RE: RFMON detection

["Steven Hess" <stevehess () covad net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The detection of radio reception is utilized in the following
systems.

Neilsen / Arbitron channel detection - short range detection of the
television or radio IF frequency, to determine the channel or
frequency the viewer or listener is tuned to. For example, this is
the method the Neilsen set top box detects the viewed channel in a
metered household. (system is going away with the APM rollout). I
believe the BBC uses a similar system in mobile vans to catch
unlicensed (untaxed) TV receivers in Great Britain. 

IMHO - It is theoretically possible to detect the IF frequency of the
802.11x card, as they all use analog RF detection methods. However,
the card RF section is usually shielded, and 2.5 gig band is full of
everything from microwave ovens, at approx 2150 MHz, to portable
phones. Very noisy analog area. Your mileage could vary.  


- -----Original Message-----
From: hax [mailto:uberhax () gmail com] 
Sent: Friday, July 09, 2004 12:38 AM
To: Austin Godber
Cc: security-basics () securityfocus com
Subject: Re: RFMON detection


> Actually, you can detect what radio stations people are listening
> to.   I remember seeing it on the news that someone was collecting 
> statistics on what radio stations people were listening to in their
>  cars.  This was in the Phoenix area.  I will post more info once I
>  find it again.

That's really interesting, please do post more info.

I knew when I posted the radio analogy someone was going to reply
with "but, uhh, you can do that", but I've never actually seen the
process demonstrated.

> Although it might be hard to use this to detect intruders on
> wireless  networks.  It would really depend on what mechanism makes
> it possible.  

The only practical radio sensor detection application I've seen of
this is with radar detectors and the VG2 radar-detector-detector.  I
don't understand how it works, but I'd like to.

- --hax

- ----------------------------------------------------------------------
- -----
Ethical Hacking at the InfoSec Institute. Mention this ad and get
$545 off 
any course! All of our class sizes are guaranteed to be 10 students
or less 
to facilitate one-on-one interaction with one of our expert
instructors. 
Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master
the skills 
of an Ethical Hacker to better assess the security of your
organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
- ----------------------------------------------------------------------
- ------


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBQO938yIuNDPeTcEfEQI2KACgp2iHrYBsRxkWLMjiyAEKx8y7SZQAmwXB
8sHwZ6tqkUDpy9aF6rsY1q8x
=ogEw
-----END PGP SIGNATURE-----



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------