Another city going wireless

g0tr00t · 07-16-2002

http://www.fcw.com/geb/articles/2002...e-07-12-02.asp

blackwave · 07-16-2002

Quote:

Originally posted by g0tr00t
http://www.fcw.com/geb/articles/2002...e-07-12-02.asp

Interesting, I wonder how many minutes this WiFi network will stay 'secure', though of course the article mentioned nothing of security.

g0tr00t · 07-16-2002

Quote:

Originally posted by blackwave
though of course the article mentioned nothing of security.

Exactly!

Wireless admin's boss So are we ready to put this city up for wireless connectivity?
Wireless admin Of course, I took the Linksys out of the box, plugged it in and guess what - It works! We are all done!
Wireless admins boss What about the security settings?
Wireless admin Agh, the default settings are just fine. You see the more security we add, the more frustrated users we will have and the more help desk people that will be needed.

blackwave · 07-16-2002

Quote:

Originally posted by g0tr00t
[b]
Exactly!

haha, I am jealous though, we never have any free city-wide beta testing where I reside.. it certainly would be most fun

Sh00t3r · 07-16-2002

A big technological city here in Michigan went wireless about 8 months ago, connecting the city hall, fire departments, police departments, and other municipal buildings. They didn't announce it publicly but I knew right away, as I stumble the area on a weekly basis. I knew it was serious when I was picking up the ap at about 5.5 Mbps for what i thought was miles driving down the road with my pringles shooting out the front windshield.

Anyways...you would think that a city that implements such a network so "mission critical" to the city, would also take the necessary security measures. "So you would think". NO encryption, DHCP handing you out an ip like it's candy, and a quick ip scan of the network shows computers such as..."CITYHALL, FIRESTA1, FIRESTA2, PREC1, WEB, VPN, DESCARTES, TESLA, KEPLER" (all the explorers were servers running 2k

). I was in such utter dismay that I had to place a call to the IT manager. After discussing the issue with her and telling her I am willingly able to show her the exploits and fixes, she decided she would take care of any "issues" herself and thanked me. To the day the network is still the same.

I'm not sure the actual communication methods that fire and police use to relay info such as fire calls, EMT etc., but someone could simply apply a DoS attack or UDP flood to criple their network. I dunno, i'm just flabergasted at the lack of security on such a large, technological driven city.

g0tr00t · 07-16-2002

It just kills me. Why no one listens to us is beyond me. Until some kiddie comes by and hacks the netowrk. Oh boy, then it is big news!

blackwave · 07-16-2002

Quote:

Originally posted by g0tr00t
It just kills me. Why no one listens to us is beyond me. Until some kiddie comes by and hacks the netowrk. Oh boy, then it is big news!

I never understand why they always focus on the person who broke the unbreakable brick... rather than the one who built the unbreakable brick.. I would rather see Admin's, or even Engineers getting prison time for allowing systems to get broken into...

g0tr00t · 07-16-2002

Quote:

Originally posted by blackwave

I never understand why they always focus on the person who broke the unbreakable brick... rather than the one who built the unbreakable brick.. I would rather see Admin's, or even Engineers getting prison time for allowing systems to get broken into...

I work for the government. No not CIA or FBI. The ISO gets jail time if he doesn't meet Gov. standards for security by 2003(?). Not sure of the date....

blackwave · 07-16-2002

Quote:

Originally posted by g0tr00t
I work for the government. No not CIA or FBI. The ISO gets jail time if he doesn't meet Gov. standards for security by 2003(?). Not sure of the date....

MMMmmm I would love to hear more about this, are there are new set of common criteria coming out?

http://csrc.nist.gov/cc/ccv20/ccv2list.htm

Sh00t3r · 07-17-2002

Was just watching President Bush speaking on MSNBC and he announced he's going to be traveling to Troy, MI. The same city that I previously posted above that has all the wireless vulnerabilities. I think I'm gonna have to have a "sit-down" with good ol george W, and let him know whats up. Anyone have any other stumbling /wireless suggestions I should tell him? LOL.

blackwave · 07-17-2002

Quote:

Originally posted by Sh00t3r
Was just watching President Bush speaking on MSNBC and he announced he's going to be traveling to Troy, MI. The same city that I previously posted above that has all the wireless vulnerabilities. I think I'm gonna have to have a "sit-down" with good ol george W, and let him know whats up. Anyone have any other stumbling /wireless suggestions I should tell him? LOL.

Tell him that I said "Hi."
Also thank him for showing everyone what not to do to enforce homeland security... and to put it the way it is supposed to be, before chaos breaks loose.

hratch · 07-17-2002

just be prepared to answer how you know about that open network. Don't be like the guy in Inglewood, CA who video taped the police brutality on that 16 year-old kid and is now facing 9 months jail time.

"So how did you find this network?"
"I was using an 802.11b probing application, sir."

We all wanted to know what would happen when we are confronted with Feds....this may be our answer.

g0tr00t · 07-17-2002

The pringles can. Get the all weather black version too with velcro and mount it on your shoulder...

Sh00t3r · 07-17-2002

Yes, that would attract some Secret Service attention i would say.

Wombat · 07-17-2002

I live in a small town that thankfully hasn't gotten the wireless bug for town services yet. But I am still amazed at all the hits I get while driving around town from homes, businesses and such. Of course most of them are all running wide open. I've also noticed lately that there is an increase of SSID's that are the same, but spread around town. I'm thinking some local 'consultant' is running around setting these things up, and setting them up as wide open.

I'm good friends with a local newspaper reporter. I'm wondering if I shouldn't take her for a wardrive, and then explain the problems with all these open networks, just to see if I can't make the folks in town think about these things.

As the town continues to grow, I see the wireless nets expanding very rapidly because of their ease of deployment. The local office supply store here only sells D-Link wireless equipment, and in the last few months the number of wide open D-link systems has grown very rapidly. I'd also like to thank D-link for naming the default setting to . . . default.

I've thought about talking to the local computer users group, which is pretty active.

07-16-2002	#1 (permalink)
g0tr00t Welcome to my nightmare Join Date: May 2002 Location: r00ting y0ur b0x. Posts: 352	Another city going wireless http://www.fcw.com/geb/articles/2002...e-07-12-02.asp __________________ g0tr00t "Its all fun and games until someone gets killed."

07-16-2002	#5 (permalink)
Sh00t3r Registered Member Join Date: Apr 2002 Location: Michigan Posts: 199	yup yup A big technological city here in Michigan went wireless about 8 months ago, connecting the city hall, fire departments, police departments, and other municipal buildings. They didn't announce it publicly but I knew right away, as I stumble the area on a weekly basis. I knew it was serious when I was picking up the ap at about 5.5 Mbps for what i thought was miles driving down the road with my pringles shooting out the front windshield. Anyways...you would think that a city that implements such a network so "mission critical" to the city, would also take the necessary security measures. "So you would think". NO encryption, DHCP handing you out an ip like it's candy, and a quick ip scan of the network shows computers such as..."CITYHALL, FIRESTA1, FIRESTA2, PREC1, WEB, VPN, DESCARTES, TESLA, KEPLER" (all the explorers were servers running 2k ). I was in such utter dismay that I had to place a call to the IT manager. After discussing the issue with her and telling her I am willingly able to show her the exploits and fixes, she decided she would take care of any "issues" herself and thanked me. To the day the network is still the same. I'm not sure the actual communication methods that fire and police use to relay info such as fire calls, EMT etc., but someone could simply apply a DoS attack or UDP flood to criple their network. I dunno, i'm just flabergasted at the lack of security on such a large, technological driven city.

07-16-2002	#6 (permalink)
g0tr00t Welcome to my nightmare Join Date: May 2002 Location: r00ting y0ur b0x. Posts: 352	Kills me! It just kills me. Why no one listens to us is beyond me. Until some kiddie comes by and hacks the netowrk. Oh boy, then it is big news! __________________ g0tr00t "Its all fun and games until someone gets killed."

07-17-2002	#10 (permalink)
Sh00t3r Registered Member Join Date: Apr 2002 Location: Michigan Posts: 199	President George W Was just watching President Bush speaking on MSNBC and he announced he's going to be traveling to Troy, MI. The same city that I previously posted above that has all the wireless vulnerabilities. I think I'm gonna have to have a "sit-down" with good ol george W, and let him know whats up. Anyone have any other stumbling /wireless suggestions I should tell him? LOL.

07-17-2002	#12 (permalink)
hratch Roadie Stumbler Join Date: May 2002 Location: On the Move... Posts: 308	be prepared... just be prepared to answer how you know about that open network. Don't be like the guy in Inglewood, CA who video taped the police brutality on that 16 year-old kid and is now facing 9 months jail time. "So how did you find this network?" "I was using an 802.11b probing application, sir." We all wanted to know what would happen when we are confronted with Feds....this may be our answer.

07-17-2002	#13 (permalink)
g0tr00t Welcome to my nightmare Join Date: May 2002 Location: r00ting y0ur b0x. Posts: 352	Don't forget... The pringles can. Get the all weather black version too with velcro and mount it on your shoulder... __________________ g0tr00t "Its all fun and games until someone gets killed."

07-17-2002	#14 (permalink)
Sh00t3r Registered Member Join Date: Apr 2002 Location: Michigan Posts: 199	LOL Yes, that would attract some Secret Service attention i would say.

07-17-2002	#15 (permalink)
Wombat Registered Member Join Date: Apr 2002 Location: Smalltown, AZ Posts: 82	I live in a small town that thankfully hasn't gotten the wireless bug for town services yet. But I am still amazed at all the hits I get while driving around town from homes, businesses and such. Of course most of them are all running wide open. I've also noticed lately that there is an increase of SSID's that are the same, but spread around town. I'm thinking some local 'consultant' is running around setting these things up, and setting them up as wide open. I'm good friends with a local newspaper reporter. I'm wondering if I shouldn't take her for a wardrive, and then explain the problems with all these open networks, just to see if I can't make the folks in town think about these things. As the town continues to grow, I see the wireless nets expanding very rapidly because of their ease of deployment. The local office supply store here only sells D-Link wireless equipment, and in the last few months the number of wide open D-link systems has grown very rapidly. I'd also like to thank D-link for naming the default setting to . . . default. I've thought about talking to the local computer users group, which is pretty active.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode