A while back I did a network security series and one of the points that I mentioned was that it’s important to know what is normal for your network. In other words, what machines are NORMALLY connected, what services are normally running, etc. Well, I’m about to start a serious look at something that makes this knowledge essential and that may have some rethinking whether or not it’s wise to run an open wireless access point on the same network as their traditional LAN.
Tag: Mac
-
Juice – formerly ipodder podcast client for Linux (Windows and Mac too…)
I’ve been playing around a bit with podcast clients the last couple of days. I’ve been finding online news feeds for the onlineradiotv.com site and for many of those I have bash scripts to handle downloading or streaming the audio available from shortwave broadcasters. I did run across a few podcasts too though and thought it might be time to take another look at linux podcasting clients…
-
Lack of working exploit does not mean Windows 98 is safe
I want to try to clarify a point. I’ve spent a couple days trying to get current exploits to work on a Windows 98 SE virtual machine. Not to prove that Windows 98 is safe, but to determine if current exploits affect Windows 98. Yesterday evening there were apocalyptic headlines saying that virus threatens every windows os shipped since 1990 which is overhyped. The current vulnerability exists in every windows operating system shipped since 1990. The current exploit for that vulnerability doesn’t seem to work on Windows 98 (you have to go a long ways to find a configuration that the current exploit works with… I haven’t yet.) This does not mean that Windows 98 is invulnerable. It simply means that this specific attack does not easily work. Tomorrow may be different, now that the problem is known, it may be just a matter of time before someone determines WHY windows 98 is not as affected and “correct” the problem.
-
The D-Link DWL-800AP+ as a wireless repeater to extend wireless range – Part 7
So, according to D-Link there is a short list of access points that the DWL-800AP+ will repeat for. They are all d-link branded access points. It seems that there have been firmware updates to improve the compatibility with more models (of d-link access points.) Some of the incompatibilities have been with WEP encryption from what I’ve read.
-
The D-Link DWL-800AP+ as a wireless repeater to extend wireless range – Part 4
Ok, so now I had to add the new D-Link’s MAC address to the list of authorized MAC’s in the Linksys WAP11 (v. 1.1) For this, I call on wap11gui. Used to (since I use linux), I would have to suffer through a Windows boot on the laptop and balance the laptop on the edge of the bed and connect through usb to the linksys… now I can just administer it from my desk. Nice… Anyway, I log into that and Visit the “security” tab and “Authorized Mac”, and add the d-Link DWL-800AP+ to the list.
-
The D-Link DWL-800AP+ as a wireless repeater to extend wireless range – Part 3
So, now that I was “in” the DWL-800AP+ it was time to see if I could set it up as a repeater. I visited the “wireless” tab of the web based configuration and chose Repeater mode instead of AP mode and saw that I would need the Mac address of the access point that I wanted to “repeat” signal from. In this case it’s the old Linksys WAP11 v. 1.1 So, I opened up a console and (as root) did an arpping 192.168.0.250 (the ip address of my Linksys AP). Got the reply back and typed it in.
-
Flightgear multi platform open source flight simulator revisited
Ok – I was thinking I might have been a bit too dismissive of flightgear. So, I took a second look (and a third and fourth.) In fact, I found a source rpm of the 0.99 version and rebuilt it for Mandriva 2006 and installed. And went in search of scenery for the local area. Now, to compare the two, X-Plane has more spit and polish and frankly the visuals (from the limited area I could see) are better. Flightgear is interesting from the standpoint that it’s open source (GPL) and can use a variety of flight models.
-
Ping not working? try ARP
I’ll confess to having a lot to learn about IP ethernet networking. I feel pretty comfortable with basic TCP/IP (v4), the concept of UDP vs. TCP ports, ICMP pings, etc… but ARP is something that I haven’t dabbled much with. It is, of course, a layer that TCP depends on. When a machine sends a packet to another machine, it sends an arp packet out to “discover” the hardware (MAC) address of the machine on the other end, so ARP underlies everything. These days ICMP is many times blocked by firewall rules. The default with XP’s software firewall is to block ICMP pings for instance.
-
Quicktime and iTunes vulnerabilities
Details of a vulnerability in Apple’s Quicktime and iTunes reported at betanews.com. Secunia also has an advisory. It is listed as moderately critical and affects the current version of both quicktime and itunes on Mac or Windows.
-
Network Security guide for the home or small business network – Part 7 – Wireless Networking
OK – the last couple of entries got into some heavy lifting and some real learning on your part. Learning about what software needs to run, what services are running, updating them to keep current on security patches. We even talked about securing services listening for outside connections and limiting them to what is absolutely necessary. Now we’ll take a deep breath and get into another area… Wireless network security.