Printable Version of Topic

Posted by: mikez Nov 25 2006, 10:04 PM

http://www.infosecwriters.com/text_resources/pdf/secure_linksys_wrt54g.pdf

If you don't care if your WIFI is locked down or not...at least change the password so that you can't be hacked.....

GEEZ.....I drove around my brother in laws house with my lap top and found 30 unsecured units in 5 minutes.....

Above is a link to the Linksys WRT54G which is the most popular in my 'hood....

Posted by: SirAndy Nov 25 2006, 10:09 PM

yepp, if i were ever planning on doing something illegal on the web (which i'm not, of course), that's how i would do it.
hijack someone else's wireless, get one of their IPs through DHCP, then go out and hack the crap out of my target.
it all traces back to their wireless routers public IP and by the time the feds show up at their house, i'm long gone ...

again, this is hypothetically speaking ...
Andy

Posted by: mikez Nov 25 2006, 10:14 PM

EVERYONE had the defaults for the router passwords and I was able to access all the pages....not hard. I could have shut them ALL down....but I wasn't bored enuff....

the only way to get access after a benign hacker disables them is to push the reset button in the back of the unit...IF they know this.....betya they call tech support and "Habib" in New Delhi has no asnwer....., kinda like a drive by whack upside the head....safer than cow tipping.....bet ya they don't even know where the "Stoopid book" is.....

Posted by: KaptKaos Nov 25 2006, 10:20 PM

If you have kids, you need to make sure that they are not using other peoples' WiFi. This is this an issue for you and your family and whatever guidelines you want to set for Internet use. If they can access the web without your knowledge, then any protections you put into place may be moot.

Posted by: SirAndy Nov 25 2006, 10:21 PM

problem is, it's all plug & play ...

most people don't even *KNOW* that their router has a webpage that allows you to manage it's internal settings ... and that they all have the *SAME* default password. which is about as good as *NO* password ...

Andy

Posted by: mikez Nov 25 2006, 10:30 PM

RTFB

I locked down my niece's unit.....and the immediate bitch was that her friends couldn't use her ISP w/o having to use/enter the 128 bit encrypted password......


KILL ME NOW......

Posted by: Mid_Engine_914 Nov 25 2006, 10:34 PM

I don't think most people could find my wireless network 'cause I don't broadcast my SSID.

Posted by: Headrage Nov 25 2006, 10:39 PM

Ours is a secured wireless network. We do detect unsecured networks occasionally, especially with Linksys in the neighborhood but since we don't know who they are we can't notify them...

So secure your wireless network during the set-up and periodically change your pass word....

Posted by: Dr Evil Nov 25 2006, 10:41 PM

I only reacently caught on and changed mine to secure encryption with password protection. Where I live it is very low tech and rural so not a huge threat, but when I was visiting over at my friends dorm on campus he showed me how many unsecure networks there were. I quickly learned.

Posted by: smontanaro Nov 26 2006, 12:46 AM

I just installed a new D-Link DI-624 a couple days ago. The default password is the empty string...

Skip

Posted by: ClayPerrine Nov 26 2006, 08:47 AM

I don't do WiFi at home... I really don't think its mature enough to be secure. Cat6 cable can't be hacked without getting into the house, and my house has plenty of jacks scattered through the house for internet access.


At work we have a 128bit encryption and a WEP key on the wireless. My next step is to go to smart cards and certificates to access the wireless.

Oh.. and my neighbor had his wireless wide open. I set it up to use MAC address filtering, and changed the default password. He hasn't noticed I did him the favor.

Posted by: grantsfo Nov 26 2006, 10:21 AM

or you could move to Mountain View and not worry about your own personal WiFi network.

http://googleblog.blogspot.com/2006/08/free-citywide-wifi-in-mountain-view.html

Posted by: rick 918-S Nov 26 2006, 11:06 AM

Sounds like a possible summer job for some young savvy computer kid. Like mowing lawns only without all the sweat. You drive around surfing the neighborhoods looking for unsecure access. Thne knock, knock, knock. Hey lady can I fix your security problem?