Tag Info

Hot answers tagged

49

Yes they can but unless your neighbor has the required technical expertise, its highly doubtful. To view incoming and outgoing traffic you need specific software to monitor network packets and the tech knowledge to actually do it. Most routers only keep a syslog and unless they are using software like wireshark to monitor/capture your packets, they cannot ...


36

If you get a VPN and use that for browsing, that will hide all your traffic from both your neighbour and their ISP.


35

First of all that would entirely depend on the encryption used by the access point. There are several types of possible encryption. Mostly on consumer wireless access points these are: WEP WPA WPA2 WPS WEP Let's first dive into WEP. WEP was the first algorithm used to secure wireless access points. Unfortunately it was discovered that WEP had some ...


29

What about using tor? Keep in mind that your speed will be affected*. As other people said, using any private mode in your browser is not going to be of any help. *EDIT: The slowdown heavily depends on the network topology, the number of nodes, how much traffic the nodes are handling and what you are downloading. Here you can find some explanations about ...


25

Yes they can actually. What it boils down to is that they can see which websites you are running by looking at: Clear HTTP traffic DNS requests sent One thing you could do is purchase an encrypted VPN and run all your internet traffic through the VPN. This way your neighbours will not be able to see what you are doing.


16

You can't. It doesn't matter whether the wifi is encrypted or not: you can't know whether the access point is trustworthy. A WPA2 access point with a strong password doesn't help when the access point itself is a rogue access point put up by someone who may or may not be the café or hotel owner. And yes, it happens — people put up open access points with ...


10

When my laptop is using a network I don't control (basically anything that's not home) it wears pretty red socks to reroute all traffic into the SOCKS5 proxy built into OpenSSH and then to a server I rent anyways for my website to protect my traffic. You can use tor as well but I intensely dislike tor (for reasons off topic here). This is the socks_up ...


10

In practice, it depends on the router they're using (and, specifically, on the firmware it's running). Basically all home WiFi routers have the technical ability to log visited URLs, as long as their firmware includes such a feature (and it's not exactly a complicated one). The main questions are: whether the router firmware supports such a logging ...


7

Sniffing and snooping should be synonyms. They refer to listening to a conversation. For example, if you login to a website that uses no encryption, your username and password can be sniffed off the network by someone who can capture the network traffic between you and the web site. Spoofing refers to actively introducing network traffic pretending to be ...


6

Maybe you can see that it is indeed possible to send a secret over an untrusted path by the following (somehow simplifying but illustrative :-) example You don't trust the post office and want to send me a gift You can achieve it in the following way You put the gift in a box and lock it with YOUR lock You send the box to me and I additionally lock it ...


4

I'm not aware of something that would turn your Android bluetooth radio into a sniffer. I think you would need to invest in an Ubertooth to accomplish what you're looking for. http://ubertooth.sourceforge.net/ http://hakshop.myshopify.com/products/ubertooth-one With the ubertooth you'll be able to sniff the bluetooth packets between your arduino devices.


4

You can use to normal wireless cards and change the mode to Monitor mode . Ralink and Atheros cheapests are best choices . Aircrack-ng's website have compatibility drivers page, since that proposed good device for WiFi sniffing data and raw packet injection, you can use that : Best wireless USB proposed devices


4

In short, the key is never directly sent over the wire. It is negotiated in a way that both parties can derive the same key, even though there is not enough data put on the wire to reconstruct it. For instance, in ECDH protocols, each side creates a unique public/private keypair. They then exchange public keys. By computing a mathematical operation on their ...


3

You can use TCP View which is usually used by investigators and security experts to determine the behavior of certain malware, where it's establishing connections/getting commands from, or more common use is to solve cases where an individual is spying on another by use of Webcam/Microphone etc, by tracing the IP address; an example use of TCPView in such ...


3

Generally speaking, unless there's something specific that prevents them from doing so, then they can. Legally speaking, a contract might make this disallowed, but it's very unlikely that this would be in your contract. Similarly, local privacy laws might protect you. Either way, it's lawyer time - but how will you ever know? Technically speaking, ...


3

No, this attack is not feasible. Believe me, I've tried. Now when I say I've tried it, I was not writing a virus or something to steal passwords, I was writing software where the user was fully aware that they were using a custom DNS server which intentionally lied (based on their rules) in conjunction with a HTTP proxy. This is exactly what you describe, ...


3

Every VPS is different therefore No one can possibly answer this question except for you. Run tcpdump or Wireshark on your system. Look for non-broadcast (like TCP) traffic that contains a MAC address that isn't yours. SIMPLE!


3

You can't detect if it's a wireless access point or not, what you can do is detect that a device was plugged in. With port security you can only allow your corporate devices to be plugged into the network whereas other detected apparatus will immediately cause the port to be shut down (white listing based on MAC address). Note that MAC spoofing is ...


3

To answer whether the sniffer module runs in promiscuous mode by default I am doing a test in my lab right now and will update it here when its done. UPDATE The answer finally comes out to be YES. The sniffer module does its capturing in promiscuous mode. To test I set up a win-xp-sp2 (10.10.10.101) vm on proxmoxVE (kvm virtual env). I added it to a bridge ...


3

SSL/TLS makes use of public key cryptography. This is the idea that we can have two cryptographic keys, one publicly known (pub), and one only known to the individual and never disclosed (priv). Lets say a user connects to a website with HTTPS (SSL/TLS). They send a request to the server, which responds with among other things, its x509 certificate which ...


3

Network traffic can be either unicast or broadcast (or multicast, but that's not relevant right now.) NBNS (NetBIOS Name Service) is broadcast, so the switch (your wireless "router" in this case) has a responsibility to deliver it to every host "attached" to it. Most other traffic is unicast, which means the switch should send it directly to the recipient. ...


3

If you can do it (with Wireshark or another tool), then any program that has the same privilege level as you can theoretically do it as well. So if the question is: can the loopback interface be sniffed? I'd reply YES. From what I know, it's more or less the reason why it was created in the first place.


3

Free software to demodulate the signal exists, see http://bellard.org/linmodem.html For the physical signal acquisition on first approximation I'd use a digital oscilloscope, something like https://www.sparkfun.com/products/11219 but it should be possible to do it a lot cheaper unless you plan to reuse it for other projects. If you can cut the line two ...


3

nmap has the ability to guess the operating system by looking at variations in how a device reacts to TCP/IP probes (see the nmap website for details). You can also make a guess at the identity of a device by looking at who its MAC address was allocated to. For example, something with an address in a Hewlett-Packard block is probably a network printer.


2

The hash is not passed directly in the string of bits. It will not just be there to grab in one packet. In order to attack WPA/WPA2 you must capture the entire four-way handshake. The key itself is not really sent as part of the message, since both sides know the key, they just need to prove to each other they know it, not send a hash for verification. One ...


2

It depends on the exact encryption being used on the network, but for WEP (which is the easiest to break) it takes only minutes. The most common attack is the Fluhrer, Mantin and Shamir attack which involves looking for reused IVs(initialization vectors) which can potentially be used to reverse engineer parts of the key. They are supposed to be unique, but ...


2

A basic router is both a network switch and another local system with an IP address. Things vary depending on how the router was configured, and how the network was configured, and what level of surveillance is applied. The "switch" part is nominally undetectable at the software level: a switch is a relay system, which does not have a MAC address, let alone ...


2

DSniff is a set of tools which do traffic analysis on the network. A machine which has DSniff installed can spy upon the local network and reveal every data element which is not protected. Nominally, SSL protects against that; that's what SSL was designed to do. One of the DSniff tools is webmitm, which purports to intercept and crack SSL connections -- it ...


2

As you say, when the communication happens on localhost, no packet whatsoever goes to the external network, so if capture happens, then it must happen on the machine itself. There are two noteworthy points in that respect: Capturing on localhost does not work on all OS. Notably, it does not work well on Windows (there are partial solutions), while it ...


2

Packet sniffing is a risk anywhere on the public internet when you have unencrypted traffic. You can encrypt your traffic to prevent sniffing. Granted, you should note that an adversary at the VPS with physical access to the machine likely can (after some effort) pull your data, including private keys/certificates off of your virtual private server. If ...



Only top voted, non community-wiki answers of a minimum length are eligible