Matt35 Posted October 17, 2008 Share Posted October 17, 2008 My girlfriend mentioned, while we were at dinner last night, that her laptop started showing all of the networks that she'd ever been on, which immediately made me think that one of her neighbors could perhaps be a fan of Hak5, and could be using Jasager. How can she defend against that, and be able to use her wireless router again without having the neighbor's show her SSID and have it sign in to it instead? Thanks for the help! --Matt mhoganphoto.com Quote Link to comment Share on other sites More sharing options...
Sparda Posted October 17, 2008 Share Posted October 17, 2008 For windows disable wireless zero configuration. Is OS X vulnerable? The wireless manager that comes with Ubuntu or Kubuntu is not vulnerable. Quote Link to comment Share on other sites More sharing options...
Matt35 Posted October 17, 2008 Author Share Posted October 17, 2008 For windows disable wireless zero configuration. Is OS X vulnerable? The wireless manager that comes with Ubuntu or Kubuntu is not vulnerable. Thanks for a quick reply... What will that change, by doing so? Will it allow her to view the WLAN's, and find hers, and still connect ok, but not be attacked by Jasager? Quote Link to comment Share on other sites More sharing options...
Sparda Posted October 17, 2008 Share Posted October 17, 2008 Every thing work fine except windows will no longer be super promiscuous (it's is a very slutty OS OTB). Quote Link to comment Share on other sites More sharing options...
Matt35 Posted October 17, 2008 Author Share Posted October 17, 2008 Thanks so much for the help! One last question... Does the Jasager copy her SSID from her house too, and display it, thus overriding her SSID signal, or does it just display two identical home SSIDs? Quote Link to comment Share on other sites More sharing options...
Conor_M Posted October 17, 2008 Share Posted October 17, 2008 As far as I know, Correct me if I am wrong, but Jasager does not broadcast any of the SSIDs unless you are looking for it (ie it will not create a decoy SSID that you can see via browsing for WLANs. (Such as FakeAP) Quote Link to comment Share on other sites More sharing options...
Matt35 Posted October 17, 2008 Author Share Posted October 17, 2008 So even if the laptop was looking only for it's home SSID to auto-login to, Jasager wouldn't clone that? Or, by disabling zero config, would she need to manually search for local SSIDs, and login to hers? Quote Link to comment Share on other sites More sharing options...
Conor_M Posted October 17, 2008 Share Posted October 17, 2008 Yes, Jasager would clone it, and it would have her connect to it automatically, but I don't think Jasager would broadcast her home network as a network to anyone else trying to find a WLAN (Ex: If she was a victim of Jasager and her home network has an ssid of 'linksys', then I don't believe that anyone that would be looking for a network 'manually' would see linksys as a legit AP. Right, by disabling zero config, she'd need to manually find the SSID and connect. Quote Link to comment Share on other sites More sharing options...
Matt35 Posted October 17, 2008 Author Share Posted October 17, 2008 Now she's getting the whole enable windows zero config if you disabled it, unless another program managing your connections message... Weird. Quote Link to comment Share on other sites More sharing options...
dimitar Posted October 17, 2008 Share Posted October 17, 2008 Jasager will definitely not store the SSIDs of the access points that your girlfriend has ever connected to, much less will it advertise those as available. All it does is listens to see if anyone is probing for a particular access point and then just impersonates it. There is something else as well, even if her neighbor had Jasager, he would have to compete with her own router. In other words his signal strength and response time will have to be better than her own access point. And this is highly unlikely. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.