On Thu, 2002-07-25 at 10:19, Austad, Jay wrote:
> The U is using MAC addresses to verify that you can be on the network?
> That's silly.  Don't they have some better method of authentication?

I'd love to hear something that would work better with simple 802.11b
hardware and easily installed software on Win9x/NT/etc, MacOS 8/9/X, and
Linux/*BSD/Unix.  Really, I would.  I'm not trying to be an ass.

> Hrm...  couldn't you plug in and sniff for ARP requests to get some MAC
> addresses and use ifconfig to change yours to someone elses who is already
> registered on the network?  Then you could hop on the network without a
> registered card.  :)  Just a thought.  

You probably need to have a card that can sniff the aether without being
associated with an AP (some of the APs use RADIUS authentication on your
MAC address to see if you can associate).  I don't play with that stuff
enough to know if that's common or not.

-- 
 _  _  _  _ _  ___    _ _  _  ___ _ _  __   Why are there 5 syllables
/ \/ \(_)| ' // ._\  / - \(_)/ ./| ' /(__   in the word `monosyllabic'?
\_||_/|_||_|_\\___/  \_-_/|_|\__\|_|_\ __)  
[ Mike Hicks | http://umn.edu/~hick0088/ | mailto:hick0088 at tc.umn.edu ]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20020805/c985a3f9/attachment.pgp