Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #69708

Re: Apple Time Capsule -- Unknown User

From nospam <nospam@nospam.invalid>
Newsgroups comp.sys.mac.system
Subject Re: Apple Time Capsule -- Unknown User
Date 2015-02-11 12:22 -0500
Organization A noiseless patient Spider
Message-ID <110220151222149662%nospam@nospam.invalid> (permalink)
References (6 earlier) <cjvkl4Fde31U1@mid.individual.net> <slrnmdmj97.13ch.g.kreme@kreme.eternal-september.org> <110220150824085780%michelle@michelle.org> <ck1anvFqe4qU1@mid.individual.net> <ck1c7hFpnuqU5@mid.individual.net>

Show all headers | View raw

In article <ck1c7hFpnuqU5@mid.individual.net>, Jolly Roger
<jollyroger@pobox.com> wrote:

> >>> > And what he said is technically true. MAC address white lists *do*
> >>> > prevent devices with MAC addresses that are not on the list from
> >>> > connecting.
> >>> 
> >>> But it is trivial to spoof a MAC address that IS on the list.
> >>
> >> But one would first have to know that MAC address.
> >
> > And it is trivial to discover them.
> 
> I'm in. How would I discover the MAC addresses in a router MAC address
> filter list? Got a link handy?

the original claim was to block the offending mac address, so simply
changing it to *anything* else will let them in. change just one digit
and it will work. 

if there is a list of allowed mac addresses (which is a huge pain to
maintain), then all it takes is watching traffic since mac addresses
are always sent unencrypted (they have to be) and then pick one. 

although it's possible that there will be zero devices connected and
therefore no mac addresses to find, that is *extremely* unlikely,
especially these days with mobile devices, set top boxes, thermostats,
etc., that all connect via wifi. in other words, it's pretty much
guaranteed that there will be at least one device to find.

again, mac address filtering stops the casual user which isn't the type
of user to worry about. maybe they just want to check mail or facebook.
not a big deal. 

the people you *do* need to worry about, the ones with ill intent, have
absolutely no problem whatsoever getting past a mac address filter and
once in, can possibly do all sorts of stuff.

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Apple Time Capsule -- Unknown User TaliesinSoft <taliesinsoft@me.com> - 2015-02-08 21:47 -0600
  Re: Apple Time Capsule -- Unknown User Don Bruder <dakidd@sonic.net> - 2015-02-08 20:37 -0800
  Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-08 21:37 -0700
  Re: Apple Time Capsule -- Unknown User Tom Stiller <clusterfux.upmon@gmail.com> - 2015-02-09 14:05 +0000
    Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 09:19 -0500
    Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-09 13:01 -0500
    Re: Apple Time Capsule -- Unknown User Paul Sture <nospam@sture.ch> - 2015-02-10 10:55 +0100
      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 14:00 +0000
        Re: Apple Time Capsule -- Unknown User Paul Sture <nospam@sture.ch> - 2015-02-10 20:08 +0100
      Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-10 14:42 -0500
        Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 20:03 +0000
          Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-10 16:05 -0500
            Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 21:17 +0000
              Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-10 19:51 -0500
      Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-10 20:54 +0000
        Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-10 21:18 +0000
          Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-10 22:37 +0000
            Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 00:04 +0000
              Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-11 12:37 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:07 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:16 +0000
                Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-11 08:32 -0700
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:53 +0000
                Re: Apple Time Capsule -- Unknown User Michelle Steiner <michelle@michelle.org> - 2015-02-11 08:24 -0700
                Re: Apple Time Capsule -- Unknown User Huge <Huge@nowhere.much.invalid> - 2015-02-11 15:27 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 15:53 +0000
                Re: Apple Time Capsule -- Unknown User nospam <nospam@nospam.invalid> - 2015-02-11 12:22 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-11 18:00 +0000
                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 01:51 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 14:11 +0000
                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 14:52 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 15:11 +0000
                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-12 15:38 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-12 16:03 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-14 11:00 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-14 19:44 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-14 10:58 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-14 16:47 +0000
                Re: Apple Time Capsule -- Unknown User Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-02-15 01:10 +0000
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 01:39 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 09:24 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 14:56 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 11:13 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-15 16:53 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-15 18:01 -0500
                Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-16 01:38 +0000
                Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-16 12:04 -0500
  Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 09:21 -0500
    Re: Apple Time Capsule -- Unknown User TaliesinSoft <taliesinsoft@me.com> - 2015-02-09 14:05 -0600
      Re: Apple Time Capsule -- Unknown User Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-02-09 15:32 -0500
      Re: Apple Time Capsule -- Unknown User Jolly Roger <jollyroger@pobox.com> - 2015-02-09 20:58 +0000

csiph-web