Archive for category: Wireless Security

You are here: / Wireless Security

Guantanamo Wi-Fi shuttered after Anonymous hacking threat

A posting from CNet News in there Security and Privacy section:

After the hacking collective Anonymous launched a Twitter campaign pledging to go after the Guantanamo Bay Naval Base in Cuba, the U.S. military barred all Wi-Fi access on the base, according to the Associated Press. All social media, including Facebook and Twitter, also has been banned.

Army Lt. Col. Samuel House told the Associated Press that the shuttering of the base’s Wi-Fi was because of Anonymous’ public plans to “disrupt activities” at the military prison.

While no disruptions have yet been reported, according to the Associated Press, Anonymous has promised to make good on its threats.

The group said it launched its online protest in solidarity with the prisoners who have been on a hunger strike for the last few months. Anonymous publicized its campaign via several “Twitter Storm” packages with various hashtags referencing days in May, including #GTMO17, #GTMO18, and #GTMO19.

To read more click here: 

Nordstrom tracking customer movement via smartphones’ WiFi sniffing

A posting from Naked Security:

You’ve spent quite some time in the lingerie department, but you haven’t even peeked at our display of Bose® ‘OE2′ Audio Headphones, which were $149.95 but are now ONLY $134.96! Can we talk?”

OK, so that’s not exactly what Nordstrom says it’s planning to do with the information it gleans from tracking customers’ movements throughout their stores.

But it certainly could market that aggressively, now that the department store – purveyor of apparel, shoes, jewelry, and the like – has implemented technology to track how much time you spend in specific departments within 17 stores in the US.

Tara Darrow, a company spokeswoman, told CBS DFW that sensors in the stores are collecting information from customers’ smartphones as those phones automatically scan for WiFi service.

To read more click here: 

Shannon Morse of Hak5 Demonstrate and Talks about the new WiFi Honeypot at ShmooCon 2012

Most wireless devices including laptops, tablets and smartphones have network software that automatically connects to access points they remember. This convenient feature is what gets you online without effort when you turn on your computer at home, the office, coffee shops or airports you frequent.

Simply put, when your computer turns on, the wireless radio sends out probe requests. These requests say “Is such-and-such wireless network around?” The WiFi Pineapple Mark IV, powered by Jasager — German for “The Yes Man” — replies to these requests to say “Sure, I’m such-and-such wireless access point – let’s get you online!”

And with the newly improved Pineapple Mark IV web interface, gathering interesting packets, spoofing DNS, watching web traffic and more is just a click away.

Learn more about Hak5 and their products here.

Free Wireless Access Can Be a Security Problem

Free wireless hotspots is a huge security and privacy threat since hackers have the tools to really make life difficult.  Check out the video below.

Connecting to a random WiFi hotspot is much like strolling into a bar in a strange part of town. Most likely you’ll have a good time, but it could ruin your day. It’s wise to assume that all hotspots harbor predators, and take appropriate precautions.
Source: http://cybercoyote.org/classes/wifi/hotspots.shtml

Laptop road warriors beware: Wi-Fi hot spots that let you hop onto the Internet anywhere you travel leave you wide open to hackers.

Source: http://www.usatoday.com/tech/wireless/2007-08-06-wifi-hot-spots_N.htm

FCC and FTC holds Location-Based Services Forum

The Federal Communications Commission (FCC) and the Federal Trade Commission (FTC) is holding a public forum on privacy concerns about cell phones and their ability to track the location of users.

The forum is being held between 9 a.m. to 3 p.m. EDT at the FCC Headquarters, 445 12th Street, SW, Washington DC 20554.

Audio/video coverage of the meeting will be broadcast live with open captioning over the Internet from the FCC’s web page at www.fcc.gov/live.  The FCC’s webcast is free to the public.  Those who watch the live video stream of the event may email event-related questions to livequestions@fcc.gov.  Depending on the volume of questions and time constraints, the panel moderators will work to respond to as many questions as possible during the workshop.

Those hearings came about due to an investigation by security researchers and the Wall Street Journal that found Google’s Android devices; Apple’s iPhones and other similar devices track customers’ locations without their knowledge.  At the hearing, senators called on Congress to pass new laws to protect smartphone users from having their locations tracked without their consent.

In bringing awareness to this issue, the federal government is making a statement about the need to preserve some level of privacy in the digital age. Concern over security and privacy is growing as the Internet and mobile devices play larger and larger roles in our work and play.

 

CWSP – Certified Wireless Security Professional

The CWSP exam is an advanced level wireless LAN certification developed by Planet3 Wireless. This exam is a part of the Certified Wireless Network Program (CWNP). The exam tests your ability on how well you are able to protect your company’s valuable data from hackers. For anyone desiring a career in IT or Security this is a certification you cannot afford to be without.

The CWSP is the first nationally recognized wireless security exam offering in the United States. While this exam is has been around for several years, it is probably one of the best kept secrets. However when securing employment with major corporations in the area of wireless security, you will find that employers are looking for this certification.

One of the great fears around wireless is security. The one thing that beats fear is education. I applaud Planet3 Wireless on the job they have done in providing an exam that is both comprehensive and accurate. This vendor neutral exam really outlines the security solutions that are available today and more importantly how the solution should be utilized. The exam looks at the customer’s infrastructure and not the vendor’s product. You will find that the exam leaves no stone unturned.

Test Preparation:
The best study material to date other than real world experience is a combination of the following

1. CWSP Instructor-led Training
2. CWSP Study Guide
3. Practice Test

Ideally, your chances are better for passing the exam when you combined all three of these methods. However, money and time constraints sometimes prevent this from happening.

Exam Prerequisites:
There is only one prerequisite. Individuals attempting to take this exam must be CWNA certified. (Certified Wireless Network Administrator (CWNA) is another wireless certification through Planet3 Wireless which deals with wireless administration). While not a requirement, it is recommended that testers have their Security+ and/or SCP certification.

Exam Registration #:
PW0-200

Exam Cost:
The exam can be purchased for $175.00 USD.

Exam Format:
The CWSP exam is a 90 minute timed exam which consists of 60 scenario based questions. You are required to obtain a passing score of 70%. Should you have an interests in being an instructor, the passing score requirements are a little more stringent. A passing score of 80% is required.

Exam Content
You will find that the exam covers three basic areas; Wireless LAN Security Solutions, Wireless LAN Intrusion, and Wireless LAN Security Policies. The exam goes into deeper detail by highlighting the topic below:

* Wireless Security Principles
* Intrusion Techniques
* How Networks are Compromised
* Intrusion Detection Systems
* Layer 2 Wireless VPNs
* SOHO/SMB 802.1X/EAP Security
* Enterprise Wireless Gateways
* Secure Wireless Bridging
* Wireless LAN Switching
* Wireless VLANs and EAP Types
* Secure Wireless LAN Management
* Wireless VPN Routers

Exam Location:
The exam is nationally recognized and can be taken through any Authorized Thompson Prometric Testing Center. For locations in your area, check out http://www.2test.com.

I highly recommend anyone who is going into the field of security wired or wireless to take this exam.