AOH :: ISN-1056.HTM

Wireless Web puts personal data at risk

Wireless Web puts personal data at risk
Wireless Web puts personal data at risk

Forwarded from: Mark Bernard  

Dear Associates,

If you don't believe that this article speaks about something that
could actually happen then why not attempt it in a controlled
situation? If you don't succeed then you're likely not skilled enough
to be successful and if you do well what else can I say.

Many times while conducting penetration testing for my international
clients against off shore targets I was told by both management and
technical staff that a particular system and its information was safe,
secure only to prove them wrong. The stakes were high, because you see
in that particular organization if a system was penetrated the entire
departments annual salary increase was withheld. That's company

Could there be other organizations who are so sure about the
effectiveness of their own security systems?  You bet, lots !!  But
not many who'll stake their annual salary increase on it......

Please note the reference to a new vulnerability known as Evil Twins.
This vulnerability is created when somebody comes along and sets up a
duplicate hotspot and uses it to capture private information. How easy
would that be, very easy just ask your local Radio Shack retailer.
What if someone did this just outside a legitimate business?

Of course that might be illegal, but do you really think that somebody
who's not planning on being caught or identified would be concerned if
its right or wrong? Especially if there's a potential for financial
gain. Please don't kid yourself....

Businesses need to follow through on the concept of due-diligence or
standard-of-due-care, because many are managing security with true
obscurity and obscurity is going they same way that the dinosaurs

Enjoy the read !

Best regards,

========= beginning of excerpt =======

Wireless Web puts personal data at risk 
By Daniel Sieberg
June 21, 2005;

where to log on. The convenience comes with a caveat.

"Understand that the information you're sending is very similar to
with security firm Air Defense who visited an Atlanta park to show
security vulnerabilities.

strengthen their wireless networks. He said many people don't realize
they could have all their personal data stolen while checking out
their checking account.

comes back to," Rushing said.

signal in a matter of seconds. To illustrate how vulnerable such
of the dozens of people sitting nearby in the park.

itself," Rushing said.

wireless hot spots that look like the real thing.

the hacker then would have complete access to your machine.

into the basic level of wireless security that's commonly used. There
are even how-to video instructions online.

wireless hot spot.

somebody would be watching," he said.

Nevertheless, Rushing doesn't discourage using wireless. He tells
people to be aware of what they're sending and the potential for


========= end of excerpt ==========
Best regards,

Mark E. S. Bernard, CISM, CISSP, PM,
Principal, Risk Management Services,

e-mail: Mark.Bernard@TechSecure.ca 
Web: http://www.TechSecure.ca 
Phone: (506) 325-0444

Leadership Quotes by Kenneth Blanchard: "The key to successful
leadership today is influence, not authority."

Attend the Black Hat Briefings and
Training, Las Vegas July 23-28 - 
2,000+ international security experts, 
10 tracks, no vendor pitches.

Site design & layout copyright © 1986-2014 CodeGods