|
|||||
|
|||||
|
|||||||
 |
Windows Vista... so far I haven't been too impressed. I recently purchased a Dell M1210 Laptop with it preloaded. Right off the bat it had bugs, such as drivers that were factory shipped crashed the moment I powered it on. Also I noticed it phones home to Microsoft - a lot. While I was looking at the hits on my wireless honeypot, there was one url in particular I started to notice showing up with more regularity: http://www.msftncsi.com/ncsi.txt Doing a quick search on Google came up with this knowledge base article: Internet Connectivity in Vista From that article, it seems that by default Vista tries to either ask for that webpage or result by dns that domain name. It is interesting though how this effects my wireless honeypot. Before when a Vista box tried to get that webpage it would show up in my reverse proxy hits but then nothing else would show, which probably means Vista then flagged my wireless point as not being connected to the Internet (which is sorta true, hehe). To get around this, I added a url rewrite for what Vista requests and have that ncsi.txt page loaded off my website directly. So then Vista will get the page it desires but still not get directly to the Internet. From there, the illusion that the user wanting to leech off my access point is presented from the start and they can discover warring kittens, wikipedia, the info that using unsecure wireless points isn't the best idea. One of the banes of blogging I found is spam. About a year or so ago I had a database driven blog on the front page of this website. Unfortunately, bots scoured my blog and added spam to it. Then later on the blog software I chose had a security vulnerability, so I took it out completely. Today I was looking at the site, and wanted to get back to a dynamic system again. This would make it easier to update. Instead of using someone else's software, I wrote my own in php. Also, I added access controls so the only way to access the script is in my home network or through my VPN. It seems to be working well so far. It isn't exactly full featured, but works ok and since I wrote the code, it should be easy enough to add enhancements. Modified the wireless redirect page that folks trying to use my wireless get. Now They not only get the Kittens of Doom, but they can get some useful info that Microsoft provided on using hotspots and go to Wikipedia. I may as well point them in the direction of some good info while I'm at it. Why the interest tonight in changing that page? I noticed a large amount of hits by the firewall. From my guess, it is someone trying to use Kazza or Gnutella. There is no way I'm that stupid to let someone actually use the wireless for something like that, espeically since then the RIAA or MPAA would send the legal letters to me. The only stuff I'm allowing through the wireless points are the VPN and the above websites I told the proxy server to let through. After about a week of leaving the wireless open, I had about ten hits that looked like Windows XP machines trying to get to Microsoft's Windows Update, and only 1 person yesterday around 7 am trying to get to Myspace.com, Google, and UNL's website. I think the low amount of connections may be because I'm halfway under the ground. So today I went to Best Buy and grabbed a new wireless router. This one I made sure it had an SMA connection for the external antenna. With that connector, I was able to put my wardriving external omnidirectional antenna. The old wireless point was probably only about 1-2 dbi - really poor. The external antenna I now have hooked up is about 6 dbi. I can usually pick up other folk's access points with that from about a block away when wardriving. After about a week of leaving the wireless open, I had about ten hits that looked like Windows XP machines trying to get to Microsoft's Windows Update, and only 1 person yesterday around 7 am trying to get to Myspace.com, Google, and UNL's website. I think the low amount of connections may be because I'm halfway under the ground. So today I went to Best Buy and grabbed a new wireless router. This one I made sure it had an SMA connection for the external antenna. With that connector, I was able to put my wardriving external omnidirectional antenna. The old wireless point was probably only about 1-2 dbi - really poor. The external antenna I now have hooked up is about 6 dbi. I can usually pick up other folk's access points with that from about a block away when wardriving. |
dsc02093 |
|
|