PDA

View Full Version : Warchalking


ORAC
16th Aug 2002, 15:11
BBC - Friday, 16 August, 2002, 11:42 GMT:

FBI warns about wireless craze

Well-meaning wireless activists have caught the attention of the US Federal Bureau of Investigation.

One of its agents has issued a warning about the popular practice of using chalk marks to show the location of wireless networks.

The marks, or "warchalks", are cropping up in cities and suburbs across the world.

The FBI is now telling companies that, if they see the chalk marks outside their offices, they should check the security of wireless networks and ensure they remain closed to outsiders.

The warchalking phenomena is only a couple of months old but it has generated a huge amount of interest.

The idea behind warchalking is to use a standardised set of symbols to mark the existence of wireless networks that anyone can use to go online.

Many community groups and local governments, and even some public-spirited companies, are setting up wireless nodes that give people fast net access.

The wireless networks replace computer cables with radio and are usually very easy to set up and connect to.

Before now many curious hackers have gone on "wardriving" expeditions which involve them driving around an area logging the location of the wireless networks.

Many companies using wireless do not do enough to make them secure and stop people outside the organisation using them.

So the FBI is issuing advice to companies to be on the lookout for warchalk marks as a pointer to the security of their wireless network.

"If you notice these symbols at your place of business, it is likely your network has been identified publicly," warns the guidance from the FBI.

The agent who circulated the warning in Pittsburgh said it was not an official FBI advisory or policy but was information worth passing on.

He urged anyone using a wireless network to ensure that it was secure and used only by those a company wants to access it.

Warchalkers have questioned the scare stories surrounding the phenomena, saying that anyone with malicious intent is unlikely to publicly mark their target.

The phrases "wardriving" and "warchalking" derive from the early days of computer hacking when curious users programmed their computers to search for all phone lines that returned data tones. The exhaustive searching was known as "wardialling".

News.com (http://news.com.com/2100-1033-939546.html?tag=fd_ots)

A Guide to Warchalking (http://www.blackbeltjones.com/warchalking/index2.html)

Symbol Generator (http://cheerleader.yoz.com/warchalk.html)

The Nr Fairy
18th Aug 2002, 15:12
There have been several stories about the insecurity of wireless networks recently. One said that it found about 5000 wireless networks in London, more than 95% of which were insecure.

One company in the US markets software and a wireless card for a Compaq iPaq. I know, 'cos I'm going to have it demoed and borrow a loan unit for a few weeks on Wednesday. It analyses wireless network performance, security, and the like - all for less than £3000, and if you've got a compatible PCMCIA card, NetStumbler, and you like Pringles crisps, then you can do it for mostly free with your laptop.

We plan to offer a service where we go and do 2 hour audits of a customer site then fix the security issues. It's pretty straightforward if you think about it, and there are several products on the market to put VPNs on the wireless portion to ensure the right people connect to the right network.

What_does_this_button_do?
18th Aug 2002, 18:59
NrF: We've been doing this for ages, and NetStumbler isn't that good.