Yes BUT ! Would it crash the micro chip? How would this be due to it being
on the same fequency? If software runs unexpected data then it *should*
handle it but unexpected data is the method used by attackers to break into
a system. You feed the input with things it is not programmed to handle and
it crashes the software, possibly causing code of your own chosing to be
run. What you do is craft a program in machine code which will take control
of the microprocessor. You then force feed this into the input of the device
in the hope that the program counter will run off the rails over the stack
where your code is. Then your code is in charge and you can do something
like changing security on the device and locking out the owner. However this
all begins by feeding the device with data in an attempt to crash it. It's
possible that they are at this stage. I can't see how microwaves would
generate the type of data on the antenna to cause a crash. If we are saying
that the microwaves are simply blasting the who circuit board we must be
talking massive power to get through the shielding. I have experience
crashing microprocessors by holding a automobile ignition circuit sparking
20kv near bare micro board. This crashes it but watchdog usually corrects if
the chips are not physically damaged.

My guess is that an attacker has run the micro into a loop. It all works OK
once it's reset. However watchdog can't fix it because the software seems to
still be running. A sanity check would be a good idea. So if the software
becomes insne then you turn off interupts and run a tight loop. Watchdog
will kick in and reset the micro. If watchdog is simply serviced on an
interrupt it's not very effective. You need to run through a number of
checks that it's still working before servicing the watchdog. It's hard to
think of some good rules but clearly something is wrong when no traffic
flows and nothing associates. It's a balance because you don't want
unnessaary reboots.

Wayland.

----- Original Message ----- 
From: "John Hokenson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 21, 2003 6:12 PM
Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?


> On a 700-watt microwave oven, there does not have to be much leakage to
kill
> the receiver--58dBm is a LOT.
>
> JH
> ----- Original Message ----- 
> From: "Curt Perrymman" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, November 21, 2003 8:27 AM
> Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
>
>
> > If a microwave is leaking badly enough to cause an AP to crash as you
> > describe, you've got bigger problems than an AP going down - you're
being
> > cooked!  There are pretty strict standards regarding microwave leakage
> that
> > make it highly unlikely that a microwave would cause this unless the AP
is
> > located in the kitchen immediately adjacent to the microwave.
> >
> > At 04:05 PM 11/21/2003 +0000, you wrote:
> > >David,
> > >
> > >Unfortunately no Mac Donnals near by. It was the whole AP which went
> down!
> > >I am concerned that a Microwave oven could affect it. Surely there must
> be
> > >something wrong with it if it can crash an AP? I have been told that
some
> > >people can pick up Radio 4 on their fillings.
> > >
> > >Wayland.
> > >
> > >
> > >----- Original Message -----
> > >From: "David Moss" <[EMAIL PROTECTED]>
> > >To: <[EMAIL PROTECTED]>
> > >Sent: Friday, November 21, 2003 3:35 PM
> > >Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
> > >
> > >
> > > > Perhaps it was a nearby MacDonalds having the MacAttack??
> > > >
> > > > Microwave Ovens use the 2.4ghz range to cook food in them -
therefore
> it
> > >is
> > > > possible that a microwave can cause interference with Mr customer
> surfing
> > > > the readers digest website.
> > > >
> > > >
> > > > ----- Original Message -----
> > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]>
> > > > To: <[EMAIL PROTECTED]>
> > > > Sent: Friday, November 21, 2003 3:20 PM
> > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
> > > >
> > > >
> > > > > You have to be kidding me massively!
> > > > >
> > > > > ----- Original Message -----
> > > > > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> > > > > To: <[EMAIL PROTECTED]>
> > > > > Sent: Friday, November 21, 2003 2:21 PM
> > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
> > > > >
> > > > >
> > > > > > Do you mean that as it is definitley not the case or do you mean
> it as
> > > > > "you
> > > > > > have to be kidding me?"
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]>
> > > > > > To: <[EMAIL PROTECTED]>
> > > > > > Sent: Friday, November 21, 2003 8:15 AM
> > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
> > > > > >
> > > > > >
> > > > > > > surely not!
> > > > > > > ----- Original Message -----
> > > > > > > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> > > > > > > To: <[EMAIL PROTECTED]>
> > > > > > > Sent: Friday, November 21, 2003 12:38 PM
> > > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO
Outdoor?
> > > > > > >
> > > > > > >
> > > > > > > > If is starts around the lunch hour is it possible that their
> is a
> > > > > > > microwave
> > > > > > > > that gets used around that time that is interfering?
> > > > > > > >
> > > > > > > > ----- Original Message -----
> > > > > > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]>
> > > > > > > > To: <[EMAIL PROTECTED]>
> > > > > > > > Cc: <[EMAIL PROTECTED]>
> > > > > > > > Sent: Friday, November 21, 2003 6:00 AM
> > > > > > > > Subject: [smartBridges] MAC ATTACK on airPoint PRO Outdoor?
> > > > > > > >
> > > > > > > >
> > > > > > > > > Nightmare for all WISPs
> > > > > > > > >
> > > > > > > > > Whilst monitoring with Simple NMS all my clients dropped
> off.
> > >The
> > > > > > bottom
> > > > > > > > > screen went red, except for my own locally connected
> airBridge.
> > >My
> > > > > > > > airBridge
> > > > > > > > > kept associating and disassociating. The APPO has been
> working
> > > > > > > unattended
> > > > > > > > > for months. Now two days in a row it has broken at 11am
> whilst I
> > > > > have
> > > > > > > been
> > > > > > > > > monitoring with Simple NMS. The quick fix was to gain
access
> to
> > > > the
> > > > > > > > building
> > > > > > > > > and power cycle the device from the mains plug.
> > > > > > > > >
> > > > > > > > > Could this be some sort of attack?
> > > > > > > > >
> > > > > > > > > Regards,
> > > > > > > > > Wayland.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > The PART-15.ORG smartBridges Discussion List
> > > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type
> subscribe
> > > > > > > > smartBridges <yournickname>
> > > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type
> > > > unsubscribe
> > > > > > > > smartBridges)
> > > > > > > > > Archives: http://archives.part-15.org
> > > > > > > >
> > > > > > > >
> > > > > > > > The PART-15.ORG smartBridges Discussion List
> > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type
> subscribe
> > > > > > > smartBridges <yournickname>
> > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type
> > >unsubscribe
> > > > > > > smartBridges)
> > > > > > > > Archives: http://archives.part-15.org
> > > > > > >
> > > > > > >
> > > > > > > The PART-15.ORG smartBridges Discussion List
> > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type
subscribe
> > > > > > smartBridges <yournickname>
> > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type
> unsubscribe
> > > > > > smartBridges)
> > > > > > > Archives: http://archives.part-15.org
> > > > > > >
> > > > > >
> > > > > >
> > > > > > The PART-15.ORG smartBridges Discussion List
> > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> > > > > smartBridges <yournickname>
> > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type
> unsubscribe
> > > > > smartBridges)
> > > > > > Archives: http://archives.part-15.org
> > > > >
> > > > >
> > > > > The PART-15.ORG smartBridges Discussion List
> > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> > > > smartBridges <yournickname>
> > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type
unsubscribe
> > > > smartBridges)
> > > > > Archives: http://archives.part-15.org
> > > > >
> > > >
> > > > The PART-15.ORG smartBridges Discussion List
> > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> > >smartBridges <yournickname>
> > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
> > >smartBridges)
> > > > Archives: http://archives.part-15.org
> > >
> > >
> > >The PART-15.ORG smartBridges Discussion List
> > >To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> > >smartBridges <yournickname>
> > >To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
> > >smartBridges)
> > >Archives: http://archives.part-15.org
> >
> > The PART-15.ORG smartBridges Discussion List
> > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
> smartBridges <yournickname>
> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
> smartBridges)
> > Archives: http://archives.part-15.org
>
> The PART-15.ORG smartBridges Discussion List
> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe
smartBridges <yournickname>
> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe
smartBridges)
> Archives: http://archives.part-15.org


The PART-15.ORG smartBridges Discussion List
To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges 
<yournickname>
To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges)
Archives: http://archives.part-15.org

Reply via email to