Full Disclosure mailing list archives
Re: What is the ulitmate vulnerability ?
From: Dean Pierce <piercede () pdx edu>
Date: Fri, 13 Jan 2006 10:16:08 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Why require passwords? It's trivial for a malicious user to bypass it, and inconvenient for the legitimate user at the Denny's across the street that just wants to check their email. Of course if you are sending customer information, or any other sensitive data, the information should be encrypted (or better yet, not in the air at all). If an admin doesn't want anyone on their network, then it's their right to disable it, but I would hardly call offering free Internet a "security hole". - DEAN K Tucker wrote:
I know we all get so exited about some very complex and ingenious hack, but sometimes the most simple thing can be the biggest problem. So many hotels are offering wireless network that beams out all over the premises and even out to their parking lot. I am surprised how many don't even require a password to log on. It is so easy for some teenager that want to be the "evil genius hacker" to sit in the parking lot and do whatever he likes and be untraceable unless you physically catch him in the process. As an Admin I am tracing more and more hacks from such locations. Whenever I stay at a hotel that has easy access wireless, I am taking the time to speak to the managers and have had some success in getting them to secure things up a little. Of course even the best protection in such an environment is not an end all, but at least it keeps some of the script kiddies from doing harm. I would encourage any Admin that reads this to take up the same practice. Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2-ecc0.1.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBQ8fuaERnSRvFqE8oAQp4DQ//ZrnEcAkSf9jyWRcrENe0tCQpXpY8rr6N BzZ1ay+WCKpI+ak1C5e3Qf8JaM+7BvYFaLvGobr2NZgvPzc9ExIjcI1iyRJ5eUe4 OZyWTiDpja64UWF6D0NweoqBNL4tcEFk8KcBNgcKwAqlSRGzi4aEya8+DDvGRaq8 NmQNP2pQ1g2O1qPq/mfkxNs4XgUSJyX5LcxRS03evRKaz6n2q7Zirv6KuOjpm8ky OQVcqkaSd/nOYaAWgtJ7YVoNp7UD42iQIepcoFKD6pMfCn3iS74fKq9IzTxPFDK8 z746lHMRGHvx+3hekTkbUOEeGGp5aDUXxMqN+GUFdoCuqekgV3F3Ue1xdTI3k+dn o018Gv9zKLf49OvlBBV96yI9Pm2PBi3/31rR+DId19uDPW/OmVDIVlwXoodVbfJp I1+w6DWjhVYNhN2zzVQoTvMH9cp3VF5GtPvmHigj8RkmRV/pCgOMf2SztG4n7GLr IUZkmjLXAg60SwTBCSmYpSBhWFotOhB2z3v+yCMEEOrE7TD2znSyAJssv9zysux/ lj0pCxElvXvdG8BOUXyPAZS4ITDf0W/L08rTSSOU8tiNdmjhlpvr+sbUC7Mqm6ez rD58Vz6Btr187XJS97Eb1I18ZMKIbUXYczoQcPU0SFJJ7oOWQbVXp5pzhC6zMBc3 qhqckzFyCSc= =zFiF -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- What is the ulitmate vulnerability ? K Tucker (Jan 13)
- Re: What is the ulitmate vulnerability ? Dean Pierce (Jan 13)
- <Possible follow-ups>
- Re: What is the ulitmate vulnerability ? b . hines (Jan 13)