Slashdot Mirror
Wi-Fi Pineapple Hacking Device Sells Out At DEF CON
darthcamaro writes "At the recent DEF CON conference over the weekend, vendor were selling all kinds of gear. But one device stood out from all the others: the Wi-Fi Pineapple — an all in one Wi-Fi hacking device that costs only $80 (a lot cheaper than a PwnPlug) and powered by a very vibrant open source community of users. Pineapple creator Darren Kitchen said that 1.2 Pineapple's per minute were sold on the first day of DEF CON (and then sold out). The Pineapple run Linux, based on OpenWRT, is packed with open source tools including Karma, DNS Spoof, SSL Strip, URL Snarf, Ngrep, and more and is powered by g a 400MHz Atheros AR9331 MIPS processor, 32MB of main memory and a complete 802.11 b/g/n stack. Is this a tool that will be used for good — or for evil?"
I, for one, am imagining a world where a large number of mass-produced devices, sold to a large number of different parties, can be used for both good and evil at the same time. Blows my mind; but there it is.
Zomg it's a call for piggy backing another chip.
Such a waste.
Unequivocally evil. It doesn't matter who you are or what you use it for, you're an evil hacker that needs to be monitored.
Is this a tool that will be used for good — or for evil?
Yes.
Is this a tool that will be used for good -- or for evil?
There is only one answer to this: Yes. Yes it will.
Too bad packing its functions up in an easy appliance means it now no longer has anything to do with "hacking" at all. You aren't a "hacker" if all you do is run some appliance.
Might as well call yourself a master baker for using a bread baking machine... or even a toaster. Well, no, no you aren't.
That the security industry claims otherwise means that they are deluding themselves... and us. We're not getting our money's worth in security out of their efforts. But we do get nice toaster equivalents, complete with instant "hacker" label. Nice, innit?
Instead of wireless enabled fruit, device is actually just some plastic and electronic bits. I was under the impression this device would be concealed in a pineapple for stealth hacks. (Nobody suspects the fruit with an antenna)
Going a step further, if a Pineapple user is inside a coffee shop (or office location), the research can execute what is known as a "deauth" attack, essentially disconnecting the end user from legitimate access point, then reconnecting him or her to the Pineapple.
However, some security experts say that weaknesses in WiFi and user behavior need to be identified and weeded out in order to make organizations more secure. If the Pineapple is able to help security researchers do that, they say, than it will improve security for us all.
As a user, how the fuck can my behavior be modified to deal with a deauthorization attack?
WiFi has become so stupid simple to use that it leaves us vulnerable, despite all the encryption in the world.
[Fuck Beta]
o0t!
...or just disable auto-join.
Keep an eye out for DEFCON 21 t-shirts in your local coffee shops this next week...
3rd Man: You could stand and scream for help.
Sergeant: Yeah, you try that with a pineapple down your windpipe.
3rd Man: A pineapple?
Sergeant: Where? Where?
3rd Man: No I just said: a pineapple.
Sergeant: Oh. Phew. I thought my number was on that one.
3rd Man: What, on the pineapple?
Sergeant: Where? Where?
3rd Man: No, I was just repeating it.
Sergeant: Oh. Oh. I see. Right. Phew. Right that's bananas then. Now the raspberry. There we are. 'Armless looking thing, isn't it? Now you, Mr. Tin Peach.
I can see buying one for the convenience of having all the software pre-installed for you, but the specs for the hardware aren't any different than a dozen home WiFi routers, which can run OpenWRT and sell for $40.
I'd think giving those aging home routers a second life as security tools would be better than everyone buying another new product for twice the price, and eventually throwing both away. I recently added a USB sound card on mine, for use as a streaming audio player.
Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
5. Too late to put the pin back in on that typo.
Their what?
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
I hope it can be used for evil, because "good" these days amounts to a circle jerk with NSA, DEA debauchery. Your privacy is yours to own, and if other people begin to realize how screwed they are maybe they will choose a better path.
Sure, get your wifi pineapple, but I've already got a wifi pineapple buster.
Blessed are the pessimists, for they have made backups.
When your phone/tablet/laptop has WiFi set to "Automatically connect to any known network" mode, it sends out probe requests with the SSID of all your known networks, something that looks like "HomeWifi,WorkNetwork,PocketWifi,Starbucks".
WiFi Pineapple has a mode where it captures these packets, starts a new open WiFi network called "HomeWifi" (or whatever's in your list), waits for you to connect, and now... they're the man in the middle. Scary stuff...
Old news, they have had wireless devices in coconuts for years. Maybe they are expecting better antenna diversity from the rough end of the pineapple, I dunno.
See, http://goo.gl/VoirWo
Sigger than your average
Are you serious? $80? I'm just wondering if these people are lazy.
You know how many SoC's there are out there that can run entire OS's like Kali Linux or Ubuntu? Kali Linux supports plug-and-play on TONS of wifi drivers that are a pain to put on an ARM box.
Is this a tool that will be used for good â" or for evil?"
Both, like any tool. Next question.
Assorted stuff I do sometimes: Lemuria.org
Nothing illegal per se but ... well, not according to Ted Bundy. This, and kommie-kopisism and you are all set to take on the world Ted Bundy style !! Enjoy the fruits !!
I don't know anything about this type of device, but looking in from the outside, the question springs to mind "How is this legal?"
It's for hacking into networks, right? Isn't that against the law, like, EVERYWHERE? It says "Stealth Access Point for Man-in-the-Middle attacks" - that sounds illegal. It also says "Easily concealed and battery powered " - nothing dodgy going on there!
How can this be used for good? Maybe a few people may use it to test the security of their network, but that's clearly not what it's for.
I'd have thought that the police would be all over this, but like I said, I'm obviously missing something.
so, what's the dealio? is the whole thing packed into a real pineapple, or what?
No its packed inside a plastic lime thats inside a plastic coconut. They just call it a pineapple because it confuses the f*** out of the authorities.
So 'framing' Karma is bad now? pretty bold statement from and AC. I think it looks like you are complianing where there is no problem.
who wrote the summary? A dyslexic chimp? Or a /. editor?
Oh right, same thing.
Wow. This was news when they were released back in 2008. It is interesting to see the devices becoming popular again.
Back in the day they were demoed by putting the little unit and batteries in a novelty plastic cup shaped like a pineapple. The lid had a hole for a straw that was just the right size for a wifi antenna.
You can buy those cups on Ebay and in party stores.
Learning HOW to think is more important than learning WHAT to think.
to the nsa for 80 bucks
what a bunch a suckers go to that event
so much for any statement that knoledge should be free
they no better then black hat people that are capitalists.and they are NOT hackers
So 'framing' Karma is bad now? pretty bold statement from and AC. I think it looks like you are complianing where there is no problem.
There's nothing wrong with 'framing' karma if you can get away with it. In fact I've been blaming it for most of the bad things in my life for years. Now, 'farming' karma is a completely different issue. I'm pretty sure you can't do that without licensing it from Dice (courtesy of an IP sharing agreement with Monsanto).
Using the "onion" protocol.
People Waited In Lines at DEFCON. More on that and many other obvious observations at 11.
While you claim others "don't get the concept", you seem to have totally missed the cornerstone of how F/LOSS is monetized.
It makes perfect sense for someone knowledgeable and skilled to assemble exactly the right hardware components, and compile+install just the right F/LOSS software components, into an easy-to-use appliance, and sell these at whatever price point the market is willing to pay. People are not paying for the "licenses" they are paying for the labor that went into combining all the supplied pieces together - and perhaps also for getting future support and developmen. In other words people are paying for professional services in a nice and understandable package.
I have no idea why you feel the need to bash this concept with such contempt, but this approach is just about the most popular way to monetize F/LOSS on the planet. It is also shows the clear strengths of F/LOSS: that anyone can take the software, modify it, expand it, improve it, and share it with all other customers without negative impact to the original supplier.
If you want to take the software and install it on a PC, go right ahead. Feel free to install other drivers in the process. Make a laptop-version and share it as much as you like. Go right ahead. But while you may be perfectly willing to spend loads of time on this, others may not. Not all network experts want to mess with assembling their own hardware. Or spend endless nights compiling new versions of [insert-whatever-FLOSS-component-here] just to make a brief packet analysis in the field. It is not trivial to compile and combine all the right F/LOSS products included in the packaged mentioned here and some people are happy to pay someone else to get that job done.
The fact that people are willing to put money on the table for the service and labor this man has produced with F/LOSS software is by no means "retarded". It is a testament to the viability of F/LOSS economy, and clear proof that customer value can be added to F/LOSS without bogging customers down in complex licenses and EULAs.
Ah, damn, I noticed too late you posted as AC. Well, since you won't stand by your words, I guess producing a decent and intelligent answer was a waste of time...
- Jesper
My security clearance is so high I have to kill myself if I remember I have it...
...to connect Apple computers?
Ezekiel 23:20
, and
is business form. It is so called because it de-confuses the objects. I'll throw in some semi-colons if I'm up to it; even commas can be insufficient (and no, not that one).
It was a rainy night in Georgia. A rainy night in Georgia. And the golden shower I drenched upon Georgia, who by the way walked like a woman, talked like a man, and then some.
As you can see, removing the comma from man, makes it seems like she talked like a man and then some, but no, I drenched (Georgia) and then some. See? You can learn something at /.
Now the raspberry. There we are. 'Armless looking thing,
Ha! But as we all know, the Raspberry [Pi] is anything but ARM-less.
Orange you glad that all these puns were made?
Seriously. Why isn't this thing the least bit pinapple-looking?
Yeah, because there is such a value to slashdot karma that someone is being paid to increase it.
Jesus fucking christ but the stupidity of people on a site that claims to be for educated techies is staggering.
The percentage of slashdotters so immature as to give a fuck about karma is in the single digits - not worth paying anyone anything to garner.
Well played sir. Kaboom!
it's only a $100 aircrack-ng portable device.. you can easily install aircrack-ng (for FREE) on your laptop and just buy an Alfa wifi antenna at the cost of $24.
Did anyone else notice that the Wi-Fi Pineapple was featured on USA Network's "Necessary Roughness" last week? Nico used it to hack an auto body shop worker's laptop after he they found out the guy owned property in the Caymans used for laundering money for V3.
Wtf AC?? It's just a pineapple pun. Just chillax, you make me feel bad.
The account is currently "farming" karma and mod points by asking questions and posting comments that can be moderated up by other managed accounts.
guilty guilty guilty. I'm posting a shill question asking if the device comes in a pineapple, so I can post a self serving response and mod it up for greater visibility. Brought to you by Dole Pineapples!