-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Guys, 

I think Time Warner is correct. A large number of users who have made
wireless access points have done so insecurely. 

Bottom line - You're offering access into Time Warner's network. More
than likely, you don't have any accounting mechanisms in place to
track users and their actions. If anything, Time Warner is trying to
protect you from liability issues. When the network is subject to a
DOS attack and the abuse team tracks it back to your IP/account,
you'll be responsible for any hacks or abuse of service. 

What will you tell the abuse team? "I know who it is, his MAC is
AA-AA-DD-12-34-56, go get him! 

As a security professional I can't condone the use of unsecured
communications in any fashion. 

Enjoy the APs while you can, as soon as hackers start using access
points for their launching pads you'll see your "friendly ISPs" start
to crack down. 

<Clarke> 


- -----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Rick Tait
Sent: Tuesday, July 30, 2002 11:37 AM
To: [EMAIL PROTECTED]
Subject: [nycwireless] Fwd: Time Warner Cable, Internet Security


Here we go again. Nastygrams from TWCNYC.

Anyone else get this?

And what is this "we have been advised" thing? Are they actually
*gasp* checking up on nodes now? They know how to do that? Who
knew?!?!?

;)

Seriously though, any options here? I don't want to lose my RR, no
time to switch over to DSL or whatnot. It basically looks like I'll
have to cave and become a closed node.

Did the group make any progress on the so-called "secret" WEP key DB?

Ideas? Options? Bueller?

Thanks,
RMT.

Begin forwarded message:


From: [EMAIL PROTECTED]
Date: Tue Jul 30, 2002 2:18:58 PM America/New_York
To: [EMAIL PROTECTED]
Subject: Time Warner Cable, Internet Security

July 30, 2002

Dear Mr. Tait:

By letter dated June 27th, you were advised that your Road Runner
account was transmitting the Road Runner service over a wireless
network so that anyone with a wireless network card could tap into
our service.  We requested written assurance that your account would
no longer be utilized in this manner, and advised you that continued
unauthorized use would result in suspension of your account.

Upon further review, we have been advised that despite a note on your
nycwireless.com web page that your node has "temporarily gone
private," your listed access point information remains valid, and
there are, in fact, no access restrictions in place.

In light of the above, we are writing to advise you that in order to
continue using the Road Runner service, we require that you: (1)
remove all information listed on the nycwireless.com website in
regard to accessing your Road Runner account; and, (2) configure your
network security to limit access only to permanent residents of your
household.

If you have not complied with the terms of this by Friday, August 2,
2002, we will suspend your account and we may pursue our legal
remedies.

Please contact Internet Security directly at either (718) 670-6621 or
[EMAIL PROTECTED] if you have any questions.

                                          Sincerely,


Gregory Powell
Abuse & Security, Supervisor
High Speed Online Services
Time Warner Cable of NYC

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPUchJdBDCv2bqVf3EQJGkgCgnZzTw6sLi/yvznPLnVhgWl7GhmMAoKaF
FVVyt/OlijxO4MWKjrINN3zm
=SLAJ
-----END PGP SIGNATURE-----

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/

Reply via email to