Anonymizing Wi-Fi Device Project Unexpectedly Halted
An anonymous reader notes that a project to develop an anonymizing Wi-Fi device has been canceled under mysterious circumstances. The device, called Proxyham, was unveiled a couple weeks ago by Rhino Security Labs. They said it would use low-frequency radio channels to connect a computer to public Wi-Fi hotspots up to 2.5 miles away, thus obscuring a user's actual location. But a few days ago the company announced it would be halting development and canceling a talk about it at Def Con, which would have been followed with a release of schematics and source code. They apologized, but appear to be unable to say anything further.
"In fact, all [the speaker] can say is that the talk is canceled, the ProxyHam source code and documentation will never be made public, and the ProxyHam units developed for Las Vegas have been destroyed. The banner at the top of the Rhino Security website promoting ProxyHam has gone away too. It's almost as if someone were trying to pretend the tool never existed." The CSO article speculates that a government agency killed the project and issued a gag order about it. A post at Hackaday calls this idea absurd and discusses the hardware needed to build a Proxyham. They say using it would be "a violation of the Computer Fraud & Abuse Act, and using encryption over radio violates FCC regulations. That’s illegal, it will get you a few federal charges — but so will blowing up a mailbox with some firecrackers." They add, "What you’re seeing is just the annual network security circus and it’s nothing but a show."
"In fact, all [the speaker] can say is that the talk is canceled, the ProxyHam source code and documentation will never be made public, and the ProxyHam units developed for Las Vegas have been destroyed. The banner at the top of the Rhino Security website promoting ProxyHam has gone away too. It's almost as if someone were trying to pretend the tool never existed." The CSO article speculates that a government agency killed the project and issued a gag order about it. A post at Hackaday calls this idea absurd and discusses the hardware needed to build a Proxyham. They say using it would be "a violation of the Computer Fraud & Abuse Act, and using encryption over radio violates FCC regulations. That’s illegal, it will get you a few federal charges — but so will blowing up a mailbox with some firecrackers." They add, "What you’re seeing is just the annual network security circus and it’s nothing but a show."
It is a violation of the Computer Fraud & Abuse Act, and using encryption over radio violates FCC regulations.
I think they mean that encryption on licensed Ham bands is illegal, since encryption over radio is perfectly legal (otherwise both Bluetooth and Wifi would be illegal).
Its just a low throughput relay moved down the bands a little. Any SDR tranceiver and a copy of GNU radio could have this up and running in a couple of hours.
Paid off, or on to something good and keeping it qiuet??
Sure you can.
Wonder if they bothered to get a Grand Jury to rubberstamp it....
"I do not agree with what you say, but I will defend to the death your right to say it"
Gag orders and national security letters have no place in the Land of the Free.
This should be too obvious to even be worth saying.
More U.S. government corruption? Hidden agencies in the U.S. government can do secret projects that are bad for the country.
GRC's | TrueCrypt, the final release, archive
Last crap (read: expensive) hotel I was in offered internet access at $15 per device per day and free service in the lobby. Bought a Nanostation with the hopes that next time it might extend service from whatever room I end up in into the lobby. But if it doesn't, my plan was to use my phone to buy access, clone the mac to the Nanostation, set it up in station mode, and connect the Nanostation to an OpenWRT access point configured to put all traffic through a VPN before sending it out the WAN port to the Nanostation. Thus avoiding the issue of the more intelligent operators looking for access point "leakage" and letting me connect more than one device. If the hotel actively tries to shut down ANY access points that aren't theirs, I'd turn off the radio and use the LAN ports. Yeah, I guess that makes me a scumbag too. I figure at $15+ a day for almost no service, I'm in good company. :P
Replace the network cable with two Nanostations bridging the connection and you've got this same item (the locoM9 does 900 Mhz, if that's what is wanted). I'm not really sure it's all that genius, to be honest.
...and they didn't want to go to jail for a useless gimmick? That, or a squad of Ham operators had a horse head delivered to the developers; you know, to hint at consequences for abusing their bands.
I'm guessing the ~450Mhz PMR / FRS bands due to the availability of cheap commodity hardware (with the same nominal range) that will cover the various international allocations, and the fact that these radios are generally pretty easy to interface in (i.e. setup parrot repeaters etc) Failing that the VHF ham bands as others had said.
Either way it was never going to be a goer, even if they chose to disregard the permitted spectrum use, there was never going to be the bandwidth to float this kind of thing, especially when your sharing it with every other station within several miles (propagation can be a bitch). I doubt there has been some massive cover-up, more likely some software guys setup a radio modem with 2 handhelds and got carried away, before crashing head-first back into reality.
Almost certainly this is due to it using Ham frequencies and some other crap, and nothing to do with OH NOES TEH NSA.
It's trivially easy to build a signal boosting reflector out of some aluminum foil and construction paper, or use one of the 8139417234 different cantenna plans on dem innernetz.
Last crap (read: expensive) hotel I was in offered internet access at $15 per device per day and free service in the lobby. Bought a Nanostation with the hopes that next time it might extend service from whatever room I end up in into the lobby. But if it doesn't, my plan was to use my phone to buy access, clone the mac to the Nanostation, set it up in station mode, and connect the Nanostation to an OpenWRT access point configured to put all traffic through a VPN before sending it out the WAN port to the Nanostation. Thus avoiding the issue of the more intelligent operators looking for access point "leakage" and letting me connect more than one device. If the hotel actively tries to shut down ANY access points that aren't theirs, I'd turn off the radio and use the LAN ports.
Since the FCC has declared that Wifi blocking is illegal, why not just use your phone as a hotspot and then you don't need to carry around a network closet's worth of wifi equipment with you? Worst case, get a USB cellular modem and plug it straight into your laptop.
Yeah, I guess that makes me a scumbag too. I figure at $15+ a day for almost no service, I'm in good company. :P
Replace the network cable with two Nanostations bridging the connection and you've got this same item (the locoM9 does 900 Mhz, if that's what is wanted). I'm not really sure it's all that genius, to be honest.
Doing all of that just to get "free" wifi doesn't make you a scumbag, it makes you a geek.
So it was probably the gubbmint. Thanks, Obama.
Thanks to the first amendment.
I couldn't see how this would be legal. Operating a transmitter at 900mhz requires a license. You don't simply start transmitting without either using air ways that are open to usage ( Ham operator - still requires a license to operate) or that you own the frequencies. As 900mhz is mainly cellular I didn't believe that the article was real.
The FCC showed up saying "Bitches, the ERP limit on unregulated devices exists for a reason."
'Cause there's two ways a wifi signal is going for miles: Breaking the half-watt (?) limit, or a more popular and 100% more legal alternative strategy of impressing a used Pringles can into service as a po boy directional antenna. I'm pretty sure that no variation of "I just discovered what a directional antenna is" is going to be accepted as a DefCon presentation, therefore...
As a longtime ARRL license holder I was following this project closely and I have to say...what whoever did and whatever they did to do it pretty much accomplished the equivalent of the Streisand Effect on steroids traveling at the speed of light (radio). 'Disappearing' this project virtually guarantees that almost a quarter-million DIY techies that build things like this from what they find in their garage plus a pound of solder just because they are bored and want to 'chew the carpet' about it on the next local repeater Net will do so, and because you can't shut us the hell up even people who don't want to know or care about this will hear about it 16 times. And there will be huge amounts of coax and silicone tape sacrificed to this end.
Accessing an open WiFi connection using a repeater would not violate the CFAA -- the connection is open and your device would log on to it. You'd be using it the way it was intended. Of course, The DOJ claims that simply violating terms of service can make you a federal felon, but that's wrong. Read Prof. Orin Kerr's work for more on this
On the other hand, the FCC allows anyone to use the 900MHz band but tightly regulates what can be done there (for example, no "retransmission of .. signals emanating from ... radio station other than an amateur radio station", which likely does make this idea illegal. See 47 CFR Part 97.
900MHz bridged to public WiFi? Oh the Humanity. When will the engineering wonders cease? I cannot comprehend it's practicality and.. .oh screw it. This was sheer protohype from the beginning, and now it has completely imploded. How is this even clever enough to be given a slot at DefCon? A 5 year old could build one of these, and probably code an onion router for it too. This article was a complete waste of my time, and now if you read this, it's a waste of yours too.
Good Day.
Several people post a comment to some of the many Federal Register postings by FCC to address legalizing that frequency for use in that application so there is least some public feedback about it for lawyers to grab onto.
Orwell's "memory hole" at work?
Patent litigation: A doctrine of Mutually Assured Destruction... in which everyone seems willing to push the button
So we'll pretend there is a coverup of some sort to "get of jail for free" :)
Families of the project managers were returned to them unharmed and only marginally "interrogated" by a handful of three-letter agencies.
... in case you expose his crimes against us all...
http://balder.org/judea/Hate-Speech-Laws-Immigration-Jewish-Influence-Britain.php
It's pretty trivial to make a Yagi from a Pringles can to point at an open AP. Change your MAC id and connect to a TOR node.
Mission accomplished
09 F9 11 02 9D 74 E3 5B - D8 41 56 C5 63 56 88 C0 45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
This would be fairly easy to produce. VHF radios are available cheap (Wouxen, Baofeng). Getting WIFI throughput would be all but impossible due to the necessity of using a much narrower than the 20 MHz channel WIFI uses at 2.4GHz.
Hams have been transmitting digital packets via radio over much father distances for over two decades. True it was only 1200 baud but I could see much higher speeds with much more modern DSP capabilities.
More than likely they cancelled this due to potential liability issues.
Community wireless networks around the world continue to spread.
https://en.wikipedia.org/wiki/...
One very successful one is in Adelaide, South Australia http://www.air-stream.org/ which peers with VPNs over the world wide web with Perth's WACAN http://www.wacan.asn.au/ and Victoria's Melbourne Wireless http://melbourne.wireless.org.....
Source: I am a Australian.
How much investor money did they run off with? What a scam!
From the pictures, I'm guessing he used USB over RF with a signal booster. this connects to a raspi with vpn over usb, which in turn serves as a proxy, but for the life of me, I can't figure out what "code" is needed for that, any network savvy person would be able to set it up in 10 minutes if they had the equipment.
The cost is a bit high though, most usb over rf cost around $200.
1 Brilliant idea, someone didn't like it, and shut it all down.
2 Brilliant idea, US government bought it all.
3 Bad idea, maybe a government plant, maybe something easily detected with radio finding (Have no clue if possible) concept retracted
4 Bad idea, maybe a government plant, concept intentionally retracted to give it the allure of mystery, and attract desperate people to try use it.
I have really no idea, I am not a technical person. :|
maybe they were just bullshitting anyways.
like, come on, if it dependent on a device that sat near the wifi AP, it was hardly anything magical-special-super-anonymizer device in the first place. all it then was, would have been an unlicensed sort-of-long distance radio data link - which would have a whole other market mind you.
if they were implying that you could connect to the wifi ap from 2.5 klicks without anything special device near the wifi ap, then they were bullshitting.
so probably they were bullshitting because their product if it functioned as would have been likely, would have had a totally different market than what they were pushing it to.
just that it worked on unlicensed spectrum wouldn't have made it illegal to produce for markets where such use would have been legal.
world was created 5 seconds before this post as it is.
Well they sparked the idea of such a device and gave an overall description on how it works, so I wonder how long it will take for somebody else to make a similar device :) I think government gag orders (or any other suppression methods [and I think this is government work] ) are useless in the long run.
What's so mysterious about it. They got a national security letter, can't talk about it and they will be hacked this or next week, the plans will be published by wikileaks or Anonymous and you will be able to order a completed product on Aliexpress for $29.95 in 3....2.....1...
Might they have been secretly compelled to provide the customer list to the FBI? At this point no doubt the spooks would consider anyone who wanted one as "suspicious". Remember when this was supposed to be a free country? The "home of the brave"? Those were the days, eh?
I am not saying that the project has no merit
What I am saying is that the project was doomed from the very beginning
The developers of the project may have good intentions unfortunately their approach was totally misguided
If I were the one who wants to do something like that I would just do it, first , making sure that the thing works as advertised, and only then, I show the thing to the world - with source code, and everything
Muchas Gracias, Señor Edward Snowden !
Thanks Minitrue, you always come through! Still waiting on the 10th edition of the Newspeak Dictionary. That would be doublegood!
Be More, Be Manly, The Manly Geek Ubergeek Extraordinaire Blogger: www.manlygeek.com/blog Podcaster: podcast.man
http://www.broadband-hamnet.org/
We need to zee your papahs
Pleeeeze.
Who am I ? I am a citizen charged vith ensuring your security. Cone on, come on...I don't have all day!
This news comes out after I asked if one common FCC rule was forcefully implemented in a console... So now I wonder, FCC rules are taken as state of nature, but do they form a general equilibrium? Is the application of all the rules a stable system or a self shutting down, self destroying system? Can they be implemented and respected and things still working? What is the meaning of it all??? It is very typical, you keep adding rules in specific settings only to find out at the end you locked yourself out of the house and set fire to it, rule by rule...
An anonymous reader notes that a project to develop an anonymizing Wi-Fi device has been canceled under anonymous circumstances.