Slashdot Mirror


Researchers Hack Wi-Fi driver to Breach Laptop

InfoWorldMike writes "Security researchers have found a way to seize control of a laptop computer by manipulating buggy code in the system's wireless device driver, reports Robert McMillan. The hack will be demonstrated at the upcoming Black Hat USA 2006 conference during a presentation by David Maynor, a research engineer with Internet Security Systems and Jon Ellch, a student at the U.S. Naval postgraduate school in Monterey, California. They used an open-source 802.11 hacking tool called LORCON (Lots of Radion Connectivity) to throw an extremely large number of wireless packets at different wireless cards and see if they fail. They declined to disclose the specific details of their attack before the August 2 presentation, but said it was potentially a huge hole because exploiters could simply sit in a public space and wait for the right type of machine to come into range to attack. "This would be the digital equivalent of a drive-by shooting," said Maynor. The victim would not even need to connect to a network for the attack to work, he said."

16 of 199 comments (clear)

  1. Great news by heinousjay · · Score: 4, Funny

    I'm glad I still run DOS. No wireless support means I'm safe from these dirty hackers, and any sort of modern productivity.

    --
    Slashdot - where whining about luck is the new way to make the world you want.
    1. Re:Great news by bitt3n · · Score: 5, Funny

      actually thanks to rigorous backwards compatibility, you can be perfectly safe from productivity all the way through Vista.

    2. Re:Great news by tgd · · Score: 4, Funny

      I'm glad I still run Linux. No wireless support means I'm safe from these dirty hackers, and any sort of modern productivity.

      (this isn't going to be pretty.... *ducks*)

  2. I'll wager... by spune · · Score: 1, Funny

    I'm willing to put $50 down to say that affected manufacturers include my mine.

    1. Re:I'll wager... by LittleBigLui · · Score: 2, Funny

      You own a mine that produces WiFi chips?

      --
      Free as in mason.
  3. Clearly the solution is... by MarkByers · · Score: 4, Funny

    Security researchers have found a way to seize control of a laptop computer

    They used an open-source 802.11 hacking tool ...

    Clearly the solution for stopping people finding security holes is to make distributing open source hacking tools illegal. Isn't this already covered by the DMCA or do we need a new law?

    --
    I'll probably be modded down for this...
  4. Great! by Descalzo · · Score: 3, Funny

    Now I can't use Wifi until August. Thanks a lot.

    --
    I cried real tears when Li Mu Bai died.
  5. Re:Base Station? by Anonymous Coward · · Score: 4, Funny

    Why would you want to attack a venerable basestation? I thought we liked those. A lot.

  6. So what? by Anonymous Coward · · Score: 4, Funny

    What's the point of thiCan you satisfi your women? cheap meds!^D^Dexiy

  7. Wait a minute.. by Frightening · · Score: 4, Funny

    So the researchers blew up the compromised laptop in a Japanese conference as proof-of-concept? Im confused.

    And that's just cruel. I mean, you fried the guy's BALLS, man.

  8. Drive by shooting? by lxs · · Score: 4, Funny
    "This would be the digital equivalent of a drive-by shooting," said Maynor.


    In related news, 50cent wants laptops for inner city kids.

    Mr. Cent was quoted as saying: Now you can be a victim of a driveby without ever leaving the house, how gangsta is that? Mr. Cent refused to comment whether the laptop will be available with a 1000W sound system or gold plated mouse mouse options.
  9. Re:Greater problem by Bob_Geldof · · Score: 3, Funny

    C is good for number-crunching, but definitely not for anything touching strings.

    While I can't say anything for using C with strings, the real number crunchers of the world agree that God's language is the only appropriate one, fortran.

    --
    887321 = 337*2633
  10. Re:Greater problem by eclectro · · Score: 4, Funny

    While I can't say anything for using C with strings, the real number crunchers of the world agree that God's language is the only appropriate one, fortran.

    No joke. Device drivers should be written in Fortran. Because if there was any bug in the program, the device driver would never ever work in the first place. Not even partially.

    I think we have solved the problem here folks. Just remember you saw it here first on slashdot.

    Another idea - need to open source you program, but really don't want to - use Cobol.

    --
    Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
  11. Re:Base Station? by Zhe+Mappel · · Score: 2, Funny
    I wonder if this could be used to attack a wired network through a venerable basestation?

    You are welcome to come to our dojo and try through the Exalted Master of Shin-Fu base station. But beware, warrior.

  12. Webster to the rescue by Propaganda13 · · Score: 5, Funny

    Hacking: to make chopping strokes or blows
    Tool: a handheld device that aids in accomplishing a task

    An example of a hacking tool is an ax or hatchet. Almost all laptops seem vulnerable to this hacking tool. One previously unknown exploit is that this hacking tool can make a wired network into a wireless network.

    Thank you and good night.

  13. Re:Turn it off! by denttford · · Score: 2, Funny

    I think you mean: A perfect example of why you should ALWAYS disable your neighbor's WiFi adapter when you aren't using it.

    --

    Leben Sie jetzt die Fragen.