Are you broadcasting your SSID? Are you utilizing MAC authentication, WEP?
----- Original Message ----- From: "Wayland Sothcott" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, November 21, 2003 1:17 PM Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > Yes BUT ! Would it crash the micro chip? How would this be due to it being > on the same fequency? If software runs unexpected data then it *should* > handle it but unexpected data is the method used by attackers to break into > a system. You feed the input with things it is not programmed to handle and > it crashes the software, possibly causing code of your own chosing to be > run. What you do is craft a program in machine code which will take control > of the microprocessor. You then force feed this into the input of the device > in the hope that the program counter will run off the rails over the stack > where your code is. Then your code is in charge and you can do something > like changing security on the device and locking out the owner. However this > all begins by feeding the device with data in an attempt to crash it. It's > possible that they are at this stage. I can't see how microwaves would > generate the type of data on the antenna to cause a crash. If we are saying > that the microwaves are simply blasting the who circuit board we must be > talking massive power to get through the shielding. I have experience > crashing microprocessors by holding a automobile ignition circuit sparking > 20kv near bare micro board. This crashes it but watchdog usually corrects if > the chips are not physically damaged. > > My guess is that an attacker has run the micro into a loop. It all works OK > once it's reset. However watchdog can't fix it because the software seems to > still be running. A sanity check would be a good idea. So if the software > becomes insne then you turn off interupts and run a tight loop. Watchdog > will kick in and reset the micro. If watchdog is simply serviced on an > interrupt it's not very effective. You need to run through a number of > checks that it's still working before servicing the watchdog. It's hard to > think of some good rules but clearly something is wrong when no traffic > flows and nothing associates. It's a balance because you don't want > unnessaary reboots. > > Wayland. > > ----- Original Message ----- > From: "John Hokenson" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, November 21, 2003 6:12 PM > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > On a 700-watt microwave oven, there does not have to be much leakage to > kill > > the receiver--58dBm is a LOT. > > > > JH > > ----- Original Message ----- > > From: "Curt Perrymman" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Friday, November 21, 2003 8:27 AM > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > If a microwave is leaking badly enough to cause an AP to crash as you > > > describe, you've got bigger problems than an AP going down - you're > being > > > cooked! There are pretty strict standards regarding microwave leakage > > that > > > make it highly unlikely that a microwave would cause this unless the AP > is > > > located in the kitchen immediately adjacent to the microwave. > > > > > > At 04:05 PM 11/21/2003 +0000, you wrote: > > > >David, > > > > > > > >Unfortunately no Mac Donnals near by. It was the whole AP which went > > down! > > > >I am concerned that a Microwave oven could affect it. Surely there must > > be > > > >something wrong with it if it can crash an AP? I have been told that > some > > > >people can pick up Radio 4 on their fillings. > > > > > > > >Wayland. > > > > > > > > > > > >----- Original Message ----- > > > >From: "David Moss" <[EMAIL PROTECTED]> > > > >To: <[EMAIL PROTECTED]> > > > >Sent: Friday, November 21, 2003 3:35 PM > > > >Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > > > > > > > Perhaps it was a nearby MacDonalds having the MacAttack?? > > > > > > > > > > Microwave Ovens use the 2.4ghz range to cook food in them - > therefore > > it > > > >is > > > > > possible that a microwave can cause interference with Mr customer > > surfing > > > > > the readers digest website. > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]> > > > > > To: <[EMAIL PROTECTED]> > > > > > Sent: Friday, November 21, 2003 3:20 PM > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > > > > > > > > > > You have to be kidding me massively! > > > > > > > > > > > > ----- Original Message ----- > > > > > > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > > > > > To: <[EMAIL PROTECTED]> > > > > > > Sent: Friday, November 21, 2003 2:21 PM > > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > > > > > > > > > > > > > Do you mean that as it is definitley not the case or do you mean > > it as > > > > > > "you > > > > > > > have to be kidding me?" > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]> > > > > > > > To: <[EMAIL PROTECTED]> > > > > > > > Sent: Friday, November 21, 2003 8:15 AM > > > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > > > > > > > > > > > > > > > > surely not! > > > > > > > > ----- Original Message ----- > > > > > > > > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > > > > > > > To: <[EMAIL PROTECTED]> > > > > > > > > Sent: Friday, November 21, 2003 12:38 PM > > > > > > > > Subject: Re: [smartBridges] MAC ATTACK on airPoint PRO > Outdoor? > > > > > > > > > > > > > > > > > > > > > > > > > If is starts around the lunch hour is it possible that their > > is a > > > > > > > > microwave > > > > > > > > > that gets used around that time that is interfering? > > > > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > > > From: "Wayland Sothcott" <[EMAIL PROTECTED]> > > > > > > > > > To: <[EMAIL PROTECTED]> > > > > > > > > > Cc: <[EMAIL PROTECTED]> > > > > > > > > > Sent: Friday, November 21, 2003 6:00 AM > > > > > > > > > Subject: [smartBridges] MAC ATTACK on airPoint PRO Outdoor? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Nightmare for all WISPs > > > > > > > > > > > > > > > > > > > > Whilst monitoring with Simple NMS all my clients dropped > > off. > > > >The > > > > > > > bottom > > > > > > > > > > screen went red, except for my own locally connected > > airBridge. > > > >My > > > > > > > > > airBridge > > > > > > > > > > kept associating and disassociating. The APPO has been > > working > > > > > > > > unattended > > > > > > > > > > for months. Now two days in a row it has broken at 11am > > whilst I > > > > > > have > > > > > > > > been > > > > > > > > > > monitoring with Simple NMS. The quick fix was to gain > access > > to > > > > > the > > > > > > > > > building > > > > > > > > > > and power cycle the device from the mains plug. > > > > > > > > > > > > > > > > > > > > Could this be some sort of attack? > > > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > > Wayland. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type > > subscribe > > > > > > > > > smartBridges <yournickname> > > > > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type > > > > > unsubscribe > > > > > > > > > smartBridges) > > > > > > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type > > subscribe > > > > > > > > smartBridges <yournickname> > > > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type > > > >unsubscribe > > > > > > > > smartBridges) > > > > > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type > subscribe > > > > > > > smartBridges <yournickname> > > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type > > unsubscribe > > > > > > > smartBridges) > > > > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > > > > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > > > > > smartBridges <yournickname> > > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type > > unsubscribe > > > > > > smartBridges) > > > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > > > > smartBridges <yournickname> > > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type > unsubscribe > > > > > smartBridges) > > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > > > > > > The PART-15.ORG smartBridges Discussion List > > > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > > >smartBridges <yournickname> > > > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > > > >smartBridges) > > > > > Archives: http://archives.part-15.org > > > > > > > > > > > >The PART-15.ORG smartBridges Discussion List > > > >To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > > >smartBridges <yournickname> > > > >To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > > > >smartBridges) > > > >Archives: http://archives.part-15.org > > > > > > The PART-15.ORG smartBridges Discussion List > > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > > smartBridges <yournickname> > > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > > smartBridges) > > > Archives: http://archives.part-15.org > > > > The PART-15.ORG smartBridges Discussion List > > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > > Archives: http://archives.part-15.org > > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) > Archives: http://archives.part-15.org > The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
