Tag Info

New answers tagged

1

Theoretically speaking, public WiFi networks do provide some level of anonymity. You are right in that since tons of people are behind a single public IP address, it is harder to trace malicious activity to an individual. Practically though, a public network alone really doesn't provide enough anonymity to hide someone from law enforcement - mostly because ...


3

Can This be done? I would say yes, but with some caveats. Depending on the cable and the data, you would need some very expensive / sensitive equipment to pull this off. To me this is a similar issue to the old Van Eck Phreaking (http://en.wikipedia.org/wiki/Van_Eck_phreaking). Intel has some tech to circumvent this kind of attack: ...


0

The problem isn't just on your local network. If you are using FTP to transmit the data to a remote server, then that traffic could be intercepted at many points between you and the remote server. The problem is that your FTP credentials are being sent in plain text. Admittedly, this would be easier to do on your local network, but that is not your only ...


5

If I understand correctly, your connection to the Internet gateway is wired and everyone else is WiFi. If that is the case, the WiFi users cannot capture your FTP credentials because there is no need for the WiFi AP to transmit them, and it won't. But really, the answer is to convince the people at the other end to replace FTP with SFTP.


1

In addition to what Michael Karcher said, monitor mode has the advantage of not having to be associated with the AP. This makes it possible to be completely invisible, and to sniff packets on a network you don't have the password for. In promiscuous mode you have to associate with the AP, so your're sending out packets. Monitor mode can be completely ...


0

Packets captured in Monitor Mode will most likely be (Layer 2) encrypted with WPA or WEP. Wireshark can decrypt these packets when properly configured with SSID/passphrase, if properly configured with SSID and passphrase of the AP. Additionally, the EAPOL handshake packets must be observed by Wireshark in order to decrypt these packets.


3

In "Promiscous mode", the driver still outputs standard ethernet frames belonging to the one wireless network you are currently associated to (identified by the BSSID). Possibly the device will only dump packets from the AP to wireless devices, but not packets from wireless clients to the AP, as receiving packets from non-AP devices is not used in AP client ...



Top 50 recent answers are included