![]() |
|
|
#4 (permalink) |
|
Posts: n/a
|
Hey Adam. Would you be willing to share your scans? I have a couple small scans from around the Burlington area I can send you plus some contact info of other interested Toronto people.
If you can send the info to johnk@whitehatinc.com relatively soon. :-) Thanks. John K. |
|
|
|
#9 (permalink) |
|
Posts: n/a
|
Scan Results
I recently did some experimenting to see what the wireless situation was in Toronto. Since I was going shopping downtown and had to take my laptop with, I figured that I would not power it down and left it running in my bag with the NetStumbler program activated. There was no external antenna used and the bag probably detracted even more from range / SNR.
After taking the King streetcar to get downtown, I did a lot of walking through the busiest sections of Front Street and Yonge Street and even an office tower and the Eaton Centre. Here are the results of my experiment: Time Active: ~ 4.5 hours (recharged laptop's battery over lunch) WiFi Networks found: 92 Networks without WEP: 51 (55% of total) Networks with WEP: 41 (45% of total) Best SNRs from no-WEP networks: 46,35,31 Least secure AP: Linksys - 17 instances (33% of unprotected) "Bad" SSIDs: 20 (39% of unprotected) Some notes: The Eaton Centre seems to have a large number of WiFi networks and at least 10 are not using WEP. Linksys seems to be the most "unsecure" brand of AP (perhaps due to their default "linksys" SSID and no WEP enabled by default). Many networks use easy to guess SSIDs such as "default", "linksys" or even their company name (at least a few did the latter). Overall, most people just don't seem to care about securing their networks even with decidedly flimsy WEP encryption. However, my estimated rate (55%) is a little better than the 60%-70% rate of no-WEP networks others have reported from their tests. |
|
|
|
#11 (permalink) |
|
Posts: n/a
|
Large Number of High Gain Antennas
Driving around TO (more specifically north west) I see a large number of high gain (parabolic and flat pannel) antennas pointing towards the CN tower. I'm begining to think there is some sort of 802.11 high speed internet access going on. Anyone have any more information?
|
|
|
|
#12 (permalink) |
|
Posts: n/a
|
Toronto
Running Kismet now instead of NetStumbler (RF Monitor Mode picks up way more stuff) around Toronto. Suprising # of APs are found off the 401 Westbound (drove out to Oakville last week, with Orinoco Range Extender on the dashboard). Looks like the MTO has some 802.11b stuff, with and without WEP enabled. Also, several trucking/transport companies. It's funny how many of them tend to put the company name/phone #/fax # in the AP name or SSID. Also, Eglinton just east of Yonge has a large AP concentration, at least 10 that I can find. |
|
|
|
#14 (permalink) |
|
Posts: n/a
|
Some other APs?
Hi all:
Well, there's at least two wireless ISPs in Toronto now. Can't remember the second one, but the first one is called "Whip the Web!" They're on the web if you search for 'em. You may also want to check out the Toronto Wireless Community Network for some info. They have some suggested setups for low-cost APs, as they're trying to create a City-wide public access free network. Their site documents some of the APs already open for free acess! Just out of curiosity, what are you guys using for antennae? Thanks Shplad |
|
|
|
#15 (permalink) |
|
Posts: n/a
|
Antennas
Here's my current setup if anyone's curious: - Compaq 1500c notebook (not small and not light but durable, and runs OpenBSD/Linux/Win9x) - Orinoco Silver + Lucent Range Extender antenna - Cisco Aironet 350 (100mw tx) - Cisco diversity antenna (dual RP-TNC jacks, with dual cables that go to the two connectors on the Cisco card) - Cisco mini antenna (for stealth usage) What I'd really love to get ahold of is a Toshiba Libretto or similar - something tiny, with PCMCIA slots. These machines are still way too expensive though (even the P75 goes for alot of $$ on Ebay!) By the way, since I last posted, I've found several LARGE companies with wide open WLANs around North Toronto. A few even happily give out a DHCP address on the corporate LAN, with no packet filter or anything in front of it. As a security professional, this just makes me sad. I'm tempted to contact the CEO/Network Admins anonymously and give them this info. |
|