<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Sadly security through obscurity is
still prevalent in government systems, and this is a backward way
of trying to enforce that.<br>
<br>
Here's a good primer on the 4.9ghz wireless spectrum and accessing
it.<br>
<br>
<a class="moz-txt-link-freetext" href="https://www.youtube.com/watch?v=pjsXzFRJfT8&spfreload=10">https://www.youtube.com/watch?v=pjsXzFRJfT8&spfreload=10</a><br>
<br>
Most 5ghz nics *can* access it, but are disallowed from doing so
by their regional encoding. Patches can bypass this as they show,
and you can then sniff safety networks. What you find is things
like wep, static keys, simple lack of security, SSID's like
"SCADA" popping up, all sorts of things.<br>
<br>
You can also just go on ebay and find old 4.9ghz kit.<br>
<br>
What to do in response? Threaten anyone that patches their kernel
driver to use a feature.<br>
<br>
Same with cell phones. Years ago I had a palm pre on sprint, and
sprint's crap service made the phone unusable. I wanted it on
verizon, so I found cdma workshop software, reprogrammed the radio
band, and got it to connect to verizon. They refused to provision
the phone, and began hinting that what I was doing was technically
illegal after harassing them to make it work for near a month. I
gave up, annoyed with both sprint and verizon.<br>
<br>
Then it made sense to me - what I was doing could also reprogram
the imei/meid on the device, pretending I'm someone else's radio,
or their phone all together. I could have just programmed the
meid off an old windoze phone, but that would have been blatantly
illegal, but was almost trivial once doing the rest that I did.
Much of their security presumes you *cannot* change that number,
but you can...<br>
<br>
This is why cdma-based providers (sprint/verizon/cricket) lock
bootloaders explicitly, as anything else compromises the
possibility to tinker with the radio, and clone someone's phone.
Only the government can do that.<br>
<br>
Software-defined radios tap into all sorts of possibility sniffing
into insecure protocol traffic previously unexplored due to fcc
vendor limitations in making versatile tunable radios. They're
afraid.<br>
<br>
-mb<br>
<br>
<br>
On 08/30/2015 02:19 PM, Eric Oyen wrote:<br>
</div>
<blockquote
cite="mid:74A8B75B-8A73-4167-815D-826C38ADBFE2@icloud.com"
type="cite"><base href="data:"><base href="data:">
<div style="font-family: 'Apple Symbols'; font-size: 12px; color:
black; text-align: left; ">gee, what did I say about the
government wanting to lock us down? here is the first shot
across the bow.</div>
<div style="font-family: 'Apple Symbols'; font-size: 12px; color:
black; text-align: left; "><br>
</div>
<div style="font-family: 'Apple Symbols'; font-size: 12px; color:
black; text-align: left; ">-eric</div>
<div style="font-family: 'Apple Symbols'; font-size: 12px; color:
black; text-align: left; "><br>
</div>
<a moz-do-not-send="true"
href="http://www.southgatearc.org/news/2015/august/fcc_proposes_ban_on_sdr_radios_and_more.htm#.VeNyokuwgy6">http://www.southgatearc.org/news/2015/august/fcc_proposes_ban_on_sdr_radios_and_more.htm#.VeNyokuwgy6</a>
<div style="font-family: 'Apple Symbols'; font-size: 12px; color:
black; text-align: left; "><br class="webkit-block-placeholder">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">---------------------------------------------------
PLUG-discuss mailing list - <a class="moz-txt-link-abbreviated" href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a>
To subscribe, unsubscribe, or to change your mail settings:
<a class="moz-txt-link-freetext" href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a></pre>
</blockquote>
<br>
</body>
</html>