Forgot your password?

typodupeerror

Comment: Re:Though the Times They May Look Grim ... (Score 1) 389

by Agarax (#32151384) Attached to: The Desktop Security Battle May Be Lost

False assumption. The endpoint PC is compromised in way more cases than the middleman router.

Encryption alone buys us nothing. Or wait -- it buys us key manangement hell.

Perhaps you should read what I was replying to before you start flaming me.

Yes, and that's what we should advocate. Everyone build a secure encrypted network. Ready.....GO!

I was merely replying to the general sentiment here that 'oh noez! the networks are compromised!!!111'

Anyone with half a brain knows that any effective security posture is done with defense in depth on the perimeter along with good endpoint security and user awareness.

( further reading for the interested http://www.symantec.com/connect/blogs/its-all-about-endpoints )

Comment: Re:Though the Times They May Look Grim ... (Score 1) 389

by Agarax (#32134588) Attached to: The Desktop Security Battle May Be Lost

Yes, and that's what we should advocate. Everyone build a secure encrypted network. Ready.....GO!

It's called TLS/SSL. http://en.wikipedia.org/wiki/Transport_Layer_Security

As long as my computer and the server I connect to are malware free asymmetric cryptography (public-private keys) prevents an attacker from eavesdropping on the session.

Comment: That's for WEP ... (Score 4, Informative) 207

by Agarax (#32105834) Attached to: Hot Sales In China For Wi-Fi Key-Cracking Kits

You don't NEED packet injection, you just need it if you want to break into the network anytime soon. Sitting and listening to normal traffic will eventually get you enough packets to attempt to break it.

For WPA you don't even need packet injection, just deauth a client that is connected, collect their reconnection packets, and then run a dictionary/brute force attack against the handshake.

"Tell the truth and run." -- Yugoslav proverb

Working...