Penetration Testing mailing list archives

Re: Netstumbling


From: "Nick Jacobsen" <nick () ethicsdesign com>
Date: Wed, 5 Mar 2003 09:11:44 -0800

Just from my expirience, I have never had any problems, and none of my
friends have reported any problems either.  I will walk around downtown with
my laptop open, and an external antenna on my back (looks funky, and I get
some odd stares, but it works), and the most I have ever had happen is a cop
ask me what I was doing...  I told hime I was using my laptop to do a
wireless security assesment...  he just sort of looked at me oddly and
walked off...  probably had no idea what I was talking about...  I've done
this in Portland, Roseburg, Salem, Eugene (all in Oregon), as well as New
Orleans and Chicago.  Most of the time, the cops have no idea what you are
talking about...


Anyway, my 2 cents,

Nick Jacobsen
Ethics Design
nick () ethicsdesign com

----- Original Message -----
From: "stonewall" <stonewall () cavtel net>
To: <pen-test () securityfocus com>
Sent: Wednesday, March 05, 2003 6:14 AM
Subject: Netstumbling


HI, I need some advice.

I am interested in the reaction that list members have gotten from various
government agencies while netstumbling.  Is there any clear guidance on
the
legality of 'stumbling?  I am talking here about just 'stumbling, not set
to
auto reconfigure the card, just assessment and locating WAPs.

You cannot be in the security business without being able to assess
threats.
In this business, paranoia is not paranoia, it is due diligence.  I
believe
that anyone serious about security must be able to assess wireless zones,
overlapping areas, buildings with multiple WAPs, etc.  But have you been
threatened by LE personnel in the process?

Thanks in advance for your info.

stonewall


--------------------------------------------------------------------------
--

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html



----------------------------------------------------------------------------

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html


Current thread: