funsec mailing list archives

Re: This is scary


From: coderman <coderman () gmail com>
Date: Wed, 19 Dec 2007 23:27:35 -0800

On Dec 19, 2007 8:51 PM, scott <redhowlingwolves () bellsouth net> wrote:
...
Someone wrote me offline that "Have you never heard of DSS?"My reply
to this person is :"That was a form of deception(or reception) at one
time,that was secure.When it was released to the public,it either
became more secure,or suffered from lack of enthusiasm.

what?  are you talking about "direct sequence spread spectrum"?
any of the "digital spread spectrum" signal structuring?
(perhaps confusing DSSS with PCI DSS?)


By the time DSS was released to the public,there was not much else
that could be done.Toasters?Refrigerators?"
In reality,802.11x could be made more secure by the use of DSS.I
believe this was done in the mid '90's.That chipset was phased out for
lack of public enthusiasm.Even cordless phones have almost abandoned
a,relatively,secure transmission method.

what?  wireless does use "digital spread spectrum", either frequency
hopping or direct sequence (or OFDM, but that's a longer tangent..)


All it takes is the key for changing the frequency.......

you mean the fallacy that a keyed hop schedule provides security?  we
call that "security through obscurity" around these parts..  it's not
worth the waste of time.  fire up a gnu radio with 2.4Ghz front end to
prove this to yourself...

if you want privacy, use encryption (properly implemented, like AES
CCMP with good keying).
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: