Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / Wi-Fi Theives

Author
Message
RadiusOFT
19
Years of Service
User Offline
Joined: 14th Jul 2005
Location: Aloha, OR(egon)
Posted: 12th Jul 2006 00:56
Hey i have a wireless router and i was wondering if there was a way to check if people besides me are using it and also i was wondering if anyone knows how to put up a firewall to block other people.
thanks

Do or do not... there is no try -yoda
cats fit best in a george forman - not yoda
Miguel Melo
19
Years of Service
User Offline
Joined: 8th Aug 2005
Location:
Posted: 12th Jul 2006 01:01
Best way is to

1) Change the router admin password if you haven't done so!
2) Lock the wireless access to specific MAC addresses. Each device has a unique MAC address and, if you look your devices addy's up you can grant access specifically to those. In my case, only my Laptop, my Windows Mobile phone and my Nintendo DS have access.

How you do both things, depends on your router. Check the documentation for details.

I have vague plans for World Domination
spooky
22
Years of Service
User Offline
Joined: 30th Aug 2002
Location: United Kingdom
Posted: 12th Jul 2006 01:46
If it has a web admin interface it should have a section listing all currently connected computers. Hopefully it will only list those you know.

Like Miguel Melo says, turn on option to only allow wireless connections with specific MAC addresses. Also turn on WPA or WEP encryption as this forces all users to know a specific password to connect.

Boo!
UnderLord
21
Years of Service
User Offline
Joined: 2nd Aug 2003
Location:
Posted: 12th Jul 2006 04:57 Edited at: 12th Jul 2006 04:59
After all your wireless devices are connected to the wifi do this, turn off the SSID broadcasting.

All your wireless devices will stay connected, but the wireless network will no longer show up in the "wireless networks in range"

I know on linksys routers its actually called SSID broadcasting (options YES or NO)

Oh yes only problem is that if you disconnect from the wifi you might have to turn SSID broadcasting back on to connect again. But no biggie.

Any leachers out there will be unable to connect to your wireless because they won't know it exist, unless they have a sniffer or something, but i dunno...just try it and see.

Host your site for free www.darkuniverse.net

E-mail UnderLord @ UnderLord AT darkuniverse DOT net
FINN MAN
20
Years of Service
User Offline
Joined: 2nd May 2004
Location:
Posted: 12th Jul 2006 05:50
doing the above will keep most people out, but if they relay want to get on your network it would only take them about 5 minutes. Even MAC filtering wont stop them as it is possible to spoof a MAC address. When you use Wireless you are taking a risk but the convenience usually make the risk worth the wile.

Oddmind
20
Years of Service
User Offline
Joined: 20th Jun 2004
Location: Atlanta, Georgia
Posted: 12th Jul 2006 06:12
Quote: "WPA or WEP encryption"


that will only stop a retarted fly that also has tourrettes.

WEP and WPA are alright but only useful if your using a 26 alpha numeric hex password.

the MAC adress is very useful and is probably your best bet seeing as you dont house any government information or anything (hopefully) but anywho do what you like and what will work with the least bit of hassle.

formerly KrazyJimmy

Prayers for rain...
Miguel Melo
19
Years of Service
User Offline
Joined: 8th Aug 2005
Location:
Posted: 12th Jul 2006 09:53
Quote: "Even MAC filtering wont stop them as it is possible to spoof a MAC address."


I heard this is possible, but surely, they would have to know what MAC addresses your devices have to spoof?

Hmmm.... Maybe they could pound your router with all MAC addresses until one was accepted? This may take a while as there's bound to be quite a few combinations.

I have vague plans for World Domination
FINN MAN
20
Years of Service
User Offline
Joined: 2nd May 2004
Location:
Posted: 12th Jul 2006 13:29
Well I have never done a mac spoof but You can get them by grabing packits from the air... I think.

BatVink
Moderator
21
Years of Service
User Offline
Joined: 4th Apr 2003
Location: Gods own County, UK
Posted: 12th Jul 2006 13:53
Quote: "and my Nintendo DS have access"


How do you do that? I know it's possible, and my son has a DS, so any info would be appreciated.



Kenjar
19
Years of Service
User Offline
Joined: 17th Jun 2005
Location: TGC
Posted: 12th Jul 2006 14:17
http://www.tomsnetworking.com/2005/05/10/how_to_crack_wep_/

read this article, try to crack your own wifi, this way you can identify hacking methods of bandwidth theives, and start to protect yourself from it. You will also be able to see if you can hack your own network after you've installed additional measures.

NeX the Fairly Fast Ferret
19
Years of Service
User Offline
Joined: 10th Apr 2005
Location: The Fifth Plane of Oblivion
Posted: 12th Jul 2006 18:14 Edited at: 12th Jul 2006 20:29
How do you get the DS to work on a wireless network at all?


Since the other one was scaring you guys so much...
indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 13th Jul 2006 10:00
mac address and wpa not wep
look in attached devices if you think someone is connected

UnderLord
21
Years of Service
User Offline
Joined: 2nd Aug 2003
Location:
Posted: 13th Jul 2006 20:34
I know one guy in my apartment building keeps trying to connect to my wifi but he fails horribly i don't say anything to him because its fun to read the logs and see which ports he tried today.

I have all mac addresses blocked except one (my wifes) my broadcasting SSID turned off and WPA on 128-bit with a nice long password, of course. I havent had any problems but im sure no one around is trying to jack-in or wanting too.

Host your site for free www.darkuniverse.net

E-mail UnderLord @ UnderLord AT darkuniverse DOT net
Les Horribres
18
Years of Service
User Offline
Joined: 20th Nov 2005
Location: My Name is... Merry
Posted: 13th Jul 2006 20:59
Quote: "All your wireless devices will stay connected, but the wireless network will no longer show up in the "wireless networks in range""

No, all your computer devices will stay connected. Other equiptment such as a wireless network printer or a tivo will not detect the network and disconnet.

Quote: "1) Change the router admin password if you haven't done so!"

Just about worthless. It is much better to turn off remote access to the admin tools then to screw around with long complicated passwords. Basically, if your remote admin access is on you need a random assortment of alphanumerics 21chars long to get the same strength as your wep password.



The best defense is a good offense... rig a computer to send a virus to computers connected to the network. That will surely stop intruders.

Your Mod was deleted by the Government.
Miguel Melo
19
Years of Service
User Offline
Joined: 8th Aug 2005
Location:
Posted: 13th Jul 2006 21:19
Quote: "How do you do that? I know it's possible, and my son has a DS, so any info would be appreciated."


It's been a while since I did that, but if I'm not misktaken I had to set the auth to WEP, and select one specific number of bits for the WEP (sorry, I'm typing this 300Km from home so I can't double check my router). I then consulted the MAC from the DS menu, which I think you can access if you have a WiFi game inserted (Mario Kart in my case). So I added the MAC to the router, and just selected Network game from MarioKart->"Connecting..."->"Logged in for the first time" and then I could select a game and it automatically found opponents and I played.

I remember that the WiFi instructions that come with Mario are pretty straightforward, but I have read that not all routers are compatible.

Also, I only ever used it to play online: never tried anything fancy like accessing the DS from a computer on the network (acn it be done?).

I have vague plans for World Domination
CattleRustler
Retired Moderator
21
Years of Service
User Offline
Joined: 8th Aug 2003
Location: case modding at overclock.net
Posted: 14th Jul 2006 00:05
Quote: "I'm typing this 300Km from home so I can't double check my router"

damn, that router has some good range! what type of range expander are you using??



Science, Mathematics, and Physics do not lie - only people do.
UnderLord
21
Years of Service
User Offline
Joined: 2nd Aug 2003
Location:
Posted: 14th Jul 2006 02:39
Quote: "Quote: "I'm typing this 300Km from home so I can't double check my router"
damn, that router has some good range! what type of range expander are you using??

"




Host your site for free www.darkuniverse.net

E-mail UnderLord @ UnderLord AT darkuniverse DOT net
monotonic
18
Years of Service
User Offline
Joined: 24th Mar 2006
Location: Nottinghamshire, England
Posted: 15th Jul 2006 01:57
I run linux under a virtual machine on my p.c, and I have a program called Fake AP that generates thousands of fake access points from your wireless adapter, so if a hacker wants to break into your ap they have to find it first, and supprisingly it doesn't clog up your network as you might expect

Link to Fake AP
http://www.net-security.org/software.php?id=259

I know the voices aren't real, but they have good ideas!
UnderLord
21
Years of Service
User Offline
Joined: 2nd Aug 2003
Location:
Posted: 15th Jul 2006 03:06
Nice....

Host your site for free www.darkuniverse.net

E-mail UnderLord @ UnderLord AT darkuniverse DOT net
SirFire
19
Years of Service
User Offline
Joined: 4th Apr 2005
Location: North America
Posted: 15th Jul 2006 10:03 Edited at: 15th Jul 2006 10:05
Quote: "Maybe they could pound your router with all MAC addresses until one was accepted?"


That's not necessary, simply monitoring the wifi traffic reveals all the MAC addresses that are talking even if the network uses encryption, because MAC addresses are not encrypted.

And if none are talking, you can inject packets that you've sniffed (even if they are encrypted) to instigate traffic. The traffic will be meaningless to you until you do a statistical analysis and determine the encryption key, but it makes the whole process much faster than just sitting there idle waiting for enough traffic to do an analysis attack. It takes at least ~400,000 packets to properly determine the encryption key, and without injecting packets you could be waiting many days.

The preceding statements are for educational purposes only. Do not jack into other's networks.

Miguel Melo
19
Years of Service
User Offline
Joined: 8th Aug 2005
Location:
Posted: 15th Jul 2006 21:27
Quote: "It takes at least ~400,000 packets to properly determine the encryption key"


Boy, television must really stink where you live.

Just kidding, SirFire, that is some really good info. I personally had no idea about those shenanigans. Have one on me ->

I have vague plans for World Domination
UnderLord
21
Years of Service
User Offline
Joined: 2nd Aug 2003
Location:
Posted: 16th Jul 2006 16:49
Quote: "And if none are talking, you can inject packets that you've sniffed (even if they are encrypted) to instigate traffic. The traffic will be meaningless to you until you do a statistical analysis and determine the encryption key, but it makes the whole process much faster than just sitting there idle waiting for enough traffic to do an analysis attack. It takes at least ~400,000 packets to properly determine the encryption key, and without injecting packets you could be waiting many days.
"


You can find that in basicaly any book you read about this stuff =P

Host your site for free www.darkuniverse.net

E-mail UnderLord @ UnderLord AT darkuniverse DOT net

Login to post a reply

Server time is: 2024-11-17 08:30:31
Your offset time is: 2024-11-17 08:30:31