Security Basics mailing list archives

Re: Telling prospective wi-fi customers they are open to hacking


From: neo <neophyte () readyresponse org>
Date: Fri, 11 Mar 2005 11:31:43 -0800

Could always use GPS to pinpoint location of the WAP and the company from there.

Steve wrote:

Unless they name their SSID the same as their company name, how will you
know who to call on?  If you intend to maybe break into their network
through electronic means (monitor their traffic to see who they are) then I
would say you might cross and ethical line there.

STEVE
----- Original Message ----- From: "Pat Smith" <pat.smith () elkcorp com>
To: <security-basics () securityfocus com>
Sent: Thursday, March 10, 2005 2:22 PM
Subject: RE: Telling prospective wi-fi customers they are open to hacking


Approach it from the standpoint that they "might" have security needs
you'd like to talk to them about.  Cold-call if you will.  If they say
no, offer a free audit...which you sort of already have.  You
essentially get their permission to do what you've already done.

Not tried it personally, but it's also something I've been thinking
about.

In the end, let us know how you did it.

Pat Smith
Site IT Coordinator
913-599-5300

-----Original Message-----
From: Greg [mailto:pchandyman () ozemail com au]
Sent: Thursday, March 10, 2005 6:52 AM
To: security-basics () securityfocus com
Subject: Telling prospective wi-fi customers they are open to hacking

I am attempting to increase my income from the business without putting
myself in legal harm's way. I have done a quick drive-by and noted
around 20 or 30 open AP wi-fi setups around and I would like to present
myself as the person who can fix them (and yes, I can) without them
immediately thinking I am attempting to do the wrong thing somehow.

So what I would like to ask everybody who has done this is how you did
it and kept out of trouble. Any help appreciated.

Greg.









Current thread: