Wireless Security Attacks and Defenses
An anonymous reader writes "IT-Observer is running a comprehensive overview of wireless attacks and defenses. From the article: 'Wireless technology can provide numerous benefits in the business world. By deploying wireless networks, customers, partners, and employees are given the freedom of mobility from within and from outside of the organization. This can help businesses to increase productivity and effectiveness, lower costs and increase scalability, improve relationships with business partners, and attract new customers.'"
..yet not a mention of WPA
The article doesn't mention several things, like the more modern methods that wireless hackers are breaching security. instead of attacking at layer 3, attackers these days are focusing on layer 2 attacks... they're attacking the wireless device drivers themselves, looking for a way in. I heard a podcast where Joshua Wright was mentioning taking over devices that way so as to avoid those pesky firewalls. I just googled wireless hack layer 2 stack driver joshua wright to find some articles. You're on your own for specifics though - just say no to script kiddies.
Your sig(k) has been stolen. There is a puff of smoke!
Haven't read TFA, just your summary here. Thanks for exposing your brain to this IQ sucking pap so the rest of us don't have to. Do they really call WEP "Wireless Encryption Protocol?" Because it means Wired Equivalent Privacy. They got every fucking word in the acronym wrong!
WEP is also, as you point out, not anywhere equivalent to wired privacy.
Sigh.
"Hey, look at me! I just read two chapters in a "Wireless for Dummies" book and I'm getting paid to write an article in a trade journal!"
Where's the justice?
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
One thing people often do is put the AP INSIDE their firewall, such as hanging it on a spare switch port.
All the advice if for SERVERS but what about clients?
In my office I can reach a nearby free WiFi. For kicks I set up my AP with the same SSID and ran it open. Sniff Sniff. Not even illegal as they are connecting to ME ! Remember kids, no expectation of privacy in public places runs both ways =)
There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter