<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Wireless Security forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/wsecurity</link>
<description>Wireless Security forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Thu, 26 Nov 2009 16:27:35 EDT</pubDate>
<lastBuildDate>Thu, 26 Nov 2009 16:27:35 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>Securing wireless modem/router</title>
<link>http://www.dslreports.com/forum/remark,23086010</link>
<description><![CDATA[Had an ATT tech replace ATT modem and my router with a new 2WIRE Gateway 2701 HG-B modem/router. Wireless capability for my son's Mac laptop-hard wired to my desktop. While checking my Google account web history, I find some weird sites being visited during the time that I am logged into my Google acct.-I KNOW that I have not been to them and my son says he hasn't and I believe him(women's fashion, sexy b'day cards,etc)Will ALL traffic thru my router show up while I am logged in-or just the sites that I visit?-when I am not logged in? Could this be that my router is not secure and freeloader traffic is being logged into my Goggle web history? The ATT tech left no paperwork for the new hardware, so I have no idea how to check and/or set up. Please help or my wife is gonna kill me or divorce me-probably in that order-Thanks! ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23086010</guid>
<pubDate>2009-09-26 09:01:16</pubDate>
</item>

<item>
<title>Compromised Wireless Network?</title>
<link>http://www.dslreports.com/forum/remark,23374318</link>
<description><![CDATA[Have a sneeking suspicion that someone has been pilfering my internet download capacity. Blown 20GB download limit within 2 weeks even with free download feature from midnight to 8am. Not likely!! Also been getting a bubble saying that my network is "unsecured". Laptop is running Xp that is all up to date with patches.

Downloaded ZANZOM network monitoring tool (anyone heard of this?) and found 6 other machines on my network. Changed the security password on my router but my laptop can still connect even with the old network password.  

When I try to change the wireless network password on the laptop I get some other funnies happen. If I check the WPA2 option I can't update the password. When I use the WPA-PSK I can change the password but when I click OK it reverts back to the old password. The funny thing is that the laptop is still on the network despite having the wrong security password. 

Go figure!  Any help/insight woluld be welcomed.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23374318</guid>
<pubDate>2009-11-21 07:43:41</pubDate>
</item>

<item>
<title>MAC spoofing</title>
<link>http://www.dslreports.com/forum/remark,22923598</link>
<description><![CDATA[I have users on my free public wireless network that are employees.  I have reason to believe they are spoofing their mac address to get onto the network since we block all of our laptops using mac filtering.  I am looking for a way to gain access to their machines to see if they have mac spoofing software installed since that seems to be the only way I can be sure they are spoofing.  I can assure you that the computers in question are company owned and this request is not for malicious intent.  I know, why believe me.  I am just looking to be able to prove that mac spoofing is going on so that the proper measures can be taken agains the offenders.  Any info would be appreciated.  I do have complete access to our wired and wireless network and can sniff all data but I can not seem to figure out how to get access to the hard drives of the offenders.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22923598</guid>
<pubDate>2009-08-25 19:40:04</pubDate>
</item>

<item>
<title>Security for wifi usage</title>
<link>http://www.dslreports.com/forum/remark,23343522</link>
<description><![CDATA[I have been using a regular wired DSL broadband modem in my Compaq laptop.  I shall be travelling, and am looking at iPass (http://wireless.tataindicombroadband.in/wireless/wifi.html).  Since I am a bit confused about the security issues which may have to be addressed now, I am requesting for guidance.

I have a Broadcom 802.11b/g device.

My current OS/security setup is as below :-
a) Win-XP SP2 (completely patched, vetted by Secunia)
b) AVG AV/AS free 8.5
c) ZA firewall free 7.0.483
d) Sundry utilities/protection software : Ccleaner, Spywareblaster
e) Safe browsing habit

My first query : In the settings for my wireless network connection, there are the following choices :-
a) Any available network (access point preferred)
b) Access point (infrastructure) networks only
c) Computer-to-computer (ad hoc) networks only
Choice a) is selected by default.  I presume that when I am using the iPassConnect dialler, these choices are irrelevant.  Are these choices relevant only for a free wifi hotspot connection?

My second query is about the security aspect.  Do I need to activate WPA/AES, and if so, how?  Also, I read somewhere that SSID broadcast should be disabled ... how is that done?  More, is it necessary to have any security key / passphrase ... or, are the iPassConnect login credentials (username, domain, password) good enough?
Or, are these security issues relevant only for a free wifi hotspot connection, and not required when using iPassConnect dialler?

Thanks,]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23343522</guid>
<pubDate>2009-11-15 07:32:12</pubDate>
</item>

<item>
<title>Can thunder destroy the computer (via wireless radio/antena)</title>
<link>http://www.dslreports.com/forum/remark,23298344</link>
<description><![CDATA[I've just been reading this thread: http://www.justanswer.com/questions/27nx7-son-airbaud-internet-service

(Note: click on the "Read more" link to read the whole thread on that linked page.)

Is it possible that a thunderstorm could destroy a computer connected via wireless Internet (especially that it supposedly had surge protector)?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23298344</guid>
<pubDate>2009-11-05 19:10:37</pubDate>
</item>

<item>
<title>Interpreting possible breach</title>
<link>http://www.dslreports.com/forum/remark,23356978</link>
<description><![CDATA[While rooting around in the bowels of the Airport Utility for Mac, I discovered a DHCP client that was unfamiliar to me. I have only one Mac right now on my network, and it has a static IP in the 10.0.1.x range assigned via Airport. The other address showing in the DHCP list was something like 10.0.1.179 and that is definitely not something my supposedly secure Airport router should be issuing.

I redid my network password and enabled local MAC Address Access Control. After restarting the Airport, I looked at the logs for it and discovered entries such as "Nov 17 21:41:58&#9;Severity:4&#9;Authentication failed for station 00:26:08:aa:d6:60" This is not my own MAC address so I'm thinking that somehow my network was hacked.

My question is, was I being hacked, and if so, ow could this have happened when my Airport Network is password protected, and my firewall is active? Thanks for any help.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23356978</guid>
<pubDate>2009-11-17 22:35:25</pubDate>
</item>

<item>
<title>Hotel/Coffee Shop type wireless system</title>
<link>http://www.dslreports.com/forum/remark,23330995</link>
<description><![CDATA[All,

I'm tasked to find some options to do a wireless system in our office that is similar to a hotel or coffee shop "free" wireless system. Specifically, they want it set up as a proxy that does authentication before the guest can get out of the network.

So... are there open source versions of these systems that work fairly well? Anybody with experience from the private versions of these systems?

Thanks in advance!]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23330995</guid>
<pubDate>2009-11-12 12:27:54</pubDate>
</item>

<item>
<title>WEP vs. ethernet</title>
<link>http://www.dslreports.com/forum/remark,23322535</link>
<description><![CDATA[Longtime since I've posted but I have a question regarding wireless vs. wired.

I have a laptop that was recently given to me and it runs XP.  I have AT&T as internet provider and upon setting up wireless this past weekend it seems the highest incryption (I guess that's what you call it) that the laptop will take is WEP.  We (technical support) tried WPA and above but never could garner a connection.

I've been reading about how bad WEP really is.  So since I'm not really moving my laptop around much at this time as it stays about the house would it be worth it to go wired vs. WEP wireless for the security sake?

Your help would be appreciated.
--
NEVER forget 9/11-01]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23322535</guid>
<pubDate>2009-11-10 20:08:09</pubDate>
</item>

<item>
<title>Wanted:Reference Material, Documentation &#x26;amp; Tools</title>
<link>http://www.dslreports.com/forum/remark,23341645</link>
<description><![CDATA[Good Afternoon.

I am a telecommunication student working on a term project.  The topic wireless security is broad, and as such we have decided to focus on items of potential interest for our peers that directly related to security.  We believe that Wireless Lan Controllers with the use of Lightweight APs may be a good point.  

For the practical portion the recent Cisco Skyjacking vulnerability is something we may  be able to demonstrate.  We have some school provided equipment.  Mainly a few APs that would need to be converted to Lightweight mode as well as a single WLC, 2100.

What I hope this community may help provide are suggestions on the material to review, or tools that may help with the creation of this demonstration.

The plan:

: 1 AP (more 1100 and 1200 series if needed), and 1 WLC

- AP in lightweight mode receives RRM (Over-the-air-provisioning - OTAP) from 'rogue client or such'
- WLC is on some network or directly on Internet
- L:AP gets WLC IP from OTAP message and goes to connect to it
-- L:AP Connects via wired connection out over Internet on UDP 12222 or 12223 to the WLC 

- WLC sends 'revised configuration' to the L:AP
- L:AP is now accessible via the 'rogue client' only
- L:AP can be converted to Hybrid Remote Access Point (H-REAP) which allows WAN connectivity to not trravese the tunnel back to the WLC before exiting to some resource like the Internet

Any and all suggestions would be great via a POST or PM.  I understand and agree with any decision to with hold potentially malicious tools or knowledge of those tools to conform with the ideas and principles of this forum.  

I will be posting something similar in the Cisco forum, Shortly.  Thank you.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23341645</guid>
<pubDate>2009-11-14 17:02:19</pubDate>
</item>

</channel>
</rss>
