Light Reading

Users Eye New 802.11 Security Issues

Dan Jones
LR Mobile News Analysis
Dan Jones, Mobile Editor
8/11/2006
50%
50%

Some of the underlying 802.11 security issues revealed at the recent Black Hat security show have led some experts to recommend that users turn off their WiFi radios when not in use.

A presentation by Jon Ellch and David Maynor showed a video demo of a hack using the underlying wireless drivers to quickly access a Mac computer, although the attack also works against Windows machines. (See Intel's Centrino Vulnerability.) The two researchers demonstrated how wireless drivers could establish a connection and seize control of a laptop, even if the laptop was not associated with any WiFi access point. The two-step demonstration forced the victim's notebook to establish a connection to the hacker's PC, and seized control of the laptop once the connection was established.

This exploit could potentially allow attackers to commandeer anyone's laptop -- as long as a wireless capability is installed and enabled. The demo has renewed enterprise concerns about the security fitness of 802.11 once again.

Roger Cass, CTO at healthcare firm MediSync, says he will take a number of measures to protect against the threat. "Our first step would be to caution our laptop users to leave their radios off unless they are actively using them," he tells Unstrung. "Next would be to avoid using hotspots unless necessary."

"Lastly, we would have to wait for driver fixes from the radio manufacturers. Since this was a hot topic, I imagine some patches will be forthcoming. The key is to find the updated drivers and install them," Cass said.

Third-party WiFi security companies such as AirTight Networks Inc. and Network Chemistry Inc. have already piped up to say that their products protect against the hack.

The key danger, however, is likely to be a lack of user awareness about when their WiFi radio is actually enabled. Often, many users simply do not realize that they are connected via WiFi -- either in the office or in a public space. (See Five WiFi VOIP Security Issues .)

— Dan Jones, Site Editor, Unstrung

(1)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View
alockhart
50%
50%
alockhart,
User Rank: Light Beer
12/5/2012 | 3:44:53 AM
re: Users Eye New 802.11 Security Issues
It should be noted that these vulnerabilities are caused by poor coding and/or testing in the drivers for wireless cards from Intel and Apple. To put the risk into perspective, at DEFCON, over 60 percent of the wireless devices detected were from these two vendors. However, these types of issues have a much broader reach and likely affect more than just Intel and Apple.

These latest examples of vulnerabilities in wireless cards reflect a growing trend of vulnerabilities being found in the wireless client packages and drivers. Prior examples have been recognized and documented by the Wireless Vulnerabilities and Exploits project (www.wirelessve.org). Earlier this year an integer overflow was discovered in FreeBSDGÇÖs 802.11 stack (WVE-2006-0004). Additionally, both Linux and Windows have driver and other low-level disclosure vulnerabilities that can reveal the contents of a systemGÇÖs memory to remote attackers (WVE-2006-0005, WVE-2006-0047, and WVE-2006-0043).
Flash Poll
From The Founder
It's clear to me that the communications industry is divided into two types of people, and only one is living in the real world.
LRTV Interviews
The New Wave of IP + Optical Integration

11|21|14   |   04:29   |   (7) comments


At the Alcatel-Lucent Technology Symposium, Heavy Reading senior analyst Sterling Perrin talks about how SDN has reshaped the discussion around packet and optical integration.
LRTV Huawei Video Resource Center
Huawei Highlights at BBWF 2014

11|20|14   |   3:40   |   (1) comment


Broadband World Forum is one of the world's largest telecoms, media and technology events with over 7,800 senior executives from across the globe converging on Amsterdam every year to identify the Next Big Thing. BBWF is an exciting place to meet the entire industry under one roof and identify the latest in network innovation, service optimization and customer ...
LRTV Huawei Video Resource Center
How Will BCMS Stimulate Margin for Broadband Operators?

11|19|14   |   6:52   |   (0) comments


In BBWF 2014, Liu Shuqing emphasizes the value of FMC 2.0 based full service experience by throwing light on the BCMS solution. The underlying principle of this innovative technique is to create network robustness and driving network from connection oriented to ACE – BAND oriented infrastructure, in which applications, cloud, and user experiences will be an asset ...
LRTV Huawei Video Resource Center
SingleFAN3.0: Better Connected Experience

11|19|14   |   3:06   |   (1) comment


At the BBWF 2014, David Hu, the VP of Huawei Access Network Product Line, talked about the future of access networks – SingleFAN3.0: faster broadband, wider coverage, and smarter connection.
LRTV Interviews
Basil Alwan Interview: The Road to Cloud

11|19|14   |   09:09   |   (0) comments


Alcatel-Lucent's head of IP and Transport talks about the migration towards a web-like networking environment, the impact of the cloud, SDN and NFV, and the yet-to-be-announced FP4 chip.
LRTV Documentaries
FairPoint Makes a Fair Point About Analytics

11|19|14   |   1:56   |   (1) comment


The US-based communication service provider gets to grips with advanced analytics, tackling data and breaking down the silos within its own business.
LRTV Documentaries
Analytics Lets C Spire Get to Know Subs

11|19|14   |   3:01   |   (2) comments


It's all about the data for US operator C Spire as it uses analytics to personalize its customer service down to individual subscribers.
LRTV Interviews
Nuage Branches Out With SDN: CEO Interview

11|17|14   |   9:32   |   (0) comments


Sunil Khandekar, CEO of Alcatel-Lucent's SDN-focused unit Nuage Networks, talks about the opportunities and challenges of breaking out of the data center into wide-area networks.
Light Reedy
Telecom Analytics Grows Up

11|14|14   |   1:15   |   (4) comments


The big data analytics debate has moved on from a year ago, with some experts suggesting it's no longer a technology challenge.
LRTV Huawei Video Resource Center
Huawei Compass

11|14|14   |   3:17   |   (1) comment


At OpenStack Summit 2014, Shuo Yang, Huawei Principal Cloud Infrastructure Architect introduced Huawei Compass, the software tool for solving customers' problems on the journey of OpenStack Cloud.
LRTV Huawei Video Resource Center
Huawei's Cloud Strategy in European Region

11|14|14   |   2:56   |   (1) comment


At OpenStack Summit 2014, Dr. Gotz, CTO of Huawei IT in European Region introduced Huawei's cloud strategy in European region.
LRTV Huawei Video Resource Center
Huawei's Contribution on OpenStack

11|14|14   |   5:58   |   (0) comments


At OpenStack Summit 2014, Dennis Gu, Huawei Chief Architect of Cloud Computing introduced the relationship between OpenStack and cloud computing, and Huawei's contribution on OpenStack.
Upcoming Live Events
December 2, 2014, New York City
December 3, 2014, New York City
December 8-10, 2014, Reykjavik, Iceland
February 12, 2015, Atlanta, GA
April 14, 2015, New York City, NY
May 6, 2015, McCormick Convention Center, Chicago, IL
May 13-14, 2015, The Westin Peachtree, Atlanta, GA
June 9-10, 2015, Chicago, IL
Infographics
Irish Telecom outlines the rise of VoIP technology, including its adoption within businesses and their perception of its quality.
Hot Topics
Bell Labs Chief Slams 'Toy' Networks
Robert Clark, 11/19/2014
$38.3M: Ain't That a Kik in the SMS
Sarah Reedy, Senior Editor, 11/20/2014
Do You Have a 2020 Vision?
Dennis Mendyk, Vice President of Research, Heavy Reading, 11/21/2014
The New Wave of IP + Optical Integration
Ray Le Maistre, Editor-in-chief, 11/21/2014
Google, AT&T, BT Unite on Network Data Models
Carol Wilson, Editor-at-large, 11/20/2014
Like Us on Facebook
Twitter Feed