[nycwireless] OpenSSH security
I saw a number of posts today about a security hole in SSH. Since some people are managing their networks across the air, I am sure it is relevant. There is a workaround, as systems using the new PrivSep feature are not as vulnerable. PrivSep is described here: http://www.citi.umich.edu/u/provos/ssh/privsep.html The above is as much as I know at this time. Seth -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
[nycwireless] RE: Identifying Wireless routers by MAC
There's a whole thread about this in the Pen-test mailing list on Security Focus. It's under "Detecting Wireless APs from the LAN". It's pretty good technique at doing this, but it's also vendor specific. For example, Lucent and Cisco use a specified range for their wireless equipment. But some vendors use the same MAC range they got for their 802.3 network, so you won't be able to distinguish whether it is an AP or not. However, there are other techniques on detecting APs from the LAN that can be used in addition. Looking for Web interfaces, SNMP strings, proprietary management interfaces, etc. > > Hmm just posted on this issue a few days ago. Yeah its the same in > 803.11 packets as 802.3. MAC headders are before the > WEP-obfuscated-payload. > > First 3 octets are vendor. havent found a central databse of them yet. These are assigned by IEEE, and there's a database of them on the net. One comes with arpwatch. However, things get tricky. For instance, sometimes apple airports come up as Lucent cards. -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
[nycwireless] Monthly Meeting Tomorrow (Wed. 6/26) Evening
Hello Everyone, Just a reminder, we are having our Monthly Meeting tomorrow. Agenda - Major Node Update - Bryant Park Update - Vendor(s) Demo - SIG Update - Q&A - Breakout to groups (last meeting people broke into 5-6 people groups and talked for 20 minutes or so). - Off to Bar Date : Wednesday, June 26. Time : 7:15pm Meeting Location: Bway.net, 459 Broadway, 2nd Floor Almost 2 blocks north of Canal, near the corner of Grand St. On the west side of the street, then up one flight of stairs. Closest trains are N/R, but several subway stops are nearby, within a few blocks -- A/E, 1,2, 6 (Canal St for all). A handicap accessible entrance is available if you send an e-mail letting me know ahead of time. -Ben -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
[nycwireless] Fwd: warchalking - a hobo-language for free wireless networking
I guess we can add this to the meeting agenda -- for discussion at the bar: http://www.blackbeltjones.com/warchalking/ -- === Joe Plotkin DSL/Marketing Bway.net - NYC's Best Internet === Bway.net 459 Broadway, 2nd floor New York, NY 10013 vox: 212.982.9800 fax: 212.982.5499 efax: 561.365.5877 email: [EMAIL PROTECTED] xDSL info: [EMAIL PROTECTED] web: http://www.bway.net === Fight the Monopoly! http://www.TeleTruth.org === -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
[nycwireless] Wireless Hardware - Comments
http://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1150&Product_Id=2690646&showcase=thttp://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1147&Product_Id=2946903&showcase=t The above two URLs are pointers to seemingly cheap hardware at J&R. Anyone want to comment on this hardware? Suitability etc.? I am thinking of purchasing these and would like some comments. I will also bring copies to the meeting tomorrow evening (6/26/02). Thanks Jim McBride Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup
Re: [nycwireless] Wireless Hardware - Comments
Hello Jim and Everyone, Remember, ONLY plain text to the list. For those who get the digest, it's very difficult to read html. Secondly, the cheapest hardware is not for those whose primary interest is in a high quality network. The radios and antennas in AP and cards vary greatly with among manufacturers. I recommend users avoid SMC, LinkSys, and a handful other "cheapie" cards. LinkSys APs, such as the WAP11 are a different story. The client card (in this case, a PC Card) is extremely important, so I would recommend ORiNOCO or Cisco cards (note, I have no connection to either manufacter). I'm going to repeat this in e-mail, the best is Cisco, then ORiNOCO, and then a herd of other vendors. You can get ORiNOCO Silver Card for as low as $56 (no rebate needed). Now, why would you buy anything else? I wouldn't. Check out www.pricegrabber.com and do a search for "ORINOCO SILVER" Time and time again, I watch people with non-Cisco and ORiNOCO cards struggle for signal strength, while these two work. If you plan to leave your house with a wireless card, get one of the two. -Ben - Original Message - From: Jim McBride To: [EMAIL PROTECTED] Sent: Tuesday, June 25, 2002 2:07 PM Subject: [nycwireless] Wireless Hardware - Comments http://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1150&Pro duct_Id=2690646&showcase=t http://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1147&Pro duct_Id=2946903&showcase=t The above two URLs are pointers to seemingly cheap hardware at J&R. Anyone want to comment on this hardware? Suitability etc.? I am thinking of purchasing these and would like some comments. I will also bring copies to the meeting tomorrow evening (6/26/02). Thanks Jim McBride Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
RE: [nycwireless] Wireless Hardware - Comments
This offer was on Amazon.com last week. I tried to order 20, but all the orders were cancelled after the supplier failed to deliver the goods... Good luck getting them. Chris Peak Networks http://www.peaknetworks.com Wirelessly Connected... Original Message: - From: Jim McBride [EMAIL PROTECTED] Date: Tue, 25 Jun 2002 11:07:56 -0700 (PDT) To: [EMAIL PROTECTED] Subject: [nycwireless] Wireless Hardware - Comments http://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1150&Product_Id=2690646&showcase=t http://www.jandr.com/JRProductPage.process?Merchant_Id=1&Section_Id=1147&Product_Id=2946903&showcase=t The above two URLs are pointers to seemingly cheap hardware at J&R. Anyone want to comment on this hardware? Suitability etc.? I am thinking of purchasing these and would like some comments. I will also bring copies to the meeting tomorrow evening (6/26/02). Thanks Jim McBride - Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup mail2web - Check your email from the web at http://mail2web.com/ . -- NYCwireless - http://www.nycwireless.net/ Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/ Archives: http://lists.nycwireless.net/pipermail/nycwireless/
