OT: Security By Obscurity and Deception.

B

BotRot

Hello Windows XP Forum,

I administer four workstations, and one server for a (very) small company (with 4
PCs and a server) on a temporary/contractual basis. A basic set up (similar to a
home network setup), the server acts as a file server, it's connected to a
wireless router, PCs accessed the server and the internet via the (NETGEAR
WGT624v3) router. Server access the internet via the WAN port in the router.
Printer connected to the server, ....etc

Server: Windows 2000 Server SP4.
Workstations: Windows XP Professional SP3.

Wireless Security (was):
- WPA-PSK
- MAC Filtering
- SSID Broadcasting off
- Router password changed.

Other security, NOD32 Internet Security on the server, and PCs.

The business owner is (absolutely) convinced (paranoid) someone is out to break
into his network work. OK his the boss, so the Wireless network was shut down at
his behest, and everything is now connected with network cables. Great everything
works well. In the process I find, another wireless router, and an old laptop
(WinXP SP2 old).

Then something occurred to me, if I plug this Wireless router into a PC, configure
it similar to what I stated above, with static IP addressing, so it's has the
strongest security possible, unplug it from the PC, putting it next to a window,
and the only thing plugged into it is the power cord, and nothing else.

If someone tried to hack into this router, assuming the hacker is someone that
knows what they're doing, would it take them long to figure out nothing is plugged
into the router except the power cord? Or would they lose hair over trying to get
in and find something? Assuming they really wanted too. I know it's silly and
immature, but so is hacking into someone's network, unless you're sponsored by the
CIA, NSA, ... whatever, to do so.

Thought I'd here as I can't find this specific case on Google (given that these
could be the stupidest questions ever asked).

Thanks and regards,
- BotRot
 
B

Bruce Chambers

BotRot said:
.......

Then something occurred to me, if I plug this Wireless router into a PC, configure
it similar to what I stated above, with static IP addressing, so it's has the
strongest security possible, unplug it from the PC, putting it next to a window,
and the only thing plugged into it is the power cord, and nothing else.

If someone tried to hack into this router, assuming the hacker is someone that
knows what they're doing, would it take them long to figure out nothing is plugged
into the router except the power cord?


No, it'd take them only a few minutes to determine that there is no
network traffic beong passed through the router.





--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
B

BotRot

Thanks Bruce.



| BotRot wrote:
|
| No, it'd take them only a few minutes to determine that there is no
| network traffic beong passed through the router.
|
| --
|
| Bruce Chambers
|
| Help us help you:
|
|
| http://support.microsoft.com/default.aspx/kb/555375
|
| They that can give up essential liberty to obtain a little temporary
| safety deserve neither liberty nor safety. ~Benjamin Franklin
|
| Many people would rather die than think; in fact, most do. ~Bertrand Russell
|
| The philosopher has never killed any priests, whereas the priest has
| killed a great many philosophers.
| ~ Denis Diderot
 
B

BotRot

Wow! How many times, in these groups and "good" security guides advise, "...turn
off SSID, and use MAC filtering..."?

Good article.

| BotRot wrote:
|
| > Wireless Security (was):
| > - WPA-PSK
| > - MAC Filtering
| > - SSID Broadcasting off
| > - Router password changed.
| >
|
| It's moot now that you've switched to a wired network, but you might be
| interested in the following article that explains why disabling SSID
| broadcast and/or enabling MAC filtering does not increase security:
|
http://blogs.technet.com/steriley/archive/2007/10/16/myth-vs-reality-wireless-ssids.aspx
| --
| Lem
|
| Apollo 11 - 40 years ago:
| http://www.nasa.gov/mission_pages/apollo/40th/index.html
 
B

Bruce Chambers

BotRot said:
Wow! How many times, in these groups and "good" security guides advise, "...turn
off SSID, and use MAC filtering..."?


Because, despite the vulnerability of these methods to serious,
dedicated hackers, they do still provide a decent level of protection
against the casual hacker looking to steal his neighbor's connection or
the "drive-by" hackers looking for an easy open connection.

*NO* single security precaution is 100% impenetrable, and anything that
makes the hackers' "jobs" tougher helps. It's called a layered defense.



--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
B

BotRot

Thanks again Bruce and Lem, I'm becoming almost as paranoid as my customer the
more I post on this thread. That SMAC 2.0 utility (accessed via Lem's post) , no
wonder the business owner wanted the wireless network switched off, and cabled up,
what will they think of next?

I have indeed learnt something new.

Thanks and regards,
- BotRot

| BotRot wrote:
| > Wow! How many times, in these groups and "good" security guides advise,
"...turn
| > off SSID, and use MAC filtering..."?
| >
|
|
| Because, despite the vulnerability of these methods to serious,
| dedicated hackers, they do still provide a decent level of protection
| against the casual hacker looking to steal his neighbor's connection or
| the "drive-by" hackers looking for an easy open connection.
|
| *NO* single security precaution is 100% impenetrable, and anything that
| makes the hackers' "jobs" tougher helps. It's called a layered defense.
|
|
|
| --
|
| Bruce Chambers
|
| Help us help you:
|
|
| http://support.microsoft.com/default.aspx/kb/555375
|
| They that can give up essential liberty to obtain a little temporary
| safety deserve neither liberty nor safety. ~Benjamin Franklin
|
| Many people would rather die than think; in fact, most do. ~Bertrand Russell
|
| The philosopher has never killed any priests, whereas the priest has
| killed a great many philosophers.
| ~ Denis Diderot
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top