Full Disclosure mailing list archives

Re: Jamming WiFi tracking beacons


From: Eric Rand <eric.rand () brownhatsecurity com>
Date: Wed, 16 Jul 2014 08:25:46 -0700

There's a project on github for just that kind of thing:

https://github.com/DanMcInerney/wifijammer

Regardless of the hardware you choose to use, however, keep in mind that
you're going to be using a much higher fraction of the radio amplifier
in the wifi adapter's time than normal use, so there will be
proportionally greater power consumption.

(Radio theory isn't really infosec, but is a design consideration for
something like this; I can talk about it out-of-band if you need to know)

On 07/16/2014 02:26 AM, Keira Cran wrote:
Hey,

It's great that companies like Apple recognising the threat of tracking
people via their devices wifi cards' MAC addresses, by randomising them.

Naturally, I wondered i it was possible to jam the measurement beacon by
spoofing tons of wifi clients.  At one point in London, there was an
advertising firm with tracking bins [1] and I have a nice clip of a
technician looking puzzled at one beacon trying to figure out what's
wrong. (Unfortunately, it's bit too close to home (literally) to share.)
In the US I believe some ad "analytics" firms like SenseNetworks do
something similar. [2]

Consider this a call to arms then, to put those unused raspberry pies
you have lying around to good use.

best,
keira

[1]
http://www.theguardian.com/world/2013/aug/12/city-london-corporation-spy-bins
[2] http://sensenetworks.com/


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Attachment: 0xC6AA699A.asc
Description:

Attachment: signature.asc
Description: OpenPGP digital signature


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Current thread: