Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 25 guests and 2 members online
 
Advertisement

You are here: Home
EH-Net
May 23, 2013, 07:57:01 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 [2] 3 4 ... 78
16  Ethical Hacking Discussions and Related Certifications / Wireless / Re: JetPack SSID and password on: April 03, 2013, 12:37:55 PM
Quote
First, I thought maybe you entered the SSID and Password from your laptop and/or browser...

Secondly, having access to the SSID and password on the device seems like a really poor design

first: you do have to put it on your laptop when you connect. Your laptop's wifi client will just list everything it sees, and leaves it up to you to pick which one to use. The SSID of your Jetpack is how you know which one to use. Otherwise you might click a funky looking one, and get your soul uploaded to the data cloud.

second: where else would you put the information so it is semi-readily available? One picks up the device, turns it on, and scrolls through menues to get to the options to display what you need. It's better than putting the information on the bottom of the device with a sticker.

Quote
True, but let's be realistic...  I would buy one a JetPack because I am not in the security of my home.  (I doubt people pay the PREMIUM that Verizon charges for data usage to use a JetPack at home.)

Wireless in the home isn't safe. Look in to Hacking Wireless Exposed, or Wifu. There are people out there that lack ethics and do things because they can. That includes things like using neighbor's wifi if they can get on it.

Quote
And while I always use a cable on my laptop, I can't guarantee that I am always right by the side of my latop - or in this case JetPack.

O_o
I carry all of my tech in a backpack, or messenger bag. I never, NEVER, leave it un-attended. I only take out what I need. Usually the laptop. The jetpack, take it out start it up, confirm the laptop connects, and then put it back in the bag. If I need to move, for whatever reason, the laptop goes back in the bag and the bag goes with me. Even just to wee.

Operational Security: I expect a Bob (an attacker) to be where ever I am. I expect a Bob to have basic skills. Cable locks can be easily picked or bypassed, without destroying the cable, and done in such a way that most people wouldn't even realize a crime is going on. A box can quickly be rebooted, popped, and restarted after, in the time you're at the alter praying to Ralph. In some cases all that is needed is a micro USB nub. There have been flaws out there that allow bypass of lock screens.

Yeah, your stuff might still be there when you get back, but how do you know it hasn't been messed with.

HD Moore's China Laptop Adventure.
17  Ethical Hacking Discussions and Related Certifications / Other / Re: Personal VPNs on: April 03, 2013, 12:10:45 PM
Quote
however when I'm doing stuff that requires me to be anonymous (due to operational security) on the internet I tend to stick with Tor.

What do you mean by "operational security"??


The steps I take to protect myself when doing things online, that are of a semi-questionable nature, or wanting to stay off radars. Things like checking some really questionable sites for research papers for school. Like Google Scholar. Smiley

http://www.youtube.com/watch?v=9XaYdCdwiWU
18  Ethical Hacking Discussions and Related Certifications / Wireless / Re: JetPack SSID and password on: April 02, 2013, 02:16:58 PM
I've used other Verizon jet packs in the past. The screen turns off, and you have to go back through it. No the SSID and the Password for the network being accessible via the screen isn't really an issue with security. How else are you going to know how to connect to the device?

The bigger issue is leaving the device laying around where someone else can pick it up and start messing with it.

and of course Hyabusa's advice about making it harder to get into is useful.
19  Ethical Hacking Discussions and Related Certifications / Other / Re: Personal VPNs on: April 02, 2013, 01:45:27 PM
Ok.

I've built my own, that I use on occasion via Wifi or other un-trusted networks. Using either OpenVPN, or ssh tunneling.

As for the paid service. I've only looked in to it briefly. Cory Doctorow like Ipredator (https://ipredator.se/) enough that he put it in to Little Brother and Homeland. In the book it talks about it being a little slow. Torrent freak has a list http://torrentfreak.com/vpn-services-that-take-your-anonymity-seriously-2013-edition-130302/

however when I'm doing stuff that requires me to be anonymous (due to operational security) on the internet I tend to stick with Tor.

Sorry I couldn't be more help.
20  Ethical Hacking Discussions and Related Certifications / Other / Re: Personal VPNs on: April 02, 2013, 11:52:46 AM
What do you mean by  personal VPN?

Are you talking a paid for service that uses a pool of ip addresses to hide you? Or do you mean a vpn that you set up and use while in untrusted locations like starbucks and hacker cons?
21  Resources / Career Central / Re: Am I too old for a career change into security? on: March 27, 2013, 10:48:50 AM
I have found that those of us with the best security understandings are those of us that started in something other than security and moved in to it later.

With all the universities, colleges, and community colleges training people in IA / computer security one can tell the ones that did more than security classes. (Or maybe I'm just biased because I run a IA Club at a local Uni, and seeing the kids in the program, acting like kids, while the older students get it more).
22  Ethical Hacking Discussions and Related Certifications / Forensics / New Michigan Forensics group on: March 24, 2013, 05:02:47 PM
Thought I posted this here before, but searching the site I couldn't find it.

A group of Forensics people got together and started a new group in south east Michigan. They meet once a month.

The site is mi4n6.org
23  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Stealth Scans on: March 19, 2013, 03:51:53 PM
A ping will go through, if you're not blocking ICMP.
24  Resources / Career Central / Re: Am I too old for a career change into security? on: March 16, 2013, 09:48:37 PM
Hi there Smiley

I'm a soon 29 year old guy


He is too old. Yes, too old to begin the training. Wink

(I couldn't help myself)
25  Ethical Hacking Discussions and Related Certifications / Mobile / Re: Locked iPhone on: March 14, 2013, 10:08:42 PM
As you may or may not know, you can only sync your iPhone, iPod or iPad with a single version of iTunes.

This I did not know, I thought you could sync  / back up to multiple version of iTunes (like I said, haven't used in forever).

what about attaching it to a linux box and just mounting it as a local device? I don't remember having to do anything special when I had my ipod color.
26  Ethical Hacking Discussions and Related Certifications / Mobile / Re: Locked iPhone on: March 14, 2013, 11:04:02 AM
probably not much help, but did you see this?

http://lifehacker.com/5852948/what-to-do-if-youve-forgotten-your-iphones-passcode

It says you can sync the phone even when it's locked. Not having an iphone, and not touching itunes in about 6 years, I don't know if you can add and sync a new device while it is locked.
27  Resources / Links to cool sites. / Re: Kali Linux 1.0 on: March 13, 2013, 11:08:59 AM
can't wait to get home to download and replace my bt5 installs... DEBIAN <3
28  Ethical Hacking Discussions and Related Certifications / Programming / Re: Good books on python on: March 12, 2013, 02:07:54 PM
I've tried that too. Mostly with perl. I'd find an itch to scratch, and then scratch it. But then I would move on and not keep using the language.

I've found that I've learned best from books (everyone is different).

I'm really only even interested in python, because it's big in infosec. (haven't seen violent perl or grayhat perl books). Smiley
29  Ethical Hacking Discussions and Related Certifications / Programming / Good books on python on: March 12, 2013, 10:12:55 AM
So as to not high jack the Violent Python thread, I was wondering what people have used to learn python.

I prefer dead trees over pixels on a screen. I've been trying for years, but haven't found a method or book that has spoken to me the way Learning Perl or Unix Shell Programming did.

Things I've tried:

Hello World - Wasn't going down the path I was interested in. More about getting to the point to teach kids how to make a game. (I got it to work with my ex-gf's kid).

Dive in to Python and Dive in to Python 3 - Wasn't able to obtain dead tree versions, but these were alright. Although I only got about a chapter or so in to each.

Learn Python the Hardway - I got a little way in to it. But I felt like I was just regurgitating what I was reading on the screen and didn't feel as if I was learning anything.

Google's Python boot camp - got about halfway through it, but had some questions that I had a hard time finding people that could answer them.
30  EH-Net / Ethical Hacktivism / Re: Paranoid parents messing with routers on: March 12, 2013, 10:04:17 AM
@longhorn - we see posts like this on an almost weekly basis. If it's not to bypass some rule set, then it's to get revenge, hack someone to stop them from bullying the poster, or see if Significant other is cheating.

People see the word hacker, and ignore the word ethical. Most that post those types of threads, take the stance that because they can they have the right to do it.

If they were to spend any time reading the forums at all, they'd see that behavior is not welcome here. However they don't, and they come here looking for "hackers for hire" type things.

Over the years, there have been a few rare exceptions where the poster actually sticks around, learns the error of his ways and joins the community. Look at it more like a fraternity hazing. If you can come here, ask something stupid, and put up with us, you'll be accepted by us.

Smiley
Pages: 1 [2] 3 4 ... 78
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.102 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.