Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #69610 > unrolled thread

Apple Time Capsule -- Unknown User

Started byTaliesinSoft <taliesinsoft@me.com>
First post2015-02-08 21:47 -0600
Last post2015-02-09 20:58 +0000
Articles 20 on this page of 51 — 10 participants

Back to article view | Back to comp.sys.mac.system


Contents

  Apple Time Capsule -- Unknown User TaliesinSoft <taliesinsoft@me.com> - 2015-02-08 21:47 -0600
    Re: Apple Time Capsule -- Unknown User Don Bruder <dakidd@sonic.net> - 2015-02-08 20:37 -0800
    Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-08 21:37 -0700
    Re: Apple Time Capsule -- Unknown User Tom Stiller <clusterfux.upmon@gmail.com> - 2015-02-09 14:05 +0000
      Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 09:19 -0500
      Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-09 13:01 -0500
      Re: Apple Time Capsule -- Unknown User Paul Sture <nospam@sture.ch> - 2015-02-10 10:55 +0100
        Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 14:00 +0000
          Re: Apple Time Capsule -- Unknown User Paul Sture <nospam@sture.ch> - 2015-02-10 20:08 +0100
        Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-10 14:42 -0500
          Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 20:03 +0000
            Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-10 16:05 -0500
              Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 21:17 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-10 19:51 -0500
        Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-10 20:54 +0000
          Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 21:18 +0000
            Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-10 22:37 +0000
              Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 00:04 +0000
                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-11 12:37 +0000
                  Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:07 +0000
                    Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:16 +0000
                    Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-11 08:32 -0700
                      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:53 +0000
                  Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-11 08:24 -0700
                    Re: Apple Time Capsule -- Unknown User Huge <Huge@nowhere.much.invalid> - 2015-02-11 15:27 +0000
                      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:53 +0000
                        Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-11 12:22 -0500
                          Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 18:00 +0000
                    Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 01:51 +0000
                      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 14:11 +0000
                        Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 14:52 +0000
                          Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 15:11 +0000
                            Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 15:38 +0000
                              Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 16:03 +0000
                                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-14 11:00 -0500
                                  Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-14 19:44 +0000
                            Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-14 10:58 -0500
                              Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-14 16:47 +0000
                                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-15 01:10 +0000
                                  Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 01:39 +0000
                                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 09:24 -0500
                                  Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 14:56 +0000
                                    Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 11:13 -0500
                                      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 16:53 +0000
                                        Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 18:01 -0500
                                          Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-16 01:38 +0000
                                            Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-16 12:04 -0500
    Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 09:21 -0500
      Re: Apple Time Capsule -- Unknown User TaliesinSoft <taliesinsoft@me.com> - 2015-02-09 14:05 -0600
        Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 15:32 -0500
        Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-09 20:58 +0000

Page 1 of 3  [1] 2 3  Next page →


#69610 — Apple Time Capsule -- Unknown User

FromTaliesinSoft <taliesinsoft@me.com>
Date2015-02-08 21:47 -0600
SubjectApple Time Capsule -- Unknown User
Message-ID<cjqoubF4fg7U1@mid.individual.net>
I have an Apple Time Capsule managed from my iMac. The Time Capsule is 
the prior model. At this time it is being shared by three users, 
myself, and two others. Our primary use of the capsule is to access the 
internet. Access to the Time Capsule requires the password. Today I 
noted that there is a fourth user, unkknown, who is accessing the Time 
Capsule. I have no idea who this user is but I'm assuming that it must 
be someone close enough to connect wirelessly.

My question now is how do I disconnect this user. I assume that I will 
have to change the password. Will changing the password immediately 
disconnect this unknown user or will that user have to sign off and 
then attempt to reconnect.

Many thanks for replies!

-- 
James Leo Ryan - Austin, Texas

[toc] | [next] | [standalone]


#69611

FromDon Bruder <dakidd@sonic.net>
Date2015-02-08 20:37 -0800
Message-ID<mb9der$33j$2@dont-email.me>
In reply to#69610
In article <cjqoubF4fg7U1@mid.individual.net>,
 TaliesinSoft <taliesinsoft@me.com> wrote:

> I have an Apple Time Capsule managed from my iMac. The Time Capsule is 
> the prior model. At this time it is being shared by three users, 
> myself, and two others. Our primary use of the capsule is to access the 
> internet. Access to the Time Capsule requires the password. Today I 
> noted that there is a fourth user, unkknown, who is accessing the Time 
> Capsule. I have no idea who this user is but I'm assuming that it must 
> be someone close enough to connect wirelessly.
> 
> My question now is how do I disconnect this user. I assume that I will 
> have to change the password. Will changing the password immediately 
> disconnect this unknown user or will that user have to sign off and 
> then attempt to reconnect.
> 
> Many thanks for replies!


From the Mac it's wired to, I'd kill the wireless on the TC to blow him 
off his current connection, change the password, then restart the 
capsule's wireless. Don't forget to update the other users with the new 
PW... :)

-- 
Security provided by Mssrs Smith and/or Wesson. Brought to you by the letter Q

[toc] | [prev] | [next] | [standalone]


#69612

FromMichelle Steiner <michelle@michelle.org>
Date2015-02-08 21:37 -0700
Message-ID<080220152137586688%michelle@michelle.org>
In reply to#69610
In article <cjqoubF4fg7U1@mid.individual.net>, TaliesinSoft
<taliesinsoft@me.com> wrote:

> My question now is how do I disconnect this user. I assume that I will 
> have to change the password. Will changing the password immediately 
> disconnect this unknown user or will that user have to sign off and 
> then attempt to reconnect.

Before doing anything else, make sure that the unknown user is not one
of your peripherals or mobile devices.

Change the password, and then disconnect the time machine from its
power. (Make sure that no one is accessing the built-in hard disk at
the time, though.)

[toc] | [prev] | [next] | [standalone]


#69618

FromTom Stiller <clusterfux.upmon@gmail.com>
Date2015-02-09 14:05 +0000
Message-ID<cjrt5jFd7oeU1@mid.individual.net>
In reply to#69610
On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
> the prior model. At this time it is being shared by three users,
> myself, and two others. Our primary use of the capsule is to access the
> internet. Access to the Time Capsule requires the password. Today I
> noted that there is a fourth user, unkknown, who is accessing the Time
> Capsule. I have no idea who this user is but I'm assuming that it must
> be someone close enough to connect wirelessly.
>
> My question now is how do I disconnect this user. I assume that I will
> have to change the password. Will changing the password immediately
> disconnect this unknown user or will that user have to sign off and
> then attempt to reconnect.
>
> Many thanks for replies!
>
Although not quite as effective as changing the password, you can use
the Airport Utility app to enable access control to block the
offending user's MAC address. At least that doesn't require your
other users to fiddle with their configurations.

[toc] | [prev] | [next] | [standalone]


#69619

FromAlan Browne <alan.browne@FreelunchVideotron.ca>
Date2015-02-09 09:19 -0500
Message-ID<m8adnZdi-a6cX0XJnZ2dnUU7-fWdnZ2d@giganews.com>
In reply to#69618
On 2015.02.09 09:05 , Tom Stiller wrote:
> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>> the prior model. At this time it is being shared by three users,
>> myself, and two others. Our primary use of the capsule is to access the
>> internet. Access to the Time Capsule requires the password. Today I
>> noted that there is a fourth user, unkknown, who is accessing the Time
>> Capsule. I have no idea who this user is but I'm assuming that it must
>> be someone close enough to connect wirelessly.
>>
>> My question now is how do I disconnect this user. I assume that I will
>> have to change the password. Will changing the password immediately
>> disconnect this unknown user or will that user have to sign off and
>> then attempt to reconnect.
>>
>> Many thanks for replies!
>>
> Although not quite as effective as changing the password, you can use
> the Airport Utility app to enable access control to block the
> offending user's MAC address. At least that doesn't require your
> other users to fiddle with their configurations.

If that user knows the password he can switch to another device.

In the case at hand I'd also check if an authorized (valid) user is 
using more than one device to access that network.

-- 
"Your net worth to the world is usually
  determined by what remains after your
  bad habits are subtracted from your good ones."
                                   Benjamin Franklin

[toc] | [prev] | [next] | [standalone]


#69627

Fromnospam <nospam@nospam.invalid>
Date2015-02-09 13:01 -0500
Message-ID<090220151301232729%nospam@nospam.invalid>
In reply to#69618
In article <cjrt5jFd7oeU1@mid.individual.net>, Tom Stiller
<clusterfux.upmon@gmail.com> wrote:

> > I have an Apple Time Capsule managed from my iMac. The Time Capsule is
> > the prior model. At this time it is being shared by three users,
> > myself, and two others. Our primary use of the capsule is to access the
> > internet. Access to the Time Capsule requires the password. Today I
> > noted that there is a fourth user, unkknown, who is accessing the Time
> > Capsule. I have no idea who this user is but I'm assuming that it must
> > be someone close enough to connect wirelessly.
> >
> > My question now is how do I disconnect this user. I assume that I will
> > have to change the password. Will changing the password immediately
> > disconnect this unknown user or will that user have to sign off and
> > then attempt to reconnect.
> >
> > Many thanks for replies!
> >
> Although not quite as effective as changing the password, you can use
> the Airport Utility app to enable access control to block the
> offending user's MAC address. At least that doesn't require your
> other users to fiddle with their configurations.

that only works up until the person changes their mac address to one
that's not blocked, likely one that's currently in use which will bump
a legitimate user offline.

mac address blocking has its uses, however, securing a network is not
one of them, as it's trivially bypassed.

if it truly is a rogue user, then changing the password of the network
and rebooting the router will resolve it and be sure to use a very good
passphrase.

[toc] | [prev] | [next] | [standalone]


#69643

FromPaul Sture <nospam@sture.ch>
Date2015-02-10 10:55 +0100
Message-ID<t51pqb-vls.ln1@news.chingola.ch>
In reply to#69618
On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>> the prior model. At this time it is being shared by three users,
>> myself, and two others. Our primary use of the capsule is to access the
>> internet. Access to the Time Capsule requires the password. Today I
>> noted that there is a fourth user, unkknown, who is accessing the Time
>> Capsule. I have no idea who this user is but I'm assuming that it must
>> be someone close enough to connect wirelessly.
>>
>> My question now is how do I disconnect this user. I assume that I will
>> have to change the password. Will changing the password immediately
>> disconnect this unknown user or will that user have to sign off and
>> then attempt to reconnect.
>>
>> Many thanks for replies!
>>
> Although not quite as effective as changing the password, you can use
> the Airport Utility app to enable access control to block the
> offending user's MAC address. At least that doesn't require your
> other users to fiddle with their configurations.

I'm not using an Airport but I whitelist the MAC addresses belonging
to my devices; any device not registered there cannot connect.

Can an Airport do that?

-- 
1972 - IBM begins development on its last tape drive (3480) ever because
of the declining cost of disk drives.

[toc] | [prev] | [next] | [standalone]


#69648

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-10 14:00 +0000
Message-ID<cjuh8oF3snbU1@mid.individual.net>
In reply to#69643
On 2015-02-10, Paul Sture <nospam@sture.ch> wrote:
> On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
>> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>>> the prior model. At this time it is being shared by three users,
>>> myself, and two others. Our primary use of the capsule is to access the
>>> internet. Access to the Time Capsule requires the password. Today I
>>> noted that there is a fourth user, unkknown, who is accessing the Time
>>> Capsule. I have no idea who this user is but I'm assuming that it must
>>> be someone close enough to connect wirelessly.
>>>
>>> My question now is how do I disconnect this user. I assume that I will
>>> have to change the password. Will changing the password immediately
>>> disconnect this unknown user or will that user have to sign off and
>>> then attempt to reconnect.
>>>
>>> Many thanks for replies!
>>>
>> Although not quite as effective as changing the password, you can use
>> the Airport Utility app to enable access control to block the
>> offending user's MAC address. At least that doesn't require your
>> other users to fiddle with their configurations.
>
> I'm not using an Airport but I whitelist the MAC addresses belonging
> to my devices; any device not registered there cannot connect.
>
> Can an Airport do that?

Yup.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#69651

FromPaul Sture <nospam@sture.ch>
Date2015-02-10 20:08 +0100
Message-ID<8j1qqb-cpu.ln1@news.chingola.ch>
In reply to#69648
On 2015-02-10, Jolly Roger <jollyroger@pobox.com> wrote:
> On 2015-02-10, Paul Sture <nospam@sture.ch> wrote:
>> On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
>>> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>>>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>>>> the prior model. At this time it is being shared by three users,
>>>> myself, and two others. Our primary use of the capsule is to access the
>>>> internet. Access to the Time Capsule requires the password. Today I
>>>> noted that there is a fourth user, unkknown, who is accessing the Time
>>>> Capsule. I have no idea who this user is but I'm assuming that it must
>>>> be someone close enough to connect wirelessly.
>>>>
>>>> My question now is how do I disconnect this user. I assume that I will
>>>> have to change the password. Will changing the password immediately
>>>> disconnect this unknown user or will that user have to sign off and
>>>> then attempt to reconnect.
>>>>
>>>> Many thanks for replies!
>>>>
>>> Although not quite as effective as changing the password, you can use
>>> the Airport Utility app to enable access control to block the
>>> offending user's MAC address. At least that doesn't require your
>>> other users to fiddle with their configurations.
>>
>> I'm not using an Airport but I whitelist the MAC addresses belonging
>> to my devices; any device not registered there cannot connect.
>>
>> Can an Airport do that?
>
> Yup.

Thanks.


-- 
1972 - IBM begins development on its last tape drive (3480) ever because
of the declining cost of disk drives.

[toc] | [prev] | [next] | [standalone]


#69652

Fromnospam <nospam@nospam.invalid>
Date2015-02-10 14:42 -0500
Message-ID<100220151442069286%nospam@nospam.invalid>
In reply to#69643
In article <t51pqb-vls.ln1@news.chingola.ch>, Paul Sture
<nospam@sture.ch> wrote:

> > Although not quite as effective as changing the password, you can use
> > the Airport Utility app to enable access control to block the
> > offending user's MAC address. At least that doesn't require your
> > other users to fiddle with their configurations.
> 
> I'm not using an Airport but I whitelist the MAC addresses belonging
> to my devices; any device not registered there cannot connect.
> 
> Can an Airport do that?

it can but it's a complete waste of time.

[toc] | [prev] | [next] | [standalone]


#69653

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-10 20:03 +0000
Message-ID<cjv6gkF8af0U1@mid.individual.net>
In reply to#69652
On 2015-02-10, nospam <nospam@nospam.invalid> wrote:
> In article <t51pqb-vls.ln1@news.chingola.ch>, Paul Sture
><nospam@sture.ch> wrote:
>
>> > Although not quite as effective as changing the password, you can use
>> > the Airport Utility app to enable access control to block the
>> > offending user's MAC address. At least that doesn't require your
>> > other users to fiddle with their configurations.
>> 
>> I'm not using an Airport but I whitelist the MAC addresses belonging
>> to my devices; any device not registered there cannot connect.
>> 
>> Can an Airport do that?
>
> it can but it's a complete waste of time.

That's a blanket statement that doesn't tell the whole truth though. If
someone wants to discourage casual connections from computers that
aren't authorized to connect, it can certainly be somewhat useful.
Granted, it can be bypassed by changing the MAC address of the
connecting device or computer; but not all users know how to do that,
and not all devices and systems allow it. So I'd say a more correct
statement is that it's somewhat useful, but doesn't enhance security
substantially. 

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#69658

Fromnospam <nospam@nospam.invalid>
Date2015-02-10 16:05 -0500
Message-ID<100220151605198824%nospam@nospam.invalid>
In reply to#69653
In article <cjv6gkF8af0U1@mid.individual.net>, Jolly Roger
<jollyroger@pobox.com> wrote:

> >> > Although not quite as effective as changing the password, you can use
> >> > the Airport Utility app to enable access control to block the
> >> > offending user's MAC address. At least that doesn't require your
> >> > other users to fiddle with their configurations.
> >> 
> >> I'm not using an Airport but I whitelist the MAC addresses belonging
> >> to my devices; any device not registered there cannot connect.
> >> 
> >> Can an Airport do that?
> >
> > it can but it's a complete waste of time.
> 
> That's a blanket statement that doesn't tell the whole truth though. If
> someone wants to discourage casual connections from computers that
> aren't authorized to connect, it can certainly be somewhat useful.
> Granted, it can be bypassed by changing the MAC address of the
> connecting device or computer; but not all users know how to do that,
> and not all devices and systems allow it. So I'd say a more correct
> statement is that it's somewhat useful, but doesn't enhance security
> substantially.

it might stop a casual user or someone who is mistakenly connecting to
the wrong network but they're not the ones to worry about.

someone with ill intent *will* connect if the only thing securing a
network is mac address filtering.

the way to secure a wireless network is with a good passphrase.

[toc] | [prev] | [next] | [standalone]


#69659

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-10 21:17 +0000
Message-ID<cjvaqbFarplU1@mid.individual.net>
In reply to#69658
On 2015-02-10, nospam <nospam@nospam.invalid> wrote:
> In article <cjv6gkF8af0U1@mid.individual.net>, Jolly Roger
><jollyroger@pobox.com> wrote:
>> 
>> That's a blanket statement that doesn't tell the whole truth though. If
>> someone wants to discourage casual connections from computers that
>> aren't authorized to connect, it can certainly be somewhat useful.
>> Granted, it can be bypassed by changing the MAC address of the
>> connecting device or computer; but not all users know how to do that,
>> and not all devices and systems allow it. So I'd say a more correct
>> statement is that it's somewhat useful, but doesn't enhance security
>> substantially.
>
> it might stop a casual user or someone who is mistakenly connecting to
> the wrong network but they're not the ones to worry about.

I don't think it's your job to decide who everyone on the planet should
worry about.  ; )

> someone with ill intent *will* connect if the only thing securing a
> network is mac address filtering.

Nobody is saying that MAC filtering should be used to secure anything.

> the way to secure a wireless network is with a good passphrase.

Yep, and everyone should do that. And MAC filtering can augment that
good security by disallowing connections from unknown devices/computers.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#69671

FromAlan Browne <alan.browne@FreelunchVideotron.ca>
Date2015-02-10 19:51 -0500
Message-ID<juidnbfQjasROkfJnZ2dnUU7-T2dnZ2d@giganews.com>
In reply to#69659
On 2015.02.10 16:17 , Jolly Roger wrote:

> Yep, and everyone should do that. And MAC filtering can augment that
> good security by disallowing connections from unknown devices/computers.

Some musings ...

In addition to strong passwords ...

At a company level,  if one suspects they're a hacking target, then one 
could:

- set the SSIDs to something misleading such as variations on
   a neighboring SSID (an adjacent company).

- set up a "bait" SSID on a router.  The SSID announces the company.
   (A cheap dual band router can output 4 "good looking" SSID's - 2
   principal, and 2 "guest").  This router connects to nothing else.

- set up a "bait" hidden SSID on another router to keep the hackers
   busy - naturally this one would also use a name associated with your
   co.  so they'll think they're on to something.  This router connects
   to nothing else.

- set up an otherwise useless computer to try to hookup (probe) to the
   "bait" hidden SSID so the hackers can find it...  It would use the
   wrong password so it would keep trying to hook up.  (A little
   scripting may be needed here so the bait probe keeps getting
   broadcast for the hackers to find).

- taking this further, allow the hidden bait computer to get hooked
   into. Accesses huge files such as "Engineering-backup.ZIP",
   "Q4-Financial-backup.zip" etc. ...  (encrypted garbage).

All in fun of course ...


-- 
"Your net worth to the world is usually
  determined by what remains after your
  bad habits are subtracted from your good ones."
                                   Benjamin Franklin

[toc] | [prev] | [next] | [standalone]


#69656

FromLewis <g.kreme@gmail.com.dontsendmecopies>
Date2015-02-10 20:54 +0000
Message-ID<slrnmdks1v.10qr.g.kreme@kreme.eternal-september.org>
In reply to#69643
Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
> On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
>> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>>> the prior model. At this time it is being shared by three users,
>>> myself, and two others. Our primary use of the capsule is to access the
>>> internet. Access to the Time Capsule requires the password. Today I
>>> noted that there is a fourth user, unkknown, who is accessing the Time
>>> Capsule. I have no idea who this user is but I'm assuming that it must
>>> be someone close enough to connect wirelessly.
>>>
>>> My question now is how do I disconnect this user. I assume that I will
>>> have to change the password. Will changing the password immediately
>>> disconnect this unknown user or will that user have to sign off and
>>> then attempt to reconnect.
>>>
>>> Many thanks for replies!
>>>
>> Although not quite as effective as changing the password, you can use
>> the Airport Utility app to enable access control to block the
>> offending user's MAC address. At least that doesn't require your
>> other users to fiddle with their configurations.

> I'm not using an Airport but I whitelist the MAC addresses belonging
> to my devices; any device not registered there cannot connect.

If you are relying on MAC filtering to prevent connections you are
sadly mistaken.

-- 
http://2blog.kreme.com

[toc] | [prev] | [next] | [standalone]


#69660

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-10 21:18 +0000
Message-ID<cjvasbFarplU2@mid.individual.net>
In reply to#69656
On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
> Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
>> On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
>>> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>>>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>>>> the prior model. At this time it is being shared by three users,
>>>> myself, and two others. Our primary use of the capsule is to access the
>>>> internet. Access to the Time Capsule requires the password. Today I
>>>> noted that there is a fourth user, unkknown, who is accessing the Time
>>>> Capsule. I have no idea who this user is but I'm assuming that it must
>>>> be someone close enough to connect wirelessly.
>>>>
>>>> My question now is how do I disconnect this user. I assume that I will
>>>> have to change the password. Will changing the password immediately
>>>> disconnect this unknown user or will that user have to sign off and
>>>> then attempt to reconnect.
>>>>
>>>> Many thanks for replies!
>>>>
>>> Although not quite as effective as changing the password, you can use
>>> the Airport Utility app to enable access control to block the
>>> offending user's MAC address. At least that doesn't require your
>>> other users to fiddle with their configurations.
>
>> I'm not using an Airport but I whitelist the MAC addresses belonging
>> to my devices; any device not registered there cannot connect.
>
> If you are relying on MAC filtering to prevent connections you are
> sadly mistaken.

I don't think that's what he said. You do understand that MAC filtering
and encryption are not mutually exclusive, right?

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#69666

FromLewis <g.kreme@gmail.com.dontsendmecopies>
Date2015-02-10 22:37 +0000
Message-ID<slrnmdl22u.117m.g.kreme@kreme.eternal-september.org>
In reply to#69660
Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>> Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
>>> On 2015-02-09, Tom Stiller <clusterfux.upmon@gmail.com> wrote:
>>>> On 2015-02-09, TaliesinSoft <taliesinsoft@me.com> wrote:
>>>>> I have an Apple Time Capsule managed from my iMac. The Time Capsule is
>>>>> the prior model. At this time it is being shared by three users,
>>>>> myself, and two others. Our primary use of the capsule is to access the
>>>>> internet. Access to the Time Capsule requires the password. Today I
>>>>> noted that there is a fourth user, unkknown, who is accessing the Time
>>>>> Capsule. I have no idea who this user is but I'm assuming that it must
>>>>> be someone close enough to connect wirelessly.
>>>>>
>>>>> My question now is how do I disconnect this user. I assume that I will
>>>>> have to change the password. Will changing the password immediately
>>>>> disconnect this unknown user or will that user have to sign off and
>>>>> then attempt to reconnect.
>>>>>
>>>>> Many thanks for replies!
>>>>>
>>>> Although not quite as effective as changing the password, you can use
>>>> the Airport Utility app to enable access control to block the
>>>> offending user's MAC address. At least that doesn't require your
>>>> other users to fiddle with their configurations.
>>
>>> I'm not using an Airport but I whitelist the MAC addresses belonging
>>> to my devices; any device not registered there cannot connect.
>>
>> If you are relying on MAC filtering to prevent connections you are
>> sadly mistaken.

> I don't think that's what he said. You do understand that MAC filtering
> and encryption are not mutually exclusive, right?

"I'm not using an Airport but I whitelist the MAC addresses belonging
to my devices; any device not registered there cannot connect."

Hard to read that any other way but believing MAC whitelists prevent
unregistered devices from connecting.

-- 
http://2blog.kreme.com

[toc] | [prev] | [next] | [standalone]


#69667

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-11 00:04 +0000
Message-ID<cjvkl4Fde31U1@mid.individual.net>
In reply to#69666
On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
> Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
>> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>>> Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
>>>>
>>>> I'm not using an Airport but I whitelist the MAC addresses belonging
>>>> to my devices; any device not registered there cannot connect.
>>>
>>> If you are relying on MAC filtering to prevent connections you are
>>> sadly mistaken.
>
>> I don't think that's what he said. You do understand that MAC filtering
>> and encryption are not mutually exclusive, right?
>
> "I'm not using an Airport but I whitelist the MAC addresses belonging
> to my devices; any device not registered there cannot connect."
>
> Hard to read that any other way but believing MAC whitelists prevent
> unregistered devices from connecting.

Nah. Nothing in that statement indicates that encryption isn't being
used. Without knowing more, I wouldn't assume Paul isn't using
encryption. 

And what he said is technically true. MAC address white lists *do*
prevent devices with MAC addresses that are not on the list from
connecting. 

Like I said, encryption and MAC address filtering are *not* mutually
exclusive. Not only is it possible to do both at once, but there's also
nothing at all wrong with doing both. 

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#69687

FromLewis <g.kreme@gmail.com.dontsendmecopies>
Date2015-02-11 12:37 +0000
Message-ID<slrnmdmj97.13ch.g.kreme@kreme.eternal-september.org>
In reply to#69667
Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>> Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
>>> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>>>> Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
>>>>>
>>>>> I'm not using an Airport but I whitelist the MAC addresses belonging
>>>>> to my devices; any device not registered there cannot connect.
>>>>
>>>> If you are relying on MAC filtering to prevent connections you are
>>>> sadly mistaken.
>>
>>> I don't think that's what he said. You do understand that MAC filtering
>>> and encryption are not mutually exclusive, right?
>>
>> "I'm not using an Airport but I whitelist the MAC addresses belonging
>> to my devices; any device not registered there cannot connect."
>>
>> Hard to read that any other way but believing MAC whitelists prevent
>> unregistered devices from connecting.

> Nah. Nothing in that statement indicates that encryption isn't being
> used. Without knowing more, I wouldn't assume Paul isn't using
> encryption. 

The fact it wasn't mentioned?

MAC address filtering is a waste of time and does *nothing* to protect
a network.

> And what he said is technically true. MAC address white lists *do*
> prevent devices with MAC addresses that are not on the list from
> connecting.

But it is trivial to spoof a MAC address that IS on the list.

> Like I said, encryption and MAC address filtering are *not* mutually
> exclusive. Not only is it possible to do both at once, but there's also
> nothing at all wrong with doing both. 

OK, but one is effective an one is not.



-- 
http://2blog.kreme.com

[toc] | [prev] | [next] | [standalone]


#69691

FromJolly Roger <jollyroger@pobox.com>
Date2015-02-11 15:07 +0000
Message-ID<ck19ieFpnuqU1@mid.individual.net>
In reply to#69687
On 2015-02-11, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
> Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
>> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>>> Okay, so one time? In band camp? Jolly Roger <jollyroger@pobox.com> was all, like:
>>>> On 2015-02-10, Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:
>>>>> Okay, so one time? In band camp? Paul Sture <nospam@sture.ch> was all, like:
>>>>>>
>>>>>> I'm not using an Airport but I whitelist the MAC addresses belonging
>>>>>> to my devices; any device not registered there cannot connect.
>>>>>
>>>>> If you are relying on MAC filtering to prevent connections you are
>>>>> sadly mistaken.
>>>
>>>> I don't think that's what he said. You do understand that MAC filtering
>>>> and encryption are not mutually exclusive, right?
>>>
>>> "I'm not using an Airport but I whitelist the MAC addresses belonging
>>> to my devices; any device not registered there cannot connect."
>>>
>>> Hard to read that any other way but believing MAC whitelists prevent
>>> unregistered devices from connecting.
>
>> Nah. Nothing in that statement indicates that encryption isn't being
>> used. Without knowing more, I wouldn't assume Paul isn't using
>> encryption. 
>
> The fact it wasn't mentioned?

The absence of proof is not evidence is not evidence of absence.

> MAC address filtering is a waste of time and does *nothing* to protect
> a network.

It prevents MAC addresses that are not on the list from connecting.

>> And what he said is technically true. MAC address white lists *do*
>> prevent devices with MAC addresses that are not on the list from
>> connecting.
>
> But it is trivial to spoof a MAC address that IS on the list.

It's not trivial for a lot of cases, because not everyone knows how, and
not all devices (iOS devices are one example) allow the user to change
the MAC address.

>> Like I said, encryption and MAC address filtering are *not* mutually
>> exclusive. Not only is it possible to do both at once, but there's also
>> nothing at all wrong with doing both. 
>
> OK, but one is effective an one is not.

It's effective for what it does, and nothing more.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


Page 1 of 3  [1] 2 3  Next page →

Back to top | Article view | comp.sys.mac.system


csiph-web