Wireless PCMCIA cards

Kent Borg kentborg at borg.org
Fri Feb 22 11:06:29 EST 2002


On Thu, Feb 21, 2002 at 09:34:43AM -0500, Derek Atkins wrote:
> Note that WEP may not interoperate properly, but then again WEP is
> useless ;)

Note the newest 802.1* security hole.  Apparently a bad guy can send
some sort of hangup message that will cause your card to think it has
lost its connection, but the access point doesn't notice and the bad
guy can take over your connection.  Apparently it is a bit more
trivial to do if one is not using WEP, but not impossible in either
case.


-kb, the Kent who is thinking that 802.11b should be considered
completely open and only trusted when a completely trusted encryption
scheme is run on top of it, in which this hangup hack would only
become a denial of service risk.



More information about the Discuss mailing list