Industry


Ads by TechWords

See your link here


Martin McKeay's picture
Martin McKeay

Security Matters

Black Hat sounds like fun

I want to go to the Black Hat briefings next  year, but I have to agree with fellow Computerworld writer, C.J. Kelly, my laptop's staying behind .  It looks like wireless just isn't safe there, no matter what hardware platform you're running it on.  I have to wonder if I should take my corporate cell phone, which may not be safe there either.  It is a little odd to be talking about having to divest yourself of technology to go to one of the high tech conventions.

The issues with the Intel Centrino wireless chipset appears to be pretty widely spread, but it's unclear how many systems might be affected by the Mac wireless vulnerability .  The exact nature of the vulnerability hasn't been released yet, the researchers are apparently practicing responsible disclosure.  They're working with the vendor to come up with a patch for the vulnerability.  There's a lot more questions than answers so far on this vulnerability; we don't even know if the vulnerability is in the wireless card, the driver, or the OS yet. 

If I were responsible for a wireless network, this is the sort of news I'd hate to hear. It's kinda scary when the bad guys are bypassing your applications all together and going straight for the drivers.  Is it time to re-evaluate your company's need for wireless?   I know I still won't be taking my laptop to Black Hat next year, even if we do get all the current wireless vulnerabilities patched.

What People Are Saying

I don't disagree that a

I don't disagree that a black hat can make more money than a white hat in the short term, but if stability and investment are your goals, white-hat is for you. Personally, I'm excited about having sites that will create wealth in the long term, and excited about the prohibitive of one of those properties becoming something truly amazing - an enormous resource that spawns an entire company made up of dozens of
employees and generating millions in revenues each year. With black-hat, that opportunity never exists.

Security with wireless is

Security with wireless is always a problem. And I am afraid it always will be at computer issure conventions.

I took my dual boot

I took my dual boot Windows/Linux laptop. The Aruba networks at Black Hat and Def Con were actually very good, once some stability problems at the the onset were taken care of.

The Def Con wrap up indicated that there were more issues on the [Riviera] hotel network than on the Def Con wireless LAN.

Finally, the Wall of Sheep is at Def Con. If you're hacked at Black Hat, it'll be silent and only between you and your attacker....

Isn't that the message,

Isn't that the message, though? You are not secure *anywhere* right? "Security through Obscurity" is un-secure. Walking around with un-secure wi-fi, thinking you are ok because you're not at hacker convention, is un-secure.

I left my laptop back in my

I left my laptop back in my hotel room (not Caesars) and kept my blackberry with me at the show. It was fine. Martin, you should be here next year, you would love it

I would certainly consider

I would certainly consider bringing along a spare laptop. It would be clean when I departed for the conference, and after returning home I would have it examined carefully for parasites and then reloaded from scratch. The results could be interesting.