KisMAC Developer Discontinues Project
mgv writes to let us know that the lead developer of KisMAC, a passive wireless network discovery tool for Mac OS X, is discontinuing the project. Michael Rossberg lives in Germany and that country has recently passed laws that would make his participation dangerous. He urges visitors to take a copy of KisMAC and its source as long as the site is up, so that development might be continued outside the US or EU. From the website: "There has not been a lot of time for KisMAC lately. However the motivation for this drastic step [lies] somewhere different. German laws change and are being adapted for 'better' protection against something politicians obviously do not understand. It will become illegal to develop, use or even posses KisMAC in this banana republic [i.e., Germany]."
This so totally doesn't make sense and is a desperate attempt at a FP that just doesn't fly. Mod down accordingly. Just calling him out. Thanks.
Hmm, couldn't he contribute anonymously somehow? Login via an encrypted protocol and send code under a "pen name" of sorts?
... Kismac doesn't break into Apples, it lets Apples passively monitor networks and has some basic attack functionality integrated. Your post might be [vaguely] on topic if this was a discussion about an Apple firewall, but for a passive wireless network stumbler? I don't think so...
Free speech is fine but I don't agree with having this tool available to non-professionals in a nice easily installed package.
http://michaelsmith.id.au
Because of its vagueness, this yet to be commenced, but already passed law is a severe threat to the German security community! Experts of different interest groups have repeatedly expressed their serious concerns, but the politicans - naturally knowing better than any expert can - decided otherwise. For more information, please visit: http://www.phenoelit.de/202/202.html
Can he not have a server setup outside Germany and remotely access it and keep the development going on? Simple Example: VNC The development will be outside Germany, in a way. Or, he can break KisMAC into different components, components which are viewed as 'harmless' by the GOV, unless when they get together.
Do I require the c-sig package to have a signature?
Thanks Michael for your support of free speech. I'm really pleased to hear you think it's "fine".
Why don't people seem to get that making these programs obscure does not make you safer? I for one want to monitor my wireless network to see if they are vulnerable to such "cracking" (goddammit, "cracking" is removing copy protection and has been for two decades!!) tools.
They tried to shut down nmap in the same way (it first appeared in Phrack, btw), but I think most people will agree it's an absolutely essential tool for securing your network and checking for open ports, etc.
Making these types of programs illegal (it's this just a macafied kismet?) is absolutely crazy and will result in more, not fewer security breaches.
Quick, someone use svnsync to download the subversion history of the project!
Agreed.
In fact, the airport base stations seem to be quite secure from simple attacks.
What KisMAC demonstrates, more than any thing else, is that if you are using WEP for security, you are usually deluding yourself. A decent percentage of WEP base stations will surrender their passcode within 5-10 minutes, even if nobody is on their network.
Its that scary..
Michael
There is no cryptographic solution to the problem where the intended receiver and the attacker are the same entity.
Though KisMAC is still out there, there are alternatives such as Airsnort, Airattack, WepLab, Web,.. Can a live CD such as this one http://www.securityfocus.com/infocus/1814#auditor be booted off a macintelatosh?
Do I require the c-sig package to have a signature?
What bothers me (i've never heard about this software before) is the trend for western countries to move away from individual freedom. I live in Australia, it is happening here - the doctor that was held without charge for 3 weeks. I know it's happening in the US, but now it seems to be happening in other western countries too. Are there any western countries whose citizens aren't losing their individual freedoms?
At least we are having an inquiry into the matter. How is it in other countries?
At the risk of running afoul of Godwin's Law... What are you, a nazi?
www.tribalnetworks.org - helping tribal people around the world to own their own means of high-tech communications
Also, nice sig. Isn't that a Schneier quote? I could've sworn I've seen it before... and it's been a while since I read Applied Crytography.
Peace sells, but who's buying?
Darn submit button! noticed that myself afterwards. I'm aware that on the older Macbooks (pre 2007) it works fine. But Apple has changed the chipset recently to Atheros and all kinds of problems have crept up, airport dropping connection and so on. It's understandable that KisMAC doesn't support it because its completely different chipset and they haven't updated KisMAC's hardware support after 2006.
www.tribalnetworks.org - helping tribal people around the world to own their own means of high-tech communications
I think the parent makes a good point.
What are the linux/windows alternatives to this 'product' anyways?
Obama likes poor people so much, he wants to make more of them.
Kismet.
a family of lawyers, I'd caution anyone tempted to think of this as an Us Vs. Them scenario. This kind of shit happens everywhere, and it's really only by having the protection of the guns of any particular country that you gain any measure of freedom past the average level that the man on the street considers the lowest possible. It sucks, but this is the reality of the situation. You've only got as much freedom as isn't either explicitly protected, or passed by when politicians make their rounds in "protecting" you against harming yourself.
Everything will be taken away from you.
Open-source should buy and island and form a new "country". Call it Stallmanland? Stalland? Nah. Needs work.
Table-ized A.I.
My German friends laughed at me because of my guns.
"Why would you need that unless you are going to kill someone?" they said.
"To protect myself from others who have them" I said.
"Then why don't they make them illegal?" they said.
I wonder if people will ever understand that criminals don't care about the law. After all, if they did they wouldn't be criminals. Outlawing things like this only hurts the good guys.
Creative Demolition
How about a city? We could call it Stallmangrad. You just have to sign over your rights as you walk through the city gates so that they can be properly protected from the evil capiteelists.
Quote: "German laws change and are being adapted for 'better' protection against something politicians obviously do not understand. It will become illegal to develop, use, or even possess KisMAC in this banana republic [i.e., Germany]."
It's amazing when someone calls his own country a "banana republic".
Managers who were older than 20 when the personal computer revolution began have seldom bothered to learn about the new technology. I guess we will just have to wait until the old dinosaurs retire.
I suppose by your logic you see Iraq as an example of a success, then? A well armed populace sorting out their own problems and fighting off foreign forces, different groups attempting to "retake power"? I assume you defend the rights of the Iraqi people to own their own weapons?
Seems like a bit of a mess out there to me and that things would be better sorted out by unarmed people talking their way through their problems rather than shooting their way through them. You may remember that revolutions have also happened peacefully (e.g. former Soviet republics).
I think Iraq is a fine example of what happens when a heavily armed populace try to sort out their own problems.
Sirs,
Eventually you are missing the point. KisMac is a tool that can discover APs and Point to Point wireless network, Crack WEP, Crack WAP (given a dictionary) and make Injection Attacks with selected hardware (prism cards mostly). So it's just not a purely listening software neither limited to only apple basestations (Airport).
So long the problem is that Germany choose to make illegal tampering with telecomunications, which could be good, but eventually forgot to leave a exception of fair use for research pourposes which is not good.
Enrico
The same apparently happened with the FPGA based unix password cracker located at http://sump.org/projects/password/
Does anyone know of a good replacement for KisMAC. In my opinion it was the best one out there and now that the project is being discontinued I will have to live with the crapshoot that was the passive Atheros drivers.
Can anyone recommend a replacement?
Procrastinating life a way at a rapid rate of speed.
Make everybody a criminal in theory, so it's easier is to suppress the general population.
Politicians are the scum of the earth everywhere. There hasn't been a community-loving politician since Ghandi, and even him we see with rose-tinted glasses and behind the fog of history.
> You've only got as much freedom as isn't either explicitly protected, or passed by when politicians make their rounds in "protecting" you against harming yourself.
That would be so if we were all entirely separate individuals fighting independently, but as long as the politicians "allow" us global communications (and it's hard to ban) then we have the force of numbers, and we have as much freedom as we are willing to fight for. Fortunately the "fight" is largely a matter of posturing, with blood lost only rarely --- the main weapon is making politicians look like total morons in public, which they make it very easy to do.
The reason why we've been losing freedoms hand over fist recently is apathy, and the fact that the politicians are better at propaganda than we are, because of TV. But with a bit of luck, the nature of media might change soon, and the online media is far less susceptible to control.
For the time being though, it's definitely an "Us versus the Politicians" world.
"Free speech is fine"
In my experience, people who say this really *don't* think free speech is fine. What they mean is "Free speech is fine as long as it doesn't affect me in any way. If it does, then I'm really not for free speech"
"but I don't agree with having this tool available to non-professionals in a nice easily installed package"
See? I knew I was right.
You're missing something critically important: who gets to define who is the "professional"? Anybody who makes money working with computers? Or some sort of "certification" is required? Stallman is a kook, but you're making the guy look like a genius when it comes to protection.
At what point does a piece of software go from being legal for "regular folks" to one that requires this special license to use? You're the worst kind of person to make this decision because (a) you really don't like free speech (b) you have no idea what should be done (c) but damnit just outlaw it (d) even if you can't understand what you're asking for (e) and if you're not doing anything wrong, what's the big deal with the government intruding into your life even more.
Please please please. Move into the country and never bother normal folks again.
If they leave their TV on after-hours, it's okay to stand in front of the store and watch it (and if I have a universal remote, maybe even changing the channel), isn't it? Unlike your cappuccino case, no entry is needed. When you look for an analogy, choose a correct one ;-) In both my example and the hotspot's there is no automatic extra cost for the store.
The irony of the situation is that the German government actively sponsors work on security tools such as GPG, OpenVAS, BOSS.
Tim Brown
No, actually, it does work on the new macbook's - you just have to compile KisMAC from sources on your specific "macbook that won't run kismac".
Don't ask me why it works, I have no idea, but works it does - and I'm running the mid 2007 macbook model here.
"Eventually"
You keep using that word. I do not think it means what you think it means.
Part of being a good manager is that you directly manage only stuff you understand.
So if the owner of the company you work for has hired a competent CIO and lets him do his job, that is perfectly OK. In my experience, those who are halfway tech-savvy and start micromanaging things cause a lot more problems.
C - the footgun of programming languages
And when he gets caught he goes to prison. All that risk over some, while nice, not earthshaking/freedom supporting software?
---- Booth was a patriot ----
this is a Mac port of Kismet. If you're interested in security issues you might want to subscribe to Pauldotcom's security weekly podcast - that's how I learn about most of this stuff.
Clear, Dark Skies
How about Gnufoundland?
From the project FAQ:
The source code is only available with subversion, a CVS replacement.I was going to download it (as a gesture; my only Mac runs Linux) but no way I'm going to install SVN just for that! Odd decision, not even providing weekly builds ...
KisMAC is not being discontinued, it is only being moved to servers outside of Germany.
FYI: KisMAC doesn't work in passive mode in the latest ibooks with Atheros AR5008 chipset.
You mean Macbook; I know, stupid term, but "iBook" means a completely different platform, albeit in the same market segment. And it doesn't work in any INTEL Macs; it looks like it works, acts like it works- finds some networks- but nothing beyond broadcast SSID frames are recorded, except for a very limited number of people who probably have one specific revision. You're best off with a PPC system.
Frankly, the guy / the team wasn't getting anything done; this is just a formal announcement for what's been going on for more than a year. The application has seen no UI refinement in 2+ years, there is very little proper documentation, nobody's doing a good job of actually tracking what hardware does/doesn't work, the changelogs aren't maintained, and there's been very little progress on the most important front: support of built-in Apple hardware. Kismet now has more support for said hardware than KisMac does.
This is a complete cop-out. It's been on the brink of abandonware practically since it started.
Please help metamoderate.
One of the things that I use KisMAC for is to see which channel range has the least amount congestion, especially since you can get a lot of WiFi networks on the same channel when people just use the router defaults. I live in a very dense area and I find I can really improve my network performance greatly by optimizing my channel. I have helped a number of friends and family optimize their WiFi networks this way. Now it sounds like something basic like this could be illegal in Germany! That's pretty messed up.
it was probably the easiest to use tool of its type, and all of the mac users that I knew that were interested in security used it. It really sucks that the main developer is going to be pushed off the project.
For those who haven't used it, it is significantly better than kismet for linux. It brings together kismet, and a number of other open source tools for wep cracking and integrates them into a easy to use UI. It is pretty trivial (point and click) to break a wep network with kismac. I've tried the same with the linux tool chain, and it is a pain in the ass in comparison.
I hope that someone else restarts development on this project. It really is a valuable tool that would be a shame to lose.
I have a macbook on which I cannot connect at all to a WAP which an iMac next to it uses all the time. Even right next to the WAP it would report unexpected errors. I spent a while trying to diagnose the problem (including installing kisMac, and finding it didn't work at all on the macbook) before giving up and buying a cheap 802.11g + ethernet switch, which I can connect to from a phoenominal range on the macbook.
As a bonus, I'm now using WPA2 security, though I don't know how secure it really is thanks to the lack of working tools like kisMac.
If passive sniffers are illegal, only criminals will have passive sniffers.
Wait, I've heard something like that before...
In both my example and the hotspot's there is no automatic extra cost for the store.
:)
Unless, of course, they have tiered pricing based upon bandwidth used. Or, to extend your analogy, it may be possible that those other channels are pay-per-view
Eloi, Eloi, lema sabachtani?
www.fogbound.net
The SIM card in question was found in his cousin's house."
What part of "a well regulated militia" do you not understand?
Why set it in a physical space? The Cyberspace was already declared independent. Run the development via hidden servers accessible via Tor or other suitable technology. A combination of cloaking and redundancy may buy us all few more years of relative freedom.
Europeans and Americans complain about such trivialities. Come live in a real banana republic for a year (and not in a high security, paid-for-in-Forex complex either - rather live just like a local middle-class citizen).
(And no, this is not to denigrate the concern about the gradual slide towards a global police state.)
Free, as in your money being freed from the confines of your account.
...they can kis m ac!!!
(Seriously: banning tools instead of banning people will only make the problem worse. Just because computers can calculate missile trajectories, they are not tools of terrorism. This logic will drive us nowhere as humanity.)
Let software thing be itself.
Dumbass
The tiered pricing is a possible problem, I will agree. Then again, I doubt they would have a contract of this kind: as enterprises they want to have predictable costs, so they would most certainly buy flat-rate Internet access. Oh, and it's the first time I know of a pay-per-view channel being accessible by using the remote on the TV box (you don't mean you would play around with the TV provider's box, do you?).