Slashdot Mirror
Wardrivers Target Seattle Businesses
angry tapir writes "Seattle police are investigating a group of criminals who they say have been cruising around town in a black Mercedes stealing credit card data by tapping into wireless networks belonging to area businesses. The group has been at it for about five years, according to an affidavit signed by Detective Chris Hansen, a fraud investigator with the Seattle Police Department."
It would be easy to set up a weakly protect access point that did nothing but generate bogus transactions with bad credit card numbers - that could pollute the crook's database, particularly if they don't do a good job of recording of which card number came from which network.
And if the bogus numbers were timestamped and logged then when the bad card numbers are used (and bounced) one could use the bounced transactions to build a map of where the crooks were on any given day.
We discovered that the company below us a few years back (here in Seattle) had not only an open wifi but also had all of their drives shared. We immediately went down stairs and warned them after one of us accidentally connected to their wifi and saw a whole bunch of computers (with official sounding names even) pop up in the file explorer.
Their reaction? "Whatever." They never put a password on it. I was actually surprised by their disinterest in locking down when alerted. Even after we told them that people could just drive by and steal all their company records... so stupid.
It was a 1988 Mercedes. The laptop and antenna might have cost more than the car.
This sentence no verb.
With money to be made breaching networks, practitioners of one of the oldest professions in the world, will be learning to breach insecure WiFi networks
Hookers are taking hacking classes now? Finally some slashdotters are going to meet some women!
John
These guys were wardriving + the police are after them = cops are after them because they were wardriving
Which is stupid. The cops are after these guys for misusing the information they obtained, not because they were wardriving. If they had been wardriving, and simply retained the information for their own use the cops never could have found them and never would have needed to. Quite frankly his posts are aggressive and irrational, and I was trying to explain to him why the cops are actually after these guys. From the first sentence in the summary:
stealing credit card data
And if you RTFA you learn that the owner of the Mercedes was only discovered after he was busted performing other forms of fraud.
Using someone else's credit card is criminal. Doesn't matter if they use a megaphone and tell the whole world what it is
While yes using someone else's credit card fraudulently is criminal, I wouldn't say the megaphone bit doesn't matter.
Screaming out their customers credit cards of course does NOT excuse the wardrivers crime in any way shape or form. But the separate act of sending all of their customers credit card information to the world should also be a crime as well.
At the very least I wish the police would post a list of these companies, so the general public knows they can not be trusted with our business.
At most, the companies should be brought up on charges of mishandling customer credit accounts and fraud.
They will just need to schedule that court case for a different day than the wardrivers court date, so everyone can attend.