[77055] in cryptography@c2.net mail archive
Re: "Free WiFi" man-in-the-middle scam seen in the wild.
daemon@ATHENA.MIT.EDU (Roy M. Silvernail)
Tue Jan 23 11:26:05 2007
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
In-Reply-To: <87d555n7mp.fsf@snark.piermont.com>
Date: Tue, 23 Jan 2007 10:06:12 -0500 (EST)
From: "Roy M. Silvernail" <roy@rant-central.com>
To: cryptography@metzdowd.com
On Tue, January 23, 2007 09:24, Perry E. Metzger wrote:
> (Incidently, the article gets a few things wrong. It somewhat implies
> that you are safe if you pick a WiFi network you have a previous
> relationship with, which isn't true.)
It also is only warning against ad-hoc connections with misleading names.
While I see a bunch of these around (not necessarily in airports,
either... several show up from my cube at work), it doesn't take much to
put up a perfectly normal-looking access point. See
http://www.ethicalhacker.net/content/view/66/24/ for examples.
--
Roy M. Silvernail is roy@rant-central.com, and you're not
"Antelope Freeway, one sixty-fourth of a mile." - TFT
http://www.rant-central.com
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
