Slashdot Mirror
Best Wireless SSIDs You Have Seen?
Ant writes "Best SSIDs you have seen is the name of the new Broadband Reports' wireless security forum.
Funny ones listed that made me chuckle: WardriversOpenAP,
GET LOST,
HackedAP,
SecureAP (no WEP/WPA), TOP_SECRET, HPD-FieldOffice,
MiddleEarth, HoneyPot, mine, and people's full/last name." I think naming your network 'Default' or 'Linksys' should be a crime ;)
The best SSIDs are generic names like linksys or default. Generic names most always mean I get free wireless access.
Gravity is not just a law, it's also a good idea.
Found one that said "SECURE_ME". A quick Windows share enumeration showed sales data and presumably credit card information avaliable to anyone who was listening.
I informed the business owner that it needed to the secured, and he said his ISP had called and asked him about an "open access point - whatever that is". I sighed and left.
"liberty and justice for all those who can afford it"
Not trying to be funny here, but I've seen HACKME and my boss insists that I use his last name so that he can remember it. (Even though it's broadcasted.)
I just hope he doesn't get mad at me when he gets hacked and someone starts downloading child porn and The Anarchist's Cookbook using his broadband connection.
-Arthur
Cave ne ante ullas catapultas ambules
Wow, a "story" on a slashdot forum about a lame "what's the best post" on another forum.
Too bad I can't mod the entire story as -1 LAME.
is "linksys". From that point, I know that the AP is unsecured, and has a default admin password. I visit a cafe a lot in my town, and they have wireless internet that you have to PAY for, and it's like $20/hour, which is ridiculous to pay that much for wireless internet access. But what's more amusing is that it's unencrypted AND still has the default password to the admin console. I feel sorry for anyone who's paying that $20 to surf the web there.
HackerDetected and Iwillsniffyourpackets are a couple I've seen.
There are some people that if they don't know, you can't tell 'em.
http://www.netstumbler.org/showthread.php?t=11311
I can't speak for many others but my SSID is "KeepDrivingAsshole" - I've also seen one in my wardriving travels called, "LeaveMeAlone". Apparently somebody had already had a bit of fun with his network, eh?
I love idealists not because I am one, but because they make life bearable for pragmatists such as myself.
my friend and i were at a summer camp where we werent supposed to have internet access, but we plugged in a WAP we brought and set the SSID to "drewisawanker"
drew was the name of his RA
the next day we saw 3 RA's walking through the hallway trying to triangulate the location of the WAP
crazy kids we were!
when it's a Netgear with WPA running then I don't want to be right.
BeaverNet, and before you ask.. yes, it was "wide open" :)
http://www.fsckin.com/
Up until two weeks ago, mine was the only SSID visible, Ok, so it's called 'home', but it's not broadcast, it's using wep and it's locked down by MAC address last week default and sitecom appeared. Both with default router passwords, I guess someone in my neighborhood got broadband for christmas. I feel like broadcasting my SSID and changing it to 'I'm at number 35, for god's sake please come over and speek to me about wireless network security!'
Mine is "Sorry, the network is down right now." with MAC filtering enabled. Nobody ever stops to play with my AP.
How am I supposed to fit a pithy, relevant quote into 120 characters?
YOu can search for SSIDs, MACs, and cities and states at WiFiMaps.com. Funniest ones I've seen:
hellostumbler - Framingham, MA
buyclamsonline.com - Pittsburgh, PA
Zhrodague.net - I do projects and stuff too.
I used to live fairly close to a major street and not too far from a university campus, so wardrivers were always trying to connect to my network.
So I decided to ask WWTBOFHD? (What Would The Bastard Operator From Hell Do?)
So, I set up a nice AP called 'linksys' with no WEP. Obviously, every freeloader on the planet would try and connect to it.
Oh, and you could connect to it alright. The problem was that it was connected directly to a proxy server that rerouted every web request directly to goatse.cx and blocked everything else.
Apparently the word got around, and the number of people trying to access that AP went down precipitously after that.
I'm such a bastard...
I set up one for a buddy of mine with this SSID. His building is right next to a post office, so it adds credibility. It's hilarious to watch people come in and see "do you want to connect to noconnect-federaloffense?" One literally jumped back from his laptop.
I guess the Man has us trained well!
At a hotel that charged for Internet access, someone had an access point with the SSID, "LeaveBeeror5dollarsatRoom505". Nice, cheap, easy Internet access without the $15 charge the hotel wanted.
My home AP is named "FuckOff". It's secured (to the extent that an AP *can* be secured) well enough.
My neighbor INSISTS on leaving his WRT54G unsecured. I change it whenever I'm bored (I've also connected to the LAN, and then to one of his shared printers and printed out some "interesting" photos). I'll name his AP stuff like "pimpwifi" "secureme" "hellomike", etc. Nothing too interesting really.
-This sig intentionally left blank
*****
:)
It's easy to remember
I think the one most relevent to current events is the coolest. That'd be Cisco's "tsunami" default SSID on some of their access points.
WEP is secure enough imho, and anyway, it's all my router supports and I'm not going to fork out for a new one just yet. In the meantime I change the keys weekly. Sure a MAC address can be cloned, but it's not exactly something that your average script kiddie is going to do. Hell, if someone really wanted to see what I was up to they could just tempest my CRT. It's about an apropriate level of security, and for me, MAC filtering, not broadcasting my SSID, and changing my WEP keys is enough.
Although lots of people are bashing it, I think default is actually quite a good name (assuming that the router isn't still in its completely default config!) Linksys is not so good as it gives away the manufacturer and allows an attacker to target the attacks. I do however think that default is a lot better than people using house or family names, as that identifies where the AP is. Even using mordor or middleearth or similar can give away your interests, and thus possibly who you are to someone who knows your street well... default is nice and unassuming.
Acquintance of mine has a SSID "Blew me for helping with WLAN" (In Finnish though, "Imutti WLAN-avusta", I think) in his neighbourhood. He's been looking out through his window since the discovery at his neighbours lately trying to figure out which woman it is, always willing to help out.
Turning off the SSID is a great step towards keeping the wardrivers away, but if you have a neighbor that wants to get on that network, it won't stop them. The SSID, unfortunately, is still broadcast in the association frames even if beacon frames are disabled. A dedicated attacker is going to get in, so best use something other then just WEP with MAC filtering and beacon frames disabled.
It was also common to use what looked like a business name or the a person's first name ("lisa") as the SSID. Some AP's had random alphanumerics or what was obviously an attempt at a password for the SSID.
I also did a very basic analysis of some of the interesting things I discovered, such as...
The sample size for this was about 250 AP's during the outbound trip. On the return trip I ran NetStumbler for a lerger portion of the ride and recorded over 1000 AP's (some of which were duplicates of course) but I haven't taken the time to anlyze this larger data set yet.
I didn't try to connect to any of the AP's... most of them would come and go within a few seconds anyway. :)
I'll just wave that one on.
"Learning is not compulsory... neither is survival."
--Dr.W.Edwards Deming
Umm....let's see how hard it is to figure out who is running an AP.
Step 1. Get laptop or $20 Wifi strength meter.
Step 2. Walk around.
Step 3. Use publicly available sources to find out who lives there
And if you really think someone gives a shit if you like LOTR, I think you need a bigger tinfoil hat buddy.
In the process committing a serious crime.
You don't have the right to decide how other people should manage their network. The fault here lies with the manufacturers for providing systems that require too much effort to secure.
Terrorising people into behaving in the way you think they should is despicable. Who made you King?
Looking for an Information Security student project suggestion?
Try http://dotcrimeManifesto.com/
I knew this little old lady who didn't lock one of her windows, so I snuck in and changed all her locks and added a vulgar greeting to her answering machine! Boy was that funny!
Now she locks her windows, has new locks and generally has better security at her house! Mission accomplished! I'm glad I took the time to teach that stupid old lady a lesson.
Agile Artisans
With or without the name of the manufacturer, it is the same. You can always discover the manufacturer - MAC address is unique, and its first part is assotiated with the manufacturer.
No sig today.
The real question is why you feel the need to "help your neighbors"? What's the point?
It's not your job and they didn't ask you to. An open AP is not hurting anyone.
If you have an innate need to contribute to society, pick up trash by the side of the road... visit old folks in a retirement home... give blood... contribute to a SourceForge project.
But don't hack your neighbors to "teach them a lesson".
Agile Artisans
Who made you King?
Linksys did. Dude, read the post you're replying to, ok?
Assorted stuff I do sometimes: Lemuria.org
Remember we're talking about the kind of end-users who set their password to their kids birthday and STILL manage to forget it. Actually expecting them to accurately transcribe a 20 digit alphanumeric string off the box (which they probably threw away immediately, along with the manual) is asking a bit much, and getting them to read the RIGHT number off a sticker on the unit (which likely has a half-dozen different numbers on it)
Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
"So I changed their SSID to "Yeasty Cunts" and then I booted and blocked them off their own network. I felt that doing this would teach them a little lesson in security."
It taught me a lesson on how to be an asshole.
"Derp de derp."