
both will happen.
1. the idiots will try and hack and abuse.
2. the companies will slowly gain awareness, try to figure out how to secure themsleves, secure funding, initiate sucurity protocols, fix holes, etc.
gee, i wonder who will get going first. the company or the idiots.
There's nothing Intelligent about Intelligent Design.
The cultural relativists of course stepped forward to assure us that, despite those verses, Islam really is a religion of "peace" and "tolerance," but they neglected to explain that the price of "peace" and "tolerance" is the individual's political and social submission to Islam's religious authority. Apologists also explained that the attackers were in fact deviants who had distorted Islamic values. Perhaps, but judging from the spontaneous demonstrations of joy over the attacks that took place throughout the Arab world, and considering the thousands of madrassas still teaching those same "distortions" with government support, apparently millions of Muslims are deluded about their own culture and religion.
Then we were lectured about the "moderates" in the Islamic world that we should support and encourage rather than reducing to "clash of civilizations" paradigms. Yet no one questioned why these so-called "moderates" continually refuse to abandon their inveterate hatred of Israel and sympathy for terrorism evident in their moral and financial support of Palestinian murderers, and in the inevitable "but" that always follows their perfunctory condemnations of the latest slaughter of the innocents. Yes, there exist Islamic moderates who want their civilization to enter the 21st century, but whether or not Islamic culture will or can adapt to the modern, that is, Western way of secularism and individual freedom is a question ultimately to be answered by Muslims themselves. But the question itself is meaningless without some recognition that the Western way is simply superior in key respects, for it creates the greatest freedom and prosperity for the greatest number of individuals; and that cultures that suppress individual freedom and keep millions of its people in penury aren't just different, but inferior.
Next, September 11 demonstrated the bitter fruit of the doctrine of anti-Americanism rife not just in the Middle East and Third World but among many Europeans and Americans themselves. In the months after the attack numerous American and European intellectuals opined that America had in one way or another "deserved" the attacks, that it was reaping the bitter harvest of its numerous imperialist and racist crimes. This irrational superstition, whose ultimate origins lie in communist propaganda, has become a set of cliches and an unthinking reflex fueled by self-loathing, envy, and resentment. Worse, it has no basis in the facts of history.
The truth is, no society in history wielding the cultural, economic, and military power possessed by the United States has been as restrained in using that power. Even if one accepts the usual anti-American indictment -- Chile, Nicaragua, Vietnam -- these alleged offenses pale beside the good America has done in the world, and the blood and treasure it has lost in fighting tyrannies like Nazism, Japanese militarism, and communism. We hear much about Vietnam, but the abandonment of our allies there meant that Vietnam today looks more like the starving police state of North Korea than a free and prosperous South Korea. But the real refutation of America's supposed evil is the sheer numbers of immigrants who risk their lives to live among their presumed oppressors.
Particularly revealing, however, was the outburst of anti-Americanism in Europe that followed a brief few weeks of sympathy for our loss. Nations whose toll of colonial oppression and death in the Third World dwarfed our own now began to lecture us on our crimes. Envy, resentment, post-colonial guilt, and pride wounded by the spectacle of a nation of déclassé cast-offs and immigrants dominating the world found expression in stale cliches about oafish American "cowboys" who lacked the Europeans' sophisticated, nuanced understanding of world affairs. What we should have learned from this shameless display is that the old NATO Cold War consensus is irrelevant in a world dominated by American power, and that a morally exhausted Europe is our "friend" as long as it can spend money on lavish social welfare programs rather than on the military muscle that would justify its global pretensions.
The third cultural disease exposed by 9/11 is the therapeutic sentimentalism that compromises our actions and policies. The thought that anybody, even the Al Qaeda psychopaths, might be made to suffer occasioned all manner of anguished hand wringing. The detainees in Cuba -- murderers one and all -- were fussed over as though they were wayward teenagers caught "experimenting" with drugs. The military action in Afghanistan was hemmed in by demands that no inadvertent deaths occur, something impossible in the "fog" of war. Efforts to protect our citizens against further attack were hamstrung by civil-libertarian fundamentalists who apparently believe any number of American dead is an acceptable price to pay in order to avoid hurting the feelings of an Arab immigrant. A librarian in Boulder who had festooned her library with multicolored plastic penises ordered an American flag taken down lest someone be made "uncomfortable." And everywhere on display was, and still is, our peculiar delusion that peace and order can be created and protected without violence and suffering and the unforeseen, tragic consequences that always attend the use of force.
Finally, and most important, the rot of moral relativism running throughout the intellectual class continues to manifest itself. We were not to blame anyone, as the National Education Association's recent school curricula instructed teachers. We are not to use words like "good" and "evil," those outdated superstitions from our unenlightened past. The President's use of the phrase "axis of evil" to describe three tyrannical, terror-nurturing states aroused all manner of indignation from Eurocrats and liberal pundits, who scoffed at his simplistic and reductive characterization of terror. These were the same people who sneered at Ronald Reagan when he called the Soviet Union an evil empire -- to the cheers of millions of oppressed Eastern Europeans who knew exactly what he was talking about. Perhaps the stupidest example of this moral idiocy was the British editor who forbade the use of "terrorist" to describe the murderers, since "one man's terrorist is another man's freedom fighter." But after all the spineless tweaking and sophistical nuancing is done, the simple fact remains that murderers of the innocent are evil. A culture that has trouble recognizing that fact is a culture in trouble.
Battling this toxic brew of cultural and moral relativism, therapeutic sentimentalism, and malevolent anti-Americanism is what the culture wars are all about. In the first few months after 9/11 it seemed that the tide had turned against these noxious ideas. Flags were being flown without embarrassment, church pews were more crowded, public recognition of America's unique achievement in giving freedom and prosperity to the greatest number ever of ordinary people was freely celebrated. But since then the old bad habits seem to be creeping back, as evidenced by the dithering and second-guessing over Iraq and its homicidal maniac of a leader. After the sentiment and spectacle of the anniversary ceremonies of 9/11 is done, the question will remain whether or not we have learned enough to make sure 9/11 never happens
Strom Thurmond; the dean of the US Senate...
the deadest fart on slashdot.
The map on the site doesn't cover Toronto's nude beach at Hanlan's point.
Creating ActiveX Components
See Also
Component software development cuts programming time and produces more robust applications, by allowing developers to assemble applications from tested, standardized components. The move to component software, sparked by the success of products like Microsoft Visual Basic, is one of the most prominent trends in the software industry.
Microsoft has led the effort to define an open, extensible standard for software interoperability. The Component Object Model (COM), including Automation and the ActiveX specification, makes it possible for software components you create to work smoothly with software components you buy off the shelf.
Visual Basic makes ActiveX component creation happen. ActiveX controls, ActiveX Documents, code components, and applications that provide objects -- Visual Basic gives you the tools to rapidly create, debug, and deploy software components.
Getting Started
Before you begin, you should know how to use class modules to define new classes, how to create objects from classes, and how to use ActiveX components. These subjects are discussed in "Programming with Objects" and "Programming with ActiveX Components," in the Visual Basic Programmer's Guide.
Chapters
ActiveX Components
Outlines what you can do with Visual Basic's component software features.
Creating an ActiveX DLL
Provides step by step procedures that get you off to a running start with in-process debugging, multiple projects, global objects, object lifetime concepts, and circular references.
Creating an ActiveX Exe Component
Provides step by step procedures that introduce threads, events in class modules, call-backs, and out-of-process debugging.
Creating an ActiveX Control
Provides a series of step by step procedures that create a simple control. Introduces ActiveX control concepts, raising events, debugging design-time behavior, and property pages.
Creating an ActiveX Document
Provides a series of step by step procedures that create a simple ActiveX document, and demonstrate ActiveX document concepts, navigation, properties and methods, menus, and debugging techniques.
General Principles of Component Design
Contains information of importance to all component designers, including terminology, concepts, instancing for class modules, polymorphism, and object models.
Debugging, Testing, and Deploying Components
Contains more general information, such as setting up test projects, debugging features, adding Help, version compatibility, and localization.
Building Code Components
Takes OLE servers into a new world, providing in depth discussions of in-process and out-of-process components, threading, instancing, call-backs, and events.
Building ActiveX Controls
Contains in-depth explanations of how Visual Basic ActiveX controls work, what features you can implement, subtleties of debugging, discussions of implementation techniques, and all the other things you expect of a cool new feature.
Creating Property Pages for ActiveX Controls
Provides in-depth discussion of property pages, including implementation techniques and design guidelines.
Building ActiveX Documents
Provides in-depth discussions of terminology, concepts, Internet features, navigation, debugging, migrating from forms, and in-process vs. out-of-process implementation.
Building Data Sources
Provides in-depth discussion and step-by-step procedures for creating ActiveX components that can act as data sources.
ActiveX Component Standards and Guidelines
Contains updated guidelines for object naming, component shutdown, implementing collections and Application objects, and other object model issues.
Unencrypted networks are now referred as "naked" networks? They just called it that to get more people to read it.
Maybe someone should make a new insecure Linux distro called "Naked Linux". It will be great for the desktop to compete with Windows whom has always been naked. (Maybe that's Red Hats secret Plan). In the mean time Windows is trying to get dressed. Stupid 2 legged pants!
Is this going to help spread awareness, or is this just going to encourage people to abuse the (apparently) ignorant?
I'd put my life savings on the aduse of the ignorant.
Lets see, annually, people get viruses from opening attachments in their emails. How many people, do you think, get re-infected because of ignorance?
How many people go to windowsupdate.microsoft.com for security patches?
Yeah, most IT people know what they are doing, and don't do anything foolish with their security, but you know that a lot of average users are learning to setup networks, and setting up a wireless network isn't exactly rocket science.
I anticipate a lot of abuse in the city of Toronto...
Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
http://www.nakedwireless.ca/winudcol.htm
I wonder how long it will take spammers to clue in on this? It is a wonderful deal for spammers; as they are untraceable via this method. There are steps that people running these networks could do to prevent spammers, but still allow legit users. But, you all know how well some admins look after security...
Michael Loves Me!
i don't quite understand this... lets do an interview with the author.
Mr. Freely? come on guys, I.P. Freely!?
MARIJUANA, SHROOMS, X: ONLINE?! - E
No doubt.
People get viruses delivered the their computers via email, the net, etc...
What is to stop viruses now becoming "airborne" and people who use an open wireless network unwittingly picking them up or (knowingly or unknowingly) transmitting them into open wireless networks?
Surely most people who wardrive would be smart enough to avoid them through various means... but most people who use computers are fairly clueless about security and virus protection.
Any known cases of wifi virus infection?
42 - So long and thanks for all the fish.
When I read that headline, my first though went out to several Toronto women I know... Naked... Ick! May God (or whatever deity you believe in) have mercy on our souls if that were to happen.
Platform SDK: Remote Procedure Call (RPC)
RpcServerUseAllProtseqsEx
The RpcServerUseAllProtseqsEx function tells the RPC run-time library to use all supported protocol sequences for receiving remote procedure calls.
RPC_STATUS RPC_ENTRY RpcServerUseAllProtseqsEx(
unsigned int MaxCalls,
void* SecurityDescriptor,
PRPC_POLICY Policy
);
Parameters
MaxCalls
Backlog queue length for the ncacn_ip_tcp protocol sequence. All other protocol sequences ignore this parameter. Use RPC_C_PROTSEQ_MAX_REQS_DEFAULT to specify the default value. See Remarks.
SecurityDescriptor
Pointer to an optional parameter provided for the Windows XP/2000/NT security subsystem. Used only for ncacn_np and ncalrpc protocol sequences. All other protocol sequences ignore this parameter. Using a security descriptor on the endpoint in order to make a server secure is not recommended. This parameter does not appear in the DCE specification for this API.
Policy
Pointer to the RPC_POLICY structure, which allows you to override the default policies for dynamic port allocation and binding to network interface cards (NICs) on multihomed computers (computers with multiple network cards).
Return Values
Value Meaning
RPC_S_OK The call succeeded.
RPC_S_NO_PROTSEQS There are no supported protocol sequences.
RPC_S_OUT_OF_MEMORY Sufficient memory is not available.
RPC_S_INVALID_SECURITY_DESC The security descriptor is invalid.
Remarks
The parameters and effects of RpcServerUseAllProtseqsEx subsume those of RpcServerUseAllProtseqs. The difference is the Policy parameter, which allows you to restrict port allocation for dynamic ports and allows multihomed machines to selectively bind to specified NICs.
Setting the NICFlags field of the RPC_POLICY structure to zero makes this extended API functionally equivalent to the original RpcServerUseAllProtseqs, and the server will bind to NICs based on the settings in the system registry. For information on how the registry settings define the available Internet and intranet ports, see Configuring the Windows XP/2000/NT Registry for Port Allocations and Selective Binding.
Note The flag settings in the Policy field are effective only when the ncacn_ip_tcp or ncadg_ip_udp protocol sequence is in use. For all other protocol sequences, the RPC run-time ignores these values.
A server application calls RpcServerUseAllProtseqsEx to register all supported protocol sequences with the RPC run-time library. To receive remote procedure calls, a server must register at least one protocol sequence with the RPC run-time library.
For each protocol sequence registered by a server, the RPC run-time library creates one or more endpoints through which the server receives remote procedure call requests. The RPC run-time library creates different endpoints for each protocol sequence. The endpoint name is generated by the RPC run time or the operating system. For example, for ncacn_ip_tcp, the port number is dynamically determined by the RPC run time, depending on availability and registry settings.
Note Using the RpcServerUseAllProtseqsEx function does not cause the server to listen on the following protocol sequences:
Note ncacn_nb_nb
Note ncacn_nb_tcp
Note ncacn_nb_ipx
Note ncadg_mq
Note ncacn_at_dsp
Note ncacn_http.
Note To listen on any of those protocol sequences, each sequence must be selected individually.
For MaxCalls, the value provided by the application is only a hint. The RPC run time or the Windows Sockets provider may override the value. For example, on Windows XP Personal and Professional, or Windows 2000 Professional, the value is limited to 5. Values greater than 5 are ignored and 5 is used instead. On Windows XP/2000 Server, Advanced Server, and Datacenter Server the value will be honored.
Applications must be careful to pass reasonable values in MaxCalls. Large values on Server, Advanced Server, or Datacenter Server can cause a large amount of non-paged pool memory to be used. Using too small a value is also unfavorable, as it may result in TCP SYN packets being met by TCP RST from the server if the backlog queue gets exhausted. An application developer should balance memory footprint versus scalability requirements when determining the proper value for MaxCalls.
To selectively register protocol sequences, a server calls RpcServerUseProtseqEx, RpcServerUseProtseqIfEx, or RpcServerUseProtseqEpEx. See Server-Side Binding for a description of the routines that a server will typically call after registering protocol sequences.
Requirements
Windows NT/2000/XP: Included in Windows NT 4.0 and later.
Windows 95/98/Me: Unsupported.
Header: Declared in Rpcdce.h.
Library: Use Rpcrt4.lib.
See Also
Configuring the Windows XP/2000/NT Registry for Port Allocations and Selective Binding, RpcServerUseAllProtseqsIfEx, RpcServerUseProtseqEx, RpcServerUseProtseqEpEx, RpcServerUseProtseqIfEx
Which other sites show maps of APs? I'd like to see if my neighbor's is on there. Wide open...default password on the router...
I thought I remember seeing a site once where you could just enter a zip code to get an idea.
It might be that all these points are simply honeypots.
Did they make tcp connections to find out?
Cool, now when I go to Toronto, I have a map of all of the Starbucks downtown...
The Dopester
"Yes, I'm a Karma Whore, but I'm doing it to pay my way through school."
You see Michael, the problem with this story - like so many stories on slashdot - is that NOBODY CARES about this pointless bullsh*t.
Um, I wish I had thought of that. Damn. Gotta go mark my territory now..
For those who don't know, Queen's Park is the seat of the Ontario government.
thank you!!!
http://www.nakedwireless.ca/winudcol.htm
My company specializes in low latency data chunks and loss-less throuput. Come by and see my company profile, IpooEverywhere. We are currently releasing positions, so don't ask for a work load.
I am the nightmare of nightmares.
Thats right, the scum of the network are taking advantage of open wireless networks, whether they are chalked or grabbed off online maps such as net stumbler dot com. The rise of drive-by hacking is a natural by-product of the wardriving/chalking community, and it would be naive to considering this a surprising development. Highjacking an open wireless network is only the smart thing to do for hackers whether they are after data or just a spamming platform.
This puts the pressure on network administrators to secure their wireless networks. It is far easier to drive by a NAP and jack in, and the proliferation of wireless networks could obsolete physical intrusion techniques such as connecting a Dreamcast or iPAQ to an internal network. Tools for wardriving are readily available, such as THC-warDrive. A lazy or incompetant network administrator makes it easy for a kid with the parents car, a pringles can, and a laptop.
perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
This is news? People have been
scanning wireless
networks
for a long time now...
Eh?
A little to much Fromage in Toronto, eh?
HAHA, sucker!
Let me walk outside and, ahhhh, Vancouver.
T-O-R-O-N-T-O!
Humble and Fred, two married guys, that bum-fuck each other!
Uncle Vince, hello there girlfriend, da da da!
www.mojoradio.com
Nothing good ever came from that frozen wasteland!!
Jez curious is all...
RTFM; please, I beg you.
Direct from Toronto: Naked News!!!
"I have never let my schooling interfere with my education." - Mark Twain
A quote taken from a CEO in fits of rage when he finds out that his company is on that list:
Fire the Net Admin, and call our lawers were going to see IpEverywhere in Court
This sounds like a consulting firm drumming up business for themselves. Kind of like the telemarketers that call everyday offering to sell us toner at a reduced rate.
-- Probability does not dismiss possibility --
What about properly secured public/community wireless portals that use nocatnet for user authentication? they dont use WEP as it's useless for this kind of community access point. while nocatauth does quite well at making open portals available for members.
Do not look at laser with remaining good eye.
You and your assfucking, cumguzzling friends suck ass!
In the old days... when somebody had an easily accessed jack to their phone system into which you could plug a phone (or modem, although laptops weren't as popular) and make long distance calls
Today, when people have a wireless "jack" to which large masses of people can plug in and make use of their connection/network/internet.
Seems to me that as technology progresses so do the ways to abuse it, and the stupid ways in which people leave themselves open to abuse...
General Public Ignorance keeps me employed - phorm
Death to Allah, the cruel, the false, the stupid. Destroy Islam. May justice prevail.
There's a pair red pins (unsecured WAPs) on the west side of University Avenue between Dundas and Queen, right about where the US Consulate is.
-Tom Duff
It looks like two of the pins are almost in the right spot for the US Consulate (although it might be the next building up the road). Honeypot or clueless government officials?
I still get a puzzle piece prompting me to download a closed source plugin to see the map. Anyone running an insecure box care to take a screenshot and link to it?
And after you've secured your network on a higher level than OSI 1, you can be less paranoid about WEP. So much less, that some claim that DISabling WEP is not a bad thing at all. Think about it, you already have encryption taken care of, so why not make your network more stable, robust and fast by disabling WEP?
Those 'wardriving' pictures should make a distinction between "secured with WEP", "no WEP, but I cannot use the network because of IPsec/VPN/whatever" and "no WEP, and I can surf freely through it".
-Leto2
<grub> Reading
...in my head was of naked warwalkers. but, isnt it cold in toronto? just think of the shrinkage.
You know, it's a real shame that you posted this here because I've actually found this post quite useful. Right info, very wrong place. Trust me, as both a manager, and a long time political activist, the tone and time do count. Otherwise you just become yet another strident Operation Rescue-type wacko discrediting the very concern that you sought to promulgate,
Too bad you didn't have the self control to find a better discussion. Couldn't you at least have posted this as part of a YRO discussion?
Sadly agreeing with the general judgement of TROLL!!,
Rustin
Data is the lever, rigor the fulcrum, brains the force that drives it all.
As the map shows, about anywhere you go in Toronto, there's open access. Since there is no crime in Canada, this is not a problem, it's a feature.
"with their freedom lost all virtue lose" - Milton
Queens Park (look on north portion of the map) is the seat of the Ontario Provincial Legislature, not an open, green space. This means that there are (or were) 2 open, non WEP (like that mattered) access points within the government offices. I really, really hope these are isolated from the internal network via firewalls - I don't want all of the info that the Ontario Government has on it's citizens (like me and my family) being broadcast for anyone to see/save/use.
Soko
"Depression is merely anger without enthusiasm." - Anonymous
With IT people in the Toronto area... here is how serious they took this map.... Several of them wanted to know if we could find the blinking red dot over their house. :(
Tired of Bush?
Fuck it. Move to Canada. A real, civilised, modern nation. Who would have thought?
Excellent healthcare FOR EVERYONE, excellent schools, the most pristine nature in North America. Cool cities, great people.
Why get shot in the 'hood when you got Canada in yo hood?
Canada loves you, and we love Canada.
And really, there is no place like B. C. It Owns!
while black triangles indicate networks protected with WEP -- "wireless equivalent privacy" -- encryption.
I know it's a wireless technology, but WEP is (in theory at least) wired equivalent privacy - that is, it's supposed to be about as good and private as cat5, arrrrrg!
try { do() || do_not(); } catch (JediException err) { yoda(err); }
- Block outbound/inbound port 25 traffic, except to/from local MX. Or, block it totally, if possible.
- Block common proxy ports.
- Route all HTTP traffic thru a secured proxy.
That should cut off most of the routes that spammers use to spam. Any WLAN that does not take these steps will soon become a spammer magnet.Michael Loves Me!
This is a problem in just about every city. I live on a tree lined residential street in Santa Monica, CA. There's no real offices or businesses within about a half mile because I live between two public parks. I was planning on putting in a wireless network in my house so I bought a card and put it in my laptop. I was AMAZED to find that it locked right up to someone else's network immediately! I was able to browse the web, and even look at their shared files. This was true on channel after channel on the card. I can only imagine how it must be even worse in an industrial area. Now I know why my 2 Ghz spread spectrum phone has such poor range.
I like to give Americans a reality check by telling them that the southeast end of southern Ontario is farther south than northernmost California. They invariably don't believe it. Then I pull out a map and show them.
With all this on war driving and hacking into networks for fun or foul, we better start being careful of what we say and how we act. (be nice)
We should realize that right now we have a great oppertunity to use wireless.
If admins continue to leave networks that need to be secure open to the public they are going to get hacked -in one form or another, maybe just harmlessly syphoning bandwidth, maybe stealing private information - but something is going to happen regardless.
What I fear hear is government regulation. Right now it is the resposibility of the admin who sets up this network to make sure it is reasonably secure. If wireless hacking becomes enough of a problem, governments will be compelled to regulate wireless networks. Sure some regulation may even be good, but from my perspective what is more likely to happen is it will be regulated to death.
Whenever we are forced to regulate we get these types of results: People who want to use wireless won't be able to comply with impossible for the little guy to comply with standards - experimentation dies, soon so does innovation.
Why should admins secure their network when they can rely on a government wireless police force to go around picking up the kiddies breaking into their network? Sounds stupid? that's right it sure is, but crap like this could very well happen. -We're allowed to remail lazy.
I have a wireless lan and it's reasonably secure... It isn't hack proof - nothing is. but it is encrypted and secured and stuff and also it is on it's own network, not directly tied into my wired lan... plus there isn't information on the wireless that could be considered "secret" or personal. I want the thing to work around the house for getting that there interweb. The access point is in the basement -- a simple thing, limits the coverage of the unit a lot - just the house and parts of the yard.
I'm still looking at other ways to secure it. I found a good one the other day SHUT IT OFF WHEN NOT IN USE. (who'd a thunk it?) Why can't businesses figure this one out?? put the power cord to the thing on a timer!! not business hours? no wireless!
See the Pictures of the Flood of '08
Read it out loud: "I Pee Everywhere". Weak pun, but better than nothing.
How can this be considered Off-Topic, it was explaining the pun for those that don't get it?
The weather today in Toronto is 34 celcius, that's 90F plus
93.2F, and that's before you factor in the humidity. The current "humidex" is 37C which is 98.6F. Thank god we all live in igloos - we just get naked and lean on the walls to cool off.
And yesterday Ontario just had our 25 smog alert day of the year. Beating our all time record. :(
So much for our pristine nature.
I want to know who is using all those Wireless Networks all along Richmond near Spadina. I thought that was towards the end of the Club District.
Even along Queen West, for that matter. Last I checked Queen West was a bunch of trendy clothing stores and used cd shops. Of course, I can't forget about Active Surplus, the best damn store in Toronto.
Am I missing something here?
Is that a real poncho? I mean, is that a Mexican poncho or is that a Sears poncho?
Apparently my college (George Brown) has a naked network. I never thought in a million years I would be reading something like that on Slashdot.
I love it. Time to h4x0r my grades.
I notice one of the big red "abuse me" circles right in the middle of the U of Toronto engineering buildings, where they should know better.
I'd make snarky comments about the prof who I suspect might be running the open network, but in this case I have no strong reason to suspect it's him.
I say abuse the ignorant and we can bring back darwinism in a technological point of view. Survival of the fittest.
Outdoor digital photography, mostly in New Engl
Remember, WEP is not the be all and end all of wireless security. Just because those networks don't have WEP doesn't mean they aren't secured in another, quite possibly better, way.
Of course, they could also be totally open. No way to know without taking your laptop on a walk I suppose... let us know what you find out if you do.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
Spamming from unsecured wireless networks will be a fun form of shameless profit until people start setting up "sting" nodes that will be specially rigged so that upon detecting that they are being used by a spammer, they will photograph their license plates, call the cops, and maybe spray some hot tar and feathers for good measure.
pi = 3.141592653589793helpimtrappedinauniversefactory7
Is this going to help spread awareness, or is this just going to encourage people to abuse the (apparently) ignorant?
You act as if these are two mutually exclusive events. I do not believe them to be. Awareness is nice to be given in homeopathic doses, but I'm glad to see it spread given any opportunity.
Wouldn't IpFreely have been even funnier?
Slashdot: come for the pedantry, stay for the condescension.
I setup a WIFI net at home recently and have found that the coverage I get inside the house is amazing. Outside it's a different story. I'm pretty sure that the aluminum siding is blocking the signal from leaving the building because I do get limited reception if I'm lined up with a window.
Basically this stops any war drivers from seeing my network unless they get really lucky and creep up to the bushes outside one of the few windows that faces the street. If they do that I'm more at risk that they see ME naked than my network!
Anybody else notice specific physical obstacles that clobber reception?
I just spoke with the COO of the IPEverywhere about this study, and confirmed that the methodology only established whether a node was running WEP (a "security measure" of dubious value).
That means that many of the "unsecured" nodes in this report may have had other means of securing themselves, from switch- or AP-based MAC filtering to captive portals such as NoCat. Moreover, the protocol for this study did not establish whether the open APs in question were handing out DHCP leases (or, indeed, whether they were connected to the Internet at all).
Finally, this study did not investigate in any depth whether the open APs were deliberately or accidentally left open. Many of us run open "community" networks around the world (I operate one in Toronto at King and Niagara, and three in San Francisco, two at 19th and Shotwell, and one on Sycamore near 17th and Mission). These networks are deliberately "unsecured" and are provided out of public-spiritedness, or even out of a political commitment to providing tools for anonymous speech on the Internet -- anonymous speech being fundamental to democratic discourse.
Since WEP is such a poor "security" measure, the best practice for wireless users is to use SSH and/or SSL tunnels to secure sensitive traffic to a proxy (either remote or on your own network). In fact, if you're a promiscuous user of any network -- conference centers, airport lounges, hotel rooms, schools, etc -- you should assume that unless your messages are encrypted, they will be sniffed on the wire.
The primary "security" concern about open wireless seems to be that a "rogue" AP will be installed behind a firewall. The firewall, of course, is hardly sufficient in and of itself for securing a network. It's based on the presumption that everyone on one side of the firewall is trustworthy, and everyone on the other side is untrustworthy. We know, though, that this is a fallacy. Getting inside the firewall -- either through physical intrusion (think of visitors to your office plugging into the the network to check mail) or virtually, by 0wning a box on the network with a trojan -- is not difficult for a determined intruder. Meanwhile, the legitimate users of your network resources are often outside your firewall (mobile execs at a client site, for example) and thus not only walled off from the rest of the network, but also vulnerable to attack, since their machines' first line of defense is the firewall, which they are suddenly out of.
Security is hard. The proper place to draw your network perimiter isn't around your office, but around each machine. Personal firewalls, regular applications of security patches, good passwords and user education provide genuine security. Firewalls (and FUD about open APs) doesn't.
All time record --- despite the fact that the criteria get more and more strict, and back when smog was really bad (100+ years ago), there were no recorded statistics or "smog alerts".
The actual URL is http://www.nakedwireless.ca/winudcol.htm
;D
I work for a computer company at the corner of Bay and Dundas on the map, which has tons of red push pins. Luckily there are no nudist colonies here
-Shieldwolf
just = (My)Opinion.toCents();
Darn, I thought this article was about Toronto's gift to journalism, Naked News.
[/SARCASTIC MODE]
The ONLY paper in Dallas publish the same type of info last week on the front page of thier technology section.
Anything you say will be held against you.
Most people in the rest of Canada would probably argue that Toronto is not really a part of Canada anymore. The only thing making Toronto vaguely Canadian is the fact that they happen to be on the Canadian side of the border, and thats where the similarities end.
Its lucky for microsoft that their main office isn't in Toronto, otherwise people might find out something in microsoft isn't secure.
Did Ashcroft help design thier logo?
"If you are on fire you can just stop, drop, and roll. If you fall into Lava you are just dead." - my 5yr old daughter
Why don't you repost it to your heart's content? I don't have time to fucking dress up and prepare PR and press releases. You know as well as I that the lame ass editors here never post any USEFUL criticisms or editorials of "YRO" subject matter. I found this information disturbing and I tried to first post it to somewhere where it would get bandwidth. I like how being right about something is contextual. Not very promising, if my fellow fucking human beings place context above what's right an wrong.
Sadly, I am telling a fellow activist, fuck you and your troll rating, you fucking would be fascist. You don't censor things due to context. Like the radio dial, turn the station, tune out, but don't agree with the removal of what you find distasteful, because its subjective. One day the government might find YOU distasteful and contextually incorrect and you should be marker "DEAD," and promptly put into an oven and turned to ash.
I work in the building on Bay/Gerard and there's a ton of devices in that location.
Seriously, I have a headache right now.
Red Hat
Mandrake
Suse
They're about as secure as Windows.
I approve their choice of name.
There is nothing so silly as other peoples traditions, and nothing so sacred as our own.
I mean seriously dude, it is Canada who really cares what goes on there. With their beady little eyes and their flappy heads. Damned canucks!
Mao Tse Tung, Hitler, Stalin, Castro, Pinochet, Mussolini, Marshall Joseph Tito, Slobodan Milosevic, Idi Amin, Ho Chi Minh, Saddam Hussein, Muammar Qaddafi, Juan Peron, Ayatollah Khomeini, Ferdinand Marcos, General Suharto, Pol Pot, Fransisco Franco, and certainly the worst of the bunch, SLASHDOT's editing/moderating [read: censoring] "community"(*) ALL AGREE on ONE THING:
(*)Note, the word community used often on Slashdot, this is referring to a proto communist commune.
So, you busy little plebian proletariats, get busy, you have some censoring to do! FUN! Do the bidding of your fat, undisciplined masters who never subject themselves to peer review!
Good job you little neo-commies. Don't want to hear the other side, shoot the fucker in the head as an ENEMY OF THE STATE [In this case anyone who seeks to improve the sad state of
I have a Gun and the Constitution [Not the urinated-on pissed-on hacked fucked up one WashingTOON thinks exists, I mean the real one, with Jefferson and Madison at my side], please, give me an excuse to use them both.
A few haikus to commemorate the sucktitude:
Crack Pipe Moderators
Crack smoke wafts though air
Dumb shit moderator!
Try to suck less, please
The Humorless Moderator
Crack smoke wafts through air
Humorless moderator!
Why do you hate me?
The Proletariat
Slashdotting Commie
Moderator fears new idea!
Censor him quickly
The reason China blocked Slashdot is that when Jiang Xemin saw at how good "The Editors" at Slashdot are at suppressing the community, he knew that if more of his party members saw this degree of suppressive efficacy, he would be deposed, for the good of the people, of course, in favor of Rob Malda as the all new supreme dictator and premier of China.
It has been said that democracy is the worst form of government except all the others that have been tried. - Sir Winston Churchill (Especially when your democratic peers twist democracy into a reason commit censorship, to squash dissenting or unpopular opinions, and refer to them as trolls, flaimbait overrated or offtopic when they aren't any of the said)
The reason there are two senators for each state is so that one can be the designated driver. - Jay Leno.
The Constitution poses no threat to our current form of government. (Death to those who defile the root documents of a free nation to make economic freedom Supercede Freedom! Freedom First! Free market Second!)
Occam's Razor "Entities should not be multiplied unnecessarily." "Pluralitas non est ponenda sine neccesitate" "Frustra fit per plura quod potest fieri per pauciora" "Entia non sunt multiplicanda praeter necessitatem" Translation: " "Simple explanations are preferred to complex ones" Modern fucking translation "JUST DO IT."
Reading Slashdot at anything above -1 is like trying to put a shit filter on your ass.
Get busy moderating this down, you little pack of obedient prefects of the corrupt state! You are the vanguards of purity, and dissent is not allowed!
HAIKUS
MODERATORS Crack smoke wafts though air - Dumb shit moderator - Try to suck less, please
KAZAA Fuck R I A A - Network sold behind their backs - Stupid fucking cunts
Haiku: to the Slashfags. Fuck slash editors - The cumlicking fags they are - I shit upon them
TACO pondering GOATSE: I stare at the goat - His huge gaping ass so wide - And I want to eat
Haiku: The ancient haiku: - Flame Taco and CowboyNeal - With lame poetry.
CowboyNeal A mountain of fat, - butt cheeks jiggling like Jello. - What an odd poll choice!
CmdrTaco Watching Pokemon - With cum stuck on his goatee. - Newbie loser scum.
Stinky Kathleen Fent Cockeater Taco, - Proposing to Fent online, - I fingered her too.
Rob Malda and Kathleen FentChubby breasts, fat ass - Distract us from Rob's boylust. - But they both suck cock!
Taco Tuesday: Too much mexican. - Angry poo, firey hot. - Where's my antacid?
CHOAD licking Taco: Malda in the dark - Swallowing choad for profit - He rips his anus
Fuck KATZ Katz is a Jew - michael is a Mormon - Or is it Timothy?
Martini Fuck off That is fucking good. - I nearly spilt martini - On my nice trousers.
Slap my Ham, rub it off, fuck Spank fast wank it hard - Jerk that dick to Pokemon - Party at Taco's
GOAT I just came again - looking at the goat-see man - more kleenex required
Cock BIRD The Dead Penis Bird - Nailed to the member always - Never falling off
BSD Stare into the night - Sun is setting on your sys - BSD *NOT* dead
Michael Michael User Simms - Sifting through all our comments - Censoring bastard
Klerk Trolltalk hard to read - Information desires - Wideness for us all
Cobalt Really tired now - Off to masturbate to sleep - See you at the day
Humorless Moderator Crack smoke wafts through air - Humorless moderator - Why do you hate me?
"Toronto, The Naked City"
Damn, even Slashdot is trying to get people to click links by promising pr0n.
I think you would find most Torontians and Ontarians, feel differently. As for the rest of Canada's opinion about Toronto, I wouldn't know, and wonder why you would presume to. Do you always put your foot into other peoples mouths?
Hey cprice, your retarded anti-Toronto bias is showing! Toronto is, actually, one of the largest contributors to Canadian culture in the country. This takes nothing away from other cultural centres like Montreal and Vancouver. Unfortunately for you, irrational hatred of a city just for being successful wont't make this fact go away.
The headquarters for Sears Canada is near Jarvis/Dundas. That's probably the signal they were picking up.
why are those with open access points ignorant? I have an open access point, and I know EXACTLY what I'm doing.
People who think they know everything really piss off those of us that actually do.
My friend has a Linksys wireless base station and laptop; I gave him some minimal help in setting it up in "infrastructure" (unrestricted?) mode.
Unless there is some sort of "wireless sniffer" which can detect in-use MAC addresses, and also unless the wireless NIC can modify its own MAC, restricting the Linksys base station to a specific set of MACs should be sufficient for small-system security, correct?
It would be even better if I could take a MAC from an old NE2000 10Base2 ethernet card and use that MAC, since anyone trying to guess a MAC would probably use the ranges that have been assigned to the WAN manufacturers. It would be best if this could be done under Windows (in spite of my distaste for MS).
I'm just looking for a "hosts.deny" sort of security; I don't really need encryption (and I understand that wireless encryption has been broken anyway).
Pardon me for any technical errors; I'm clueless about wireless.
I don't see any map. All I get is a couple of pictures and two plug-in boxes. Either the site is slashdotted, or it requires you to run "Naked Flash". I refuse to leave Flash enabled because of all the annoying web ads that now (ab)use it.
--
"Open source is good." - Steve Jobs
"Open source is evil." - Microsoft
Appearantly the ignorant one is you considering that the encryption is faulty anyway, why bother fooling yourself...
What really bothers me, is that I drive to work and even though the "drive clean" program has been in effect for years, I'm still seeing black exhaust comming out of trucks and cars. Or about Canadian companies like Eco Logic that have working systems to clean up hazardeous waste, yet receive no support from the government, that still incinerates garbage and pcbs. (kirkland lake area residents what out!).
Not to mention the pollutants from the coal burning electrical plants in Ontario. Let's invest a couple of million and put scrubbers on the stacks so that tons of carbon isn't spewed into the air. And oh, yes, Ohio thanks for your contributions to our haze. You're one of the dirtest states there is, but you don't notice because it blows over here.
I've considered moving just for my health's sake, at a great financial loss. Thanks to the government for giving me this option. (Die of lung cancer, or other respertory disease, or move).
Too bad: According to the map my old places on D'Arcy and Kensington Ave. would have been Wi-Dri.
Fortunately, my new digs are working on going wireless, and legally.
-- clvrmnky
I think this is a childish approach and very dangerous because of the legality of doing this, however I do understand their need to highlight this serious issue, this is clearly the wrong way.
In fact I would go so far as to say this is an unauthorised pen-test, in that part of a pen-test is in finding hosts/networks in the same way the physical location has been found, but not only found, also published.
I dont know where liability and juristiction come into play here, i'm surprised these guys/gals are prepared to go this extreme and risk finding out.
Surely a CNN interview would do their careers good and promote the issue far wider than a website could?
Their network is here:
RoamAD network area
I can't get on to it though. Any pointers? Tips? from the pros. How do you do it?
Is this a very nieve and good samaritan concerned Internet users united thing or a business strategy in order to obtain security work and publicity.
If it's the first, then they should take legal advice.
If it's the second then is this what the Internet has come to? [I'm talking about publicity of themselves and assuming that not all of those networks will be Internet connected].
I live in toronto, and i must say that looking at this map is quite shocking. Then i sat down and really started looking at it, and i made an interesting observation. Most of the really HIGH concentrations of red markers are in RETAIL districts where there are alot of stores with POS systems, shoplifting prevention, motion detectors and store security. Most of these stores probably don't actualy have wireless networks, but have plenty of other things that might generate an rf signal that could be mistaken as a wireless network.
http://www.pdxwireless.org ?
I was going to by a wireless card and a Pringles can and get rid of my DSL. And now someone had to go spill the beans!
One line blog. I hear that they're called Twitters now.
.....when a bunch of war drivers get together and start calling themselves a consulting group. You can't even take their name seriously. I seriously doubt they can offer any serious services besides telling me what the latest news is on slashdot and who has the highest score in Warcraft 3. I wish I could have reputable reporting that doesn't give fly by night groups attention.
Sorry, I can't find the link, but with the right equipment (all consumer available) you can easy link up to any wireless network up to 40 km away.
With your sheilding they might have to be just 1 or 2 km away, which still leaves them completely hidden, and your network totally open.
If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
There's one thing wrong with that title. Can anyone spot it?
| - | - |
I live in Toronto, and looking at the map I'd say that at least half of the unsecured networks are either very small businesses (no more than 5 or 6 employees), residential or one of the universities. The clusters along Yonge, Richmond, Queen, King, etc. are mostly stores with some residential or commercial space above them or condo towers.
Look around King and Bay where the banks are and you'll see that there are hardly any networks at all.
Still a problem, but it looks like the big boys (read the ones we don't want hacked) are doing OK, it's the little guys that are screwing up.
Why doesn't Slashdot ever get slashdotted?
1) WEP all by itself is simply not secure.
2) If you are using another form of encryption (such as IPSEC) then WEP would slow down your network without any security benefits because the data stream would be encrypted twice.
By way of example, I run a Linux server and Linux laptop. The server has a second ethernet interface that is dedicated to the wireless device. Both the laptop and the server are configured to drop all packets arriving or departing via the wireless device except for IPSEC (esp protocol and udp port 500). Forwarding in the server is only permitted from the ipsec (post-decode) interface. If someone wants to use my broadband connection then they have to break IPSEC.
And yet these guys would flag me on their map as an insecure station because I don't use WEP. Maybe they should re-make the map based on whether or not their roaming node can do more than just handshake. Like, try connecting to Slashdot or something....
Are there any open source project to enable roaming "seamlessly" between wireless networks? Greenpacked(http://www.greenpacket.com/) is working on this but AFAIK it isn't open source...
Heil Sig! -Rob
i am both for improving system security AND abusing the ignorant:)
http://roamad.com/roam_home_demo.html
They seem to have solved all that.
I bet here in Ottawa, you'd see a nice red pushpin near 24 Sussex. The RCMP can't grasp the concept of physical security, let alone network security.
If you observe the traffic, you will notice a barrage of UDP packets. Yup! It's JC out back playing his favourite game.. Chrétien-Strike.
There are two teams: MPs and Protestors.
If you play JC, you have your choice of pepper spray or your bare hands.
If you're playing Sheila Copps.. well, trust me.. you won't need a weapon.
I would have thought that a lot of "naked networking" went on there.