Printable View
Thats pretty bad. You really need to get that fixed ASAP.Quote:
At my work we have about 3 wireless routers (linksys) all have default SSID,no WEP, and no MAC filtering.
People have that mentality, because they don't know any better.Sad but true.Quote:
ive brought up this security issue to people but i get the "i dont care" response and the people who setup the routers belive that static IPs are more than enough for security.
fort knox baby ;)Quote:
Originally posted here by Tiger Shark
You might be getting the "I don't care" attitude for the same reason you would get it from me....
See I have a nice little Linksys WAP on my network. On the bright side I broadcast the SSID, am WEP encrypted, DHCP IP's and MAC filter the NICS...... Have fun breaking in..... It's bulletproof as far as accessing my network is concerned. It's outside the firewall and the Linksys _only_ allows port 1723 to egress... Why 1723? PPTP to my firewall.... All you can do from the WAP is try to create a VPN tunnel to my firewall.... fail to successfully authenticate and your wireless access just became a doorstop.... Crack the WAP.... Go for it.... have fun.... My external IDS emails me the moment there is any outbound traffic, (except port 1723 to my firewall), from the WAP... So I'll know... and you'll be closed down... That's a **** load of time to waste to find you have nothing.... :D
Maybe they have the same system.... but I doubt it... ;)
where do you work btw
Come on... he is disclosing some of his security practices... do you think he is going to post WHERE he applies those tactics on a PUBLIC forum? nah... me either...Quote:
well i was hoping for a general answer like GM, AT&T, ect ect.
i withdraw my question
He's a male stripper at "The Pink Bandana" in Portland Oregon.
Road: I TRUSTED YOU!!!!!!!! You said you'd never tell after the night we spent together.... See.... Security _is_ all about secrecy and not disclosing information.... You bitch.... If you ever come back to Portland I will slap you silly..... ;)
Simo: I work for a non-profit organization in Detroit MI..... That's pretty much publicly available... The precise organization I work for would be considered part of my "security by obscurity"... OTOH, can you really trust anything I say? I could be lying through my teeth and have no idea how to set this up.... I might just know enough to know that it could be done.... ;)
Phish.... I might be disclosing my security practices.... But there's a couple I might not be telling about..... It's all about tripwires, (I don't mean the program, I mean things you might do that might set off an alert that you couldn't predict.... layers, layers, layers....). They are easy to create, difficult to predict/locate/evade but they tell me that someone is playing "silly buggers" with my network.... :D
Don't make be he-bitch slap you. I was using "misdirection" :p
Like the skiddy on the other end of a frag who claims he has 3 hardware firwalls at home? After you inform him of the consequences of his haxxor threats on your game server since his IP has been connected for hours and every connection logged, his balls just shriveled to peanuts. You know Pix, Watchguard etc. all of them all chained together in his bedroom. Or like when he says he "is" proxy chaining to the server with a 30 ms constant ping. Nah... I think pinky boy is telling the truth. :DQuote:
I could be lying through my teeth and have no idea how to set this up....
I think I have worked too hard today :D