Report of an apparent Security Flaw in 802.11b Wi-Fi

[Tezcatlipoca]

I read this today....

http://www.guardian.co.uk/online/sto...220089,00.html

Jack Schofield, Eric Doyle and SA Mathieson
Thursday May 20, 2004
The Guardian

Wi-Fi flawed
The popular Wi-Fi (802.11b) wireless standard has a major flaw that could allow hackers to bring down any system by a local denial of service (DoS) attack, according to the Australian Computer Emergency Response Team (AusCERT). The flaw was discovered by students at Queensland University and apparently reported to manufacturers in November, in the hope they could find a fix. They can't.

(snip)

Original report: http://www.auscert.org.au/render.html?it=4091

[ntluser]

It's not surprising really.

There was a demonstration on TV that one person with a laptop and appropriate skills could read the screen and possibly the hard drive on another laptop in the same hotspot area. There were concerns about commercial and industrial espionage with companies in adjacent buildings being able to access each others machines.

It's typical of Microsoft that as per usual they have not examined and prepared for all the security aspects, particularly when you see all the security patches they continue to issue for Windows XP, their flagship operating system.

Originally Posted by ntluser

It's typical of Microsoft that as per usual they have not examined and prepared for all the security aspects, particularly when you see all the security patches they continue to issue for Windows XP, their flagship operating system.

Is this a M$ ****-up? I'd be the first to lay in to them if they've screwed up, but in this case I thought WiFi is an open standard.

EDIT

Great, our new improved swear filter won't even allow you to type c zero ock now!!

[ntluser]

Originally Posted by towny

Is this a M$ ****-up? I'd be the first to lay in to them if they've screwed up, but in this case I thought WiFi is an open standard.

EDIT

Great, our new improved swear filter won't even allow you to type c zero ock now!!

I was making the point really that although Microsoft can come up with all this wonderful funtionality they haven't thought through whether it is a good idea to have it or indeed how to ensure privacy and security relating to it.It's a bit like writing software which connects people to the internet but doesn't build in any functionality to prevent other internet users from accessing your machine against your wishes.

[gazzae]

Originally Posted by ntluser

I was making the point really that although Microsoft can come up with all this wonderful funtionality they haven't thought through whether it is a good idea to have it or indeed how to ensure privacy and security relating to it.It's a bit like writing software which connects people to the internet but doesn't build in any functionality to prevent other internet users from accessing your machine against your wishes.

Sorry I'm confused, what has a flaw with Wi-Fi got to do with Microsoft?

Originally Posted by ntluser

It's a bit like writing software which connects people to the internet but doesn't build in any functionality to prevent other internet users from accessing your machine against your wishes.

hang on, isn't that M$'s basic business model?

[Richard M]

Originally Posted by towny

hang on, isn't that M$'s basic business model?

Going a little OT here but seriously, it is.
M$ know that Mr Average doesn't care or even know about security, they just want cool features and eye candy.

[SMHarman]

Is it me or is this security flaw about as real as saying there is a flaw in the GSM/GPRS networks in that they might not give coverage in all areas?

Originally Posted by Richard M

Going a little OT here

said the mod

Originally Posted by Richard M

eye candy.

Don't we all like eye candy?

http://www.cableforum.co.uk/board/showthread.php?t=7174

http://www.cableforum.co.uk/board/showthread.php?t=7214