NetStumbler.org Forums - View Single Post - Foundstone Labs Advisory - Information Leakage in Orinoco and Compaq Access Points

HcRUL · 08-09-2002

The security on the RG units was horrible.

That community name is also the SSID, The last 6 digits of the MAC address of the wireless card, and the last 5 digits are used as a 64bit ascii wep key.

To make things worse the RG manager wouldn't let you make any changes. On the plus side the AP manager can configure the RG units.

I'll have to play around with my locked down RG unit and check my RG-1000s running the AP-1000 and AP-500 firmware to see if they give away any valuable information.

HcRUL

08-09-2002	#5 (permalink)
HcRUL Registered Member Join Date: Apr 2002 Posts: 37	Easier than that. The security on the RG units was horrible. That community name is also the SSID, The last 6 digits of the MAC address of the wireless card, and the last 5 digits are used as a 64bit ascii wep key. To make things worse the RG manager wouldn't let you make any changes. On the plus side the AP manager can configure the RG units. I'll have to play around with my locked down RG unit and check my RG-1000s running the AP-1000 and AP-500 firmware to see if they give away any valuable information. HcRUL