View Full Version : Security of this product
bradleyzorg
02-03-2004, 11:10 AM
im sure that we have all done our fair share of war driving...
but it takes a while to collect enough data to crack the wep key... thanx sentech now i, dont even have to get in my car i will be able to sit im my house and collect data.
im just waiting for them to release in my town (somerset west, Cape town)
is there anybody that has been doing this?
bradleyzorg
02-03-2004, 12:49 PM
strange... 18 readers sofar... not one! whats wrong with you people.
if you are just happy with you connection, and feel there is no need to dig deeper, then there is sumthing wrong with you.
Read the bradleyzorg post - just not sure what he is talking about ? war driving ? collecting data ? wep key ?
Karnaugh
02-03-2004, 01:27 PM
errr.. Sentech works like quite a bloody lot different from 802.11 so I'm not sure what 'WEP' key's and wardriving have to do with it.
<hr noshade size="1">
"Since light travels faster than sound, people appear bright until you hear them speak."
NetLink Research
bradleyzorg
02-03-2004, 01:30 PM
gbh you need to catch up with the times. if your older than 40 dont bother you wont be able to. rather sell all your stuff and get married.
about the whole wardriving : jump in your car with a laptop, wirless equip, atleast 2 antennas one long distance and a patch, so you can locate the source of the signal. wep key is a algorhythm used to encrypt packets so that any bob cant access the source of the signal. now the person doing the wardriving needs to collect upto 5gigs of data b4 any wep key craching can be done.
thus i thank sentech for releasing their my wireless i can sit in my house and crack from there.
P.S please dont post unless you know what your doing. i have mannaged to crach 6 networks in my area.
bradleyzorg
02-03-2004, 01:40 PM
Karnaugh Dude! looks like sentech's modems http://axity3g.axcera.com/desktop_modem.php
qoute from that page :
Flexible cable options include USB, Ethernet, or RS232/V24 (serial port).
USB and Ethernet interfaces support transfer rates in excess of 3 Mbps.
Supports multiple users when connected to a home gateway, 802.11b Wi-Fi access point, or router.
i do admit that they use PPPOE witch is different from normal ppl access to AP's but the traffic is still there to be sniffed.
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">P.S please dont post unless you know what your doing
bradleyzorg, from your last comment I assume you are the moderator of this forum and you decide what people can say and what questions they can ask ?
Wrayth
02-03-2004, 01:50 PM
I dunno... from the limited literacy and belligerent attitude, I'm guessing he's a Skript kiddie regurgitating info from some web page somewhere...
:P
TadMadLad
02-03-2004, 01:59 PM
I dont think he is moderator, but asking to stay OT)on topic) is what he is asking.
Wardriving is a term I have heard for the first time myself. Interesting terminology. Sounds the old illegal radio stations from the back of a panelvan/truck(dont try it in SA)
As for WEP, true, wep is an encryption way where hackers could pick up the keys by sniffing the network. Lots of little software packages to sniff the air, so to speak.
As for crashing a network. I hope you dont assume that is something difficult to do. But have you ever heard of MS giving you the low down details on how to crack windows, or perhaps a game company telling you how the cheat works , which is fixed in the latest version... no, so i dont think its a great idea to discuss how to be an anarchist on a public forum, nor drop little subtle hints to little curious minds on how to do things like this.
If you are old enough , you should realize its a bit irresponsible, and if you are old enough to realize what the impact is, you should not be advertising the flaws. How about I drive up to your house and and take away TV signal? impossible? ke ke ke :) The fact that one can do it, is no reason to do it.
Either way, security topic at hand. Someone from sentech should post a reply, I would like to hear myself how they protect our network... but needless to say, stop short of giving information that will encourage someone to try.
AcidRaZor
02-03-2004, 02:02 PM
sentech has 3 layers of security you have to go through
added to the fact that it ONLY allows modems supplied by sentech (or fastcomm) with the correct bios flash and IMEI number, you'd have a pretty tough time cracking this.
Look, I'm not saying it's impossible, but I'm saying is that I feel it's pretty secure enough, not like the 802 range where ANYONE can listen into ANYTHING at ANY time.
So go ahead, sit at home, do your little thing you do, and wait for the nice scorpions to come around and arrest you [:p]
lewstherin
02-03-2004, 02:03 PM
Another question is what kind of encryption cycling is going on from Sentech's side? If they use the same keys without cycling them, then once our buddy zorg has cracked the wep key, he can mimic a registered MyWireless users signature and hence masquerade as that user - ie. free MyWireless...
Methinks that the encryption would be connection-orientated, thus a new wep will be derived per connection...hence you could only potentially be hacked for the duration of the connection...
Of course this is pure speculation since I have no idea what Sentech is actually using [:D]
** How can Telkom claim to "Touch Tomorrow" when it can barely touch yesterday?
Because they're a BIG, GREEDY, MONOPOLY intent on keeping South Africa in the stone age. **
Hi Bradleyzord
Although we appreciate open discussions and varying opinions at MyADSL I can strongly advise you to be less antagonistic and aggressive if you would like a constructive answer to your questions.
Regards,
RPM
rpm@myadsl.co.za
lewstherin
02-03-2004, 02:05 PM
For all you ppl with broadband that dont know what wardriving etc is, I suggest you check out this l33t website...it rocks and its funny as hell [8D]
www.thebroken.org
Download episode 1 - its all about wireless hacking
** How can Telkom claim to "Touch Tomorrow" when it can barely touch yesterday?
Because they're a BIG, GREEDY, MONOPOLY intent on keeping South Africa in the stone age. **
AcidRaZor
02-03-2004, 02:05 PM
btw, the only way you can log into the network is with the correct IMEI
Wrayth
02-03-2004, 02:06 PM
I'm also fairly sure that Sentech would notice the same user logged in twice (If the servers even allow that), and pop around to ask questions...?
sneaky
02-03-2004, 02:14 PM
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by bradleyzorg</i>
<br />im sure that we have all done our fair share of war driving...
but it takes a while to collect enough data to crack the wep key... thanx sentech now i, dont even have to get in my car i will be able to sit im my house and collect data.
im just waiting for them to release in my town (somerset west, Cape town)
is there anybody that has been doing this?
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">
WOW!!!! you are so coool why dont you post your real name and address as well so we can go and pay you the real homage you desevre?
bradleyzorg
02-03-2004, 02:18 PM
i do apologise if i was aggresive... but it is a subject to be aggresive about... security is every thing these days... and if you have been reading microsofts EULA they state that you as the user grants them full access to data and info stored on your machine.
so sorry for all you MS fans.
all i have to add to my post is that anything is possible.and from what iv been reading wireless will never be secure.
lewstherin
02-03-2004, 02:26 PM
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by TadMadLad</i>
As for crashing a network. I hope you dont assume that is something difficult to do. But have you ever heard of MS giving you the low down details on how to crack windows, or perhaps a game company telling you how the cheat works , which is fixed in the latest version... no, so i dont think its a great idea to discuss how to be an anarchist on a public forum, nor drop little subtle hints to little curious minds on how to do things like this.
If you are old enough , you should realize its a bit irresponsible, and if you are old enough to realize what the impact is, you should not be advertising the flaws.
Either way, security topic at hand. Someone from sentech should post a reply, I would like to hear myself how they protect our network... but needless to say, stop short of giving information that will encourage someone to try.
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">
I get where you are coming from TML, but I have to disagree about "not advertising flaws". That only helps those that know the flaws to keep hacking them. The only way to create a safe, secure network is to publicise problems - make the information available to all.
That way everyone knows the problem and the people in charge of the network will realise this and have to make the changes to fix the flaw.
Its basically a question of knowledge vs. ignorance - personally I would like to know if theres a flaw in my security, that way I can react to it positively and effectively. [:)]
** How can Telkom claim to "Touch Tomorrow" when it can barely touch yesterday?
Because they're a BIG, GREEDY, MONOPOLY intent on keeping South Africa in the stone age. **
Thank you bradleyzorg and others for the info. I am now a little more informed that 20 min ago. (You can teach old dogs new tricks brad)
It's like HIV/Aids - if you don't inform people they only find out after they catch it - it's too late then.
Sliver
02-03-2004, 02:34 PM
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by bradleyzorg</i>
<br />gbh you need to catch up with the times. if your older than 40 dont bother you wont be able to. rather sell all your stuff and get married.
about the whole wardriving : jump in your car with a laptop, wirless equip, atleast 2 antennas one long distance and a patch, so you can locate the source of the signal. wep key is a algorhythm used to encrypt packets so that any bob cant access the source of the signal. now the person doing the wardriving needs to collect upto 5gigs of data b4 any wep key craching can be done.
thus i thank sentech for releasing their my wireless i can sit in my house and crack from there.
P.S please dont post unless you know what your doing. i have mannaged to crach 6 networks in my area.
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">
ooooh, a real life h4rdc0r3 h4x0r, can i touch you ??? Grow up dude, what joy do you get in crashing other peoples networks ?? Do you think this makes you more of a man ?? I think not, you like the arse at a night club that feels the need to beat the crap outa people jsut cause he is bigger, get a life !!!!
TadMadLad
02-03-2004, 02:36 PM
do you want to talk about it , sliver [:D][:)]
Karnaugh
02-03-2004, 02:38 PM
You've got to be kidding me... This topic should honestly just be deleted.
<hr noshade size="1">
"Since light travels faster than sound, people appear bright until you hear them speak."
NetLink Research
Sliver
02-03-2004, 02:45 PM
hehe tml :)
I agree Karnaugh, this is pointless and none productive.
bradleyzorg
02-03-2004, 02:48 PM
funny... Karnaugh, lewstherin - you must be in the same building. sentech by any chance?
lewstherin
02-03-2004, 02:49 PM
Flaming aside [:D], the topic does raise a good point about whether or not MyWireless is properly secured...
And besides, anyone will agree that my www.thebroken.org link is a keeper [8D]
** How can Telkom claim to "Touch Tomorrow" when it can barely touch yesterday?
Because they're a BIG, GREEDY, MONOPOLY intent on keeping South Africa in the stone age. **
Karnaugh
02-03-2004, 03:04 PM
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by bradleyzorg</i>
<br />funny... Karnaugh, lewstherin - you must be in the same building. sentech by any chance?
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">
The ultimate question is, what are you on about? Sentech is not 802.11.
<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by bradleyzorg</i>
<br />Supports multiple users when connected to a home gateway, 802.11b Wi-Fi access point, or router.<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote"> What does that have to do with anything?
So, once you've cracked the 'WEP key' and stolen a modem, you're going to do what? Sniff the data within the tower? Um.. ya ok..
While you're at it, tell us how you can listen in on peoples cell phone calls. Or here is a fun one, tell us a way to get the person next to you's cell phone number without asking.
(Same technology concept FYI)
<hr noshade size="1">
"Since light travels faster than sound, people appear bright until you hear them speak."
NetLink Research
bradleyzorg
02-03-2004, 03:07 PM
at last someone that sees what im getting at... so is it secure?
sofar so good i guess.
bradleyzorg
02-03-2004, 03:15 PM
i have to disagree the whole wifi cell phone thing...
cell phones use GSM i heard i took some guys from harvard 10 years to crack "h" in the word hello.
takes 30min to get an "a" in a wep key
flashvc
02-03-2004, 04:33 PM
Ok...IPWireless != 802.11b
There's NO WEP involved with it.
The radios run at a complete different frequency from 802.11b
To be able to get any usefull information, you need a tool that can atleast access the radio directly, which currently rules out anything that's not running on 'blows
Oops, I've taken the bait....
I agree with Kar...please remove this topic, it serve no purpous
--
Sliver
02-03-2004, 06:34 PM
FREE GEE, FREE GEE
Dude, if you spent half the time browsing these forums instead of talking complete rubbish you might understand what technology this product is using, now in you own words "if you don't know what you're talking about, SHUT UP"
k thx bye