4 ms·

Hackhunter hunts down malicious WiFi

38 points by cookie_monsta 6y ago

tastroder 6y ago
It seems a bit odd to compare a 3D printed product with "jerry-rigged" devices. It looks nice but the form factor somewhat looks like what might just be an ESP32 + directional antenna, is the selling point the integration and behaviour profiles of known malicious APs here? Without details and "contact us" pricing I'm really not sure what to make of this. But I guess if the price is low enough it's nicer than putting one together yourself.
- deepstack 6y ago
  @tastroder you have to get most people are not tech. You have no idea how sale and marketing get impressed by some chart or graph sometimes. Everything seems like black magic to non techies now days.
  - deepstack 6y ago
    Yeah what bothers me is they are so impressed by a little graphics front end change, but most stuff done in the backend are not really taken noticed.
  - rasz 6y ago
    Why not sell rogue wifi dousing rods then?
- hsbauauvhabzb 6y ago
  I would call behavioural heuristics of WiFi ‘attacks’ dubious at best. Knowing the specific software the attacker is using has minimal/no value in actually fixing the issue either.
hsbauauvhabzb 6y ago
This smells of self-marked homework used as thinly veiled advertising to potential investors. If rogue access points are a legitimate concern, proper network controls (PNAC, mac whitelisting, etc) would be better options.
- joosters 6y ago
  How exactly are you meant to do that when you are dealing with devices like employees personal phones in an office, or antendees laptops at a conference?
  - Triv888 6y ago
    Having a secure and a non-secure network would probably be good in some instances.
    - hsbauauvhabzb 6y ago
      This. You either care about security, or you permit BYOD. They are mutually exclusive.
- GTP 6y ago
  I don't know about PNAC, but MAC whitelisting is easily circumvented by scanning for the devices connected to an AP and changing your MAC to one of those.
  - hsbauauvhabzb 6y ago
    Correct. The point is no COTS access point does this.
    - GTP 6y ago
      Sorry, I'm not sure to understand what you mean. Do you mean that no COTS access point does MAC whitelisting? I would say that they can do it, but it's not very useful
      - hsbauauvhabzb 6y ago
        No I’m saying not many COTS access points can spoof MAC addresses. Windows can act as a hot spot, but there’s group policies to solve that. I don’t think whitelisting is a solve-all, but it’s not easy to work around for unsophisticated actors.
rasz 6y ago
Reminds me of recon sentinel https://www.reconsentinel.com https://www.reconsentinel.com , destined to $10 amazon clearance near you in a year. >I purchased two of these when they were $7.99 on Amazon. https://hackaday.com/2020/11/16/teardown-recon-sentinel/ https://hackaday.com/2020/11/16/teardown-recon-sentinel/
- swirepe 6y ago
  >We may disclose your Personal Information in connection with law enforcement, fraud prevention or other legal action; as required by law or regulation; or if CDSreasonably believes it is necessary to protect CDS , its customers or the public. CDSmay be required to provide personal information in response to a lawful request from governmental authorities, including to meet national security or law enforcement requirements. It sounds like $7.99 + $900 lifetime subscription to have a snitch in your house.

38 points by cookie_monsta 6y ago

It seems a bit odd to compare a 3D printed product with "jerry-rigged" devices. It looks nice but the form factor somewhat looks like what might just be an ESP32 + directional antenna, is the selling point the integration and behaviour profiles of known malicious APs here? Without details and "contact us" pricing I'm really not sure what to make of this. But I guess if the price is low enough it's nicer than putting one together yourself.

deepstack 6y ago
@tastroder you have to get most people are not tech. You have no idea how sale and marketing get impressed by some chart or graph sometimes. Everything seems like black magic to non techies now days.
- deepstack 6y ago
  Yeah what bothers me is they are so impressed by a little graphics front end change, but most stuff done in the backend are not really taken noticed.
- rasz 6y ago
  Why not sell rogue wifi dousing rods then?
hsbauauvhabzb 6y ago
I would call behavioural heuristics of WiFi ‘attacks’ dubious at best. Knowing the specific software the attacker is using has minimal/no value in actually fixing the issue either.

hsbauauvhabzb 6y ago

This smells of self-marked homework used as thinly veiled advertising to potential investors. If rogue access points are a legitimate concern, proper network controls (PNAC, mac whitelisting, etc) would be better options.

joosters 6y ago
How exactly are you meant to do that when you are dealing with devices like employees personal phones in an office, or antendees laptops at a conference?
- Triv888 6y ago
  Having a secure and a non-secure network would probably be good in some instances.
  - hsbauauvhabzb 6y ago
    This. You either care about security, or you permit BYOD. They are mutually exclusive.
GTP 6y ago
I don't know about PNAC, but MAC whitelisting is easily circumvented by scanning for the devices connected to an AP and changing your MAC to one of those.
- hsbauauvhabzb 6y ago
  Correct. The point is no COTS access point does this.
  - GTP 6y ago
    Sorry, I'm not sure to understand what you mean. Do you mean that no COTS access point does MAC whitelisting? I would say that they can do it, but it's not very useful
    - hsbauauvhabzb 6y ago
      No I’m saying not many COTS access points can spoof MAC addresses. Windows can act as a hot spot, but there’s group policies to solve that. I don’t think whitelisting is a solve-all, but it’s not easy to work around for unsophisticated actors.

rasz 6y ago

Reminds me of recon sentinel https://www.reconsentinel.com https://www.reconsentinel.com , destined to $10 amazon clearance near you in a year. >I purchased two of these when they were $7.99 on Amazon. https://hackaday.com/2020/11/16/teardown-recon-sentinel/ https://hackaday.com/2020/11/16/teardown-recon-sentinel/

swirepe 6y ago
>We may disclose your Personal Information in connection with law enforcement, fraud prevention or other legal action; as required by law or regulation; or if CDSreasonably believes it is necessary to protect CDS , its customers or the public. CDSmay be required to provide personal information in response to a lawful request from governmental authorities, including to meet national security or law enforcement requirements. It sounds like $7.99 + $900 lifetime subscription to have a snitch in your house.