
Warflying: San Diego 168
geogeek6_7 writes: "WarFlying over SanDiego reveals hundreds of WAPs, and some very interesting statistics. There is a second write up of the same adventure at the pilot's personal website. All this of course should not be confused with that 1500ft 'WarDriving' effort in Australia."
Regulations? (Score:1)
Re:Regulations? (Score:3, Insightful)
Re:Regulations? (Score:1)
Re:Regulations? (Score:2)
Re:Regulations? (Score:2)
Re:Regulations? (Score:2)
I'd send a few villagers over to build a couple of SAM sites.
Re:Regulations? (Score:2)
Not a bad idea! SAM sites only cost $600 and are fully automatic. Villagers work for 50 food. The only problem is that you'll have to keep your supply of wood up so you can build more power generators!
There already are (Score:1)
If he didn't have permission to use that network, he has already broken federal computer crime laws.
Re:There already are (Score:2)
It would be the same as me listening to music you broadcast over the radio (i.e. one of those cd-car radio thingys.) I could be driving by you, and tune into your "music" by accident... nothing illegal.
Re:Regulations? (Score:1)
Yeah, maybe that's overreacting. But what would you think of someone who went all over your neighborhood checking for unlocked doors, and then published a map of the results?
Sheesh!
Range (Score:2, Interesting)
Not really surprising. With no intervening obstacles (or even a horizon) even a weak signal in the 2 ghz range can have incredible range. It might be amusing to try this kind of thing with a big tethered balloon in an urban area.
Re:Range (Score:2)
Obsessive (Score:5, Insightful)
Okay, there are a lot of wireless access points out there. Okay, many of them aren't secured very well (if at all).
So what? Why is it worth so much effort to reillustrate this point over and over again? Sure, Wardriving was a neat concept the first time someone pointed it out, but this is just more of the same thing. What's next? Wartraining? "Look, we got on these wireless LANs while riding the El in Chicago! Why the hell do we have to obsess on this over and over again? This has been overdone to the point where I'm sure we'll see a UserFriendly strip about it!
Okay, rant over. Sorry.
Re:Obsessive (Score:4, Funny)
Re:Obsessive (Score:2)
Re:Obsessive (Score:1, Funny)
Why this news is good... (Score:2)
Re:Why this news is good... (Score:2)
Sure, the networks are insecure, but we are not talking about leaking office pr0n into the wild, it's about your credit card, and mine, being exposed all over the place.
Whatever, that's the credit card companies problem, not mine.
Re:Why this news is good... (Score:2)
It'll be your problem when you find all of your Credit Cards are maxed with charges you didn't make and you have to convince the issuer you didn't make the charges.
Nonsense, I don't have to convince the issuer of anything. I simply call them and tell them "I didn't make the charge".
Trust me this is not fun to clear up and can play hell with your credit report until fixed.
No, I don't trust you. If this happened to you and it hurt your credit report, you didn't handle it properly.
Re:Obsessive (Score:2)
It's the high-tech equivalent of rubbernecking to see the accident on the oncoming lanes of the highway.
You sound like my wife. ;-) (Score:5, Funny)
Wife: God, some people have way too much time.
Me: yea pretty wild huh.
Wife: Why are you grinning like that.
Me: huh? I'm not grinning.
Wife: You aren't thinking of going out to do this are you?
Me: Can't. I don't have wireless connectivity.
Wife: You've got DSL.
Me: --Edited speech about differences between dialup, dsl, wireless, 801b.11 blah blah blah.--
Wife: So you're telling me that you want to buy a laptop and walk around town with it?
Me: I didn't say that. We don't have the money anyway.
Wife: You'd do it though, wouldn't you?
Me: I dunno.
Wife: You would do it! Why the hell would you want to walk around and pry into other people computer networks.
Me: Dunno. Curiosity?
Wife: What? Curiosity. I might be curious to know why the neighbors are moaning so loud every night after letterman, but you don't see me over there with my x-10 camera laptop!
From there the discussion went downhill....
(ok moderators: Off topic, Funny, REAL LIFE)
Re:You sound like my wife. ;-) (Score:2)
Say the international compter conspiracy ("The Beast") targets you and you, and suddenly you are being chased by the secret police and you need to hack into various agencies to clear your name or expose the truth to the public!!
Maybe your wife is right, but I bet you if she heard a juicy conversation that got crossed over the neighbors baby monitor to yours, she would listen.
Malicious computing via _your_ cable modem (Score:3, Insightful)
Well, if I had a new klez worm varient to unleash, what better way to introduce it to the world than jumping on some poor sap's low security WAN?
Crack attempts, spam, kiddie porn, whatever. Any internet activity that people avoid for fear of being traced down can be easily, safely pulled off by leeching off of some poor sap's WAN.
I'm glad to see geeks making a fuss about a glaring security hole like this. The more fuss, the more press, the more dummies with LinkSys wireless routers start securing their connections.
Re:Obsessive (Score:3, Interesting)
Wartraining? What a great idea! If anyone does this, I'd love to know where I can check e-mail along the METRA Northwest Line. I imagine the metal train cars might make the connection difficult.
Re:Obsessive (Score:2)
FWIW, 'war' is 'Wireless Access Reconnisance'.
Re:Obsessive (Score:2)
(my) motivation : have fun !
hypocrisy rears its head... (Score:1, Troll)
Re:hypocrisy rears its head... (Score:2)
Who said anything about accessing these networks? He just scanned for them. If I walked around looking at phone boxes on the sides of buildings, I wouldnt' be guilty of making calls on them. I cant imagine at 2500ft. that he would be in range of one station long enough to even load Slashdot.
I mostly find this interesting just because it is. Ham radio fans still have contests to see who can bounce their signal off the moon, and who can contact the furthest stations. There are a lot of dorks out there, and we need something to entertain us.
Re:hypocrisy rears its head... (Score:1)
Ahem... I believe the accepted term is geeks - not dorks...
Re:rears it's head, but doesn't read the article (Score:2)
Re:hypocrisy rears its head... (Score:2)
Re:hypocrisy rears its head... (Score:1)
a) Science - how many connections can we see warflying?
b) Curiousity - can we see these connections form the air
c) Good Hacking - Alerting people that there are hundereds of unprotected or poorly protected nodes which may belong to businesses or military instillations, nevermind individuals.
It's sad to see how fast some people jump to conclusions and think that just because people have the power to exploit security flaws that they will.
Chalking... (Score:1)
Very interesting statistics, though. With all the SSID's left at the default name it makes you wonder if any of these AP's have been secured.
Re:Chalking... (Score:2)
Re:Chalking... (Score:2)
Re:Chalking... (Score:2)
Garage door war driving... (Score:5, Interesting)
Armed with this information, we took a few common brands of garage door opener (Genie, MultiCode, Sears, etc.) and set them to these combinations. We then hopped on our bikes and started riding around the neighborhood clicking the buttons. You wouldn't believe how many garage doors opened.
I sort of drew a parallel between unsecured WAPs and these unsecured garage doors. It was remarkably easy to do. Most people have no clue how to change the dip switches on their garage doors, just like most people have no idea how to change the default SSID, disable SSID broadcasts, and enable encryption.
Because of what I learned about the security (or lack thereof) of the typical garage door opener, I now have a much more secure Linear DX Code receiver controlling my garage, just in case some kids get the same idea I once had.
Re:Garage door war driving... (Score:2)
To be honest though I have no clue about keyless entries except that some use radio signals and some are infrared. Then again, I don't have one so I really don't have to worry. I'm sure someone in the Slashdot audience knows more about this and can provide a little information.
Re:Garage door war driving... (Score:1)
Re:Garage door war driving... (Score:1)
spooky
Re:Garage door war driving... (Score:2)
Re:Garage door war driving... (Score:1)
Also, I'm sorry you have such a poor family relationship that you frown on those that live at home. Hope you never need the support of your family.
Re:Garage door war driving... (Score:3, Interesting)
Re:Garage door war driving... (Score:1)
This way, the system is 'safe' from being hacked into, but the legit owner, who has a real key as well, can still easily get into the vehicle, they might have to set their groceries down first is all.....
Re:Garage door war driving... (Score:2)
In 1986, I went out to my gray Ford Escort in a school parking lot, unlocked the trunk and opened it. Funny thing was, there was a light mounted in the trunk that wasn't there before. Upon further examination, I realized that this wasn't MY gray Ford Escort, I parked a few aisles over...
I'm hoping that key technology has advanced since then
A better way to open garage doors (Score:1)
When I was a kid we had a better way... we removed the dip switch in the transmitter, and replaced it with a binary counter (available at Radio Shack). Then we would drive the counter with an oscillator, and like magic it could run through all the combinations in a few seconds.
Ah, fun with garage door openers. (Score:2)
Our neighbor, seeing ours and talking to my dad about it, decided to go out and buy/install one.
As to my dad: To his credit, he modified the resistors. (No DIPs, you had to clip resistors here) But he only clipped one.
Neighbor did the same thing when he installed his - He clipped just one.
Well, we hit that 1 in 7 chance of picking the same resistor. All of a sudden, our neighbor's garage door opened on him. So he walked to the garage, and hit his button.
Ours went up, his closed. My dad walks out. Eventually, they're both standing there and figure out what happened.
Both of em' clipped a second resistor and made sure not to clip the same one this time.
Realtor 802.11b? (Score:1)
There was basically no furniture in the house, so I assumed the occupants had just left it on while they moved out, but your post makes me wonder:
Is there some secret society of Realtors who turn off WEP encryption on 802.11 boxes in unoccupied houses for sale, just like they do with garage door openers, so the realtors can all use their laptops when they are at the house?
Re:Gone now but . . . WarCarunlocking (Score:1)
As I understand it one of the first generation of car alarms could be adjusted bu turning a small dial (after removing the cover). Apparently walking down the road with your finger on the button and turning the dial with a small screwdriver was quite efficient
--
God loves you - whether you like it or not
Re:Garage door war driving... (Score:2)
I think they're too fat and clumsy to ride bicycles too.
And if they do want to, their overprotective parents will make them wear 3 helmets, knee pads, wrist protectors, and 2 gallons of sunscreen. It's just not worth it anymore.
No really sir, we're just sniffing for APs... (Score:2)
Re:No really sir, we're just sniffing for APs... (Score:2)
As opportune as it may seem, in a situation like that I wouldn't recommend cranking up the rock music and flipping him the bird.
Re:No really sir, we're just sniffing for APs... (Score:2, Informative)
This just in... (Score:3, Funny)
"If you see strange symbols floating in the sky above your corporate office, this might mean your wireless networks have been targeted by hackers or terrorists. Be sure to secure you wireless networks and contact the FBI immediately."
Re:This just in... (Score:3, Funny)
Especially if the symbol is a bat [batman.com].
Engine quits... (Score:5, Insightful)
At 1500' over a heavily populated area the pilot could still be in trouble with the FAA. It is technically legal, but not necessarily safe or prudent. Simply put, there is not a whole lot of options for landing at 1500', and even less over a densely populated area.
I have seen a great many tech folks at the airport who are smoking holes waiting for a place to touch down. If you consistantly treat an aicraft as a car with the z-axis, it will eventually catch up to you.
My $0.02
Re:Engine quits... (Score:2)
This I know, cause I live near one corner of it, and all the lowflying craft including ambulance copters come around my area. I can see a steady stream of planes coming in at night.
I remember flying around downtown with a buddy in small plane, and we had to fly between the sky scrapers, cause the space above them was controlled. Really cool to do, but I beleive they have closed that airspace further after 9/11.
Re:Engine quits... (Score:2)
Here in Canada, you have to stay at least 1000 feet above any obstacle less than 2000 feet horizontally from you (except while taking off or landing). This means that for all intents and purposes, you need to stay 1500 feet AGL (because of all the 50-story buildings around) when you're flying over a city.
The laws in the USA are similar.
Re:Engine quits... (Score:2)
Also, though you have to fly low if you dont want to get (or cant get) a clearance into the class B airspace, you still have to maintain at least 1000 ft in any direction from buildings people (being a densly populated area), so the legality of your friends flying may be questionable.
And i wouldnt be surprised if your airspace is a bit more restriced now, your mayor likes to beg the FAA to setup TFR's around all his city's buildings.
Re:Engine quits... (Score:2)
Densely populated area? Not San Diego. San Diego isn't like those big Eastern cities. It's a large city, but it's really spread out. There are relatively few tall buildings except in the downtown area, due to a three-story limit on (most) new buildings that was in effect for a while (I don't recall all of the details). Also, there are lots of big open spaces, such as canyons, parks, golf courses, and of course, the ocean to the West. It's also surrounded by lots of smaller towns, which is where the pilot spent most of their time flying (according to the map on their webpage).
Landing in San Diego might still be hard, but it's probably not as bad as you think.
Re:Engine quits... (Score:2)
Anyway, I really hope that warflyers bring along someone to do the electronic stuff. A plane requires a hell of a lot more attention to fly than a car does to drive, and pilots should be only flying.
Re:Engine quits... (Score:2)
In general, flying that low over a big city, just for the fun of it (ie, when they could have flown higher but chose not to), is stupid stupid stupid!
Here's hoping that you will never be licensed to fly an aircraft.
What's next? (Score:1)
Re:What's next? (Score:1)
"Wow! Fred just did an awesome 540, and discovered 3 unencrytped WAPs at the same time!"
Sequels already in the works. (Score:1)
Re:Sequels already in the works. (Score:2)
I'm getting tired of the dozens of posts that obviously haven't read the article. People who do that simply show that they're missing the point of Slashdot alltogether.
Re:Sequels already in the works. (Score:1)
I'm tired of the dozens of posts telling others to read the articles. They show that the poster doesn't understand how
Re:Sequels already in the works. (Score:1)
Cause if you did you'd know why you look like a shmuk for saying what you just did.
Uhg,To all yas. (Score:1)
Re:Uhg,To all yas. (Score:2)
According to that map... (Score:3, Interesting)
Inexpensive airborne link is desparately needed (Score:3, Interesting)
Commercial in flight internet links like ground-based AirCell [aircell.com] and satellite phones, cost more than $3000 for equipment with conenct rates of $2-5 per minute.
The $3,000 PDA-based AnyWhere WX [controlvision.com] shows the potential. The promised inflight access to NEXRAD will fill the bill, but most avionics makers are planning systems that are still in tens of thousands of dollars range, when a laptop or PDA will do the job.
Your average weekend pilot isn't going to sign up for a $200 month subcription for something only used for a few hours on nice weekends. (Flamers should douse the fire. Most pilots are mere mortals that made flying a priority, just like those who sink money in hot cars or the hottest gaming machines. Most aren't really rich.
It would be a godsend if 802.11b connectivity could be made to work reliably in flight. Does anybody have any ideas on which wireless technology might fill the need?
Re:Inexpensive airborne link is desparately needed (Score:2, Informative)
Sec. 91.21
Portable electronic devices.
(a) Except as provided in paragraph (b) of this section, no person may operate, nor may any operator or pilot in command of an aircraft allow the operation of, any portable electronic device on any of the following U.S.-registered civil aircraft:
(1) Aircraft operated by a holder of an air carrier operating certificate or an operating certificate; or
(2) Any other aircraft while it is operated under IFR.
(b) Paragraph (a) of this section does not apply to--
(1) Portable voice recorders;
(2) Hearing aids;
(3) Heart pacemakers;
(4) Electric shavers; or
(5) Any other portable electronic device that the operator of the aircraft has determined will not cause interference with the navigation or communication system of the aircraft on which it is to be used.
(c) In the case of an aircraft operated by a holder of an air carrier operating certificate or an operating certificate, the determination required by paragraph (b)(5) of this section shall be made by that operator of the aircraft on which the particular device is to be used. In the case of other
aircraft, the determination may be made by the pilot in command or other operator of the aircraft.
So, if you aren't flying IFR, its automatically allowed. If you are flying IFR, then see 91.21(b)(5) which says that the operator may make a determination of whether or not intereference will exist... And 91.21(c) says that the opeartor in your case is the pilot in command.
The cell phone rule only applies to Commercial Aircraft. Unless as the pilot in command you want to dissallow yourself from using a cell phone. So... Use a cell phone it is the cheapest way.
Re:Inexpensive airborne link is desparately needed (Score:2)
The problem, you know, is that in flight use of a cell phone is violation of FCC tariff. The word is that the FCC has never gone after a violator.
I forgot to mention the Cheap Bastard [cheapbastardsoftware.net] solution which uses a Palm and OmniSky. The software is free. Here's a review. [fergworld.com] OmniSky is $19 amonth. Is OmniSky still around?
BZZT - Wrong! Try again. (Score:2)
You STILL can't use your cellular phone, because the FCC does not allow cell phones to be used more than a certain (very low) altitude AGL, because the phone suddenly gets LOS to multiple towers, which will cause interference with those towers. (At best case, each tower will see your signal and consider you a user and work around you - Still, that means that instead of using up 1 users' worth of capacity on one tower (the way the system capacities are designed), you will use up 1 users' worth of capacity on numerous towers.
Note in the article how much improvement there was in range when he was 1500 feet up - This is EXACTLY why cell phones are illegal in the air. Not because they interfere with flight systems, but because they interfere with cell phones on the ground.
Re:Inexpensive airborne link is desparately needed (Score:1)
Terminology (Score:4, Informative)
Incidentally, the "war-" prefix either comes from "wardialing" or is an acronym for "Wireless Access Reconaissance," depending on how politically-correct you feel like being.
Re:Terminology (Score:2, Informative)
If you're going to point out that it's based on Wardialing, you might also mention that Wardiling itself comes from the movie WarGames [imdb.com], where the a young Mr. Broderick finds an unsecured telephone line to a military computer by setting his computer to dial a sequence of numbers.
=Brian
Re:Terminology (Score:2)
This idea in the movie was probably inspired by the BBS's in those days. Before the internet, you could use the phone to dial up to
Hmm.. I need some feedback here: How obvious is it that I'm sucking up for Karma?
Re:Terminology (Score:2)
"Wardialing" was originally known as "tone scanning" or "demon dialing" until WarGames came out. In fact, you'll notice that the disk that David (Matthew Broderick) pulls out to start the process of looking for game company ProtoVision's computers is labeled "Modem Tone Scan." But this is getting back into prehistory now...
Re:Terminology (Score:2)
Every year we drive out to the midwest and chase tornados ("storm chasing"). We use a laptop and GPS to get weather over the internet (often over slow, unreliable voice over analog cell phone links).
This year I put in netstumbler while we were driving around. Logged lots of AP's. Unfortunately, the GPS was tied to Delorme Maps, so netstumbler didn't get to use it (insert Linux plug vs Windows here... then find me good maps on Linux
We did hit one AP on I-40 about the New Mexico/Texas line - out in the middle of friggin nowhere!
Anyway, I claim that WE were warstorming!
Re:Terminology (Score:2)
Re:Terminology (Score:2)
warh4x0r1ng (Score:2)
Great work - but overstated security problems (Score:3, Insightful)
My issue - is that the security problems are IMHO vastly overstated. I've worked at two companies with WAPs - and those were outside of our corporate/internal firewall.
If someone wanted to work over the WAPs, they would use them like a home DSL line, and simply VPN in. No security problem there.
As for private home users, and even some small businesses (as both my parents run offices with non-secured WAPs) - the security risk is only as great as the value of their data, divided by the cost to get to it. If any of you want to (i) find, and (ii) hack my father's office's legacy Dos-based auto/office management software, than by all means - we've been in need of a windows compatable update!!! (hehe).
But seriously - what use would you have for your neighbor's email or home document/resume, etc... and would you really go thru the trouble of hacking a next-door Pentium running WinXP? I think it's far more likely to be the sploits' of a script/trojan than an individual.
All good companies will have seperate VLANs (or equivalent) running different things - i.e. the WAP should be firewall'd like the rest of the net etc...
Not to mention - anyone can be hacked over the internet, even with firewalls, but to use WAPs, you have to be within the range - typically 1/4km. Do you have the time/car/laptop/battery life to drive to your 'enemy' or soccer-mom's house and hack the encryptions? (yes I can spell - watch some more southpark).
BR
nuff said.
Re:Great work - but overstated security problems (Score:1)
Re:Great work - but overstated security problems (Score:3, Insightful)
I think there's two problems with unsecured wireless networks. The first is access to data. In business settings often the WAP isn't firewalled off and secured, so it provides an access point into the business's LAN that doesn't require physical access to their wiring. The risks there are obvious. In the home environment lack of a firewall's a given, but there's more risk than would be apparent. If someone searched your computer and you used Quicken, how many account numbers could they find? This is frightening when you consider that banks, when processing electronic checks, don't actually validate much. If an electronic check comes in with a valid account number, they pay it and leave it up to the account holder to screech if it's not kosher.
The second is access to bandwidth. Even if someone can't or doesn't get access to your computers, they can probably use your network connection to reach the rest of the Internet. What they do will then be traceable back to your network, with no obvious indication that the attached machine wasn't legitimate and one of yours. The result of that is that you could be held responsible for that P2P server hosting pirated content, or that huge chunk of child pornography that got downloaded to something attached to your network. You can try to prove it wasn't one of your machines, but that's going to be a tough job and isn't guaranteed to succeed.
That's pretty cool. (Score:1)
Legalities (Score:1)
Hey, that's me! (Score:2)
Warbuzzing? (Score:2)
That could be an alternative name to "warflying". I can see where "warstorming" comes from (think "barnstorming").
However, why are we using full-size planes for this? A serious model plane could do the job as well, if done right. Tightly strap in an IPaq and a small GPS, padded, with an external antenna on the Orinoco card. Add MiniStumbler, some gas, and go.
Even better, with some custom software on the IPaq, and assuming you stay in range of your AP, there may be a chance of real-time telemetry. Add a camera card and spy on your neighbours... no, now I'm just getting silly!
Re:Warflying "American" Style (Score:1)
Re:Warflying "American" Style (Score:1)
I can't help but feel I have been trolled....
Re:In the US (Score:1)
Re:In the US (Score:1)
In the US it is explicitly illegal to use the computer services of a system that you do not have permission to be in.
I'm not sure this is true, but I'll assume it is. You should undersand that he didn't do this, not even accidentally. He didn't use any computer system other than his own laptop. You'd know that if you RTFA.
Re:In the US (Score:1)
Re:In the US (Score:1)
Re:In the US (Score:2)
Re:In the US (Score:1)
Lots of inanimate objects are considered by many in the US to be evil moral agents. For instance: guns.
Re:In the US (Score:3, Insightful)
He also disclaimed his posting of the map, in that the locations marked are those of the plane as it detected the access points, not any indication of where the point itself exists. This is hardly an assist to others in breaking the law.