[wplug] OT Question

Nick Iglehart nick at systemsecuritysolutions.com
Thu Apr 17 21:25:11 EDT 2003


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There are in fact several ranges of unlicensed spectrum including the
~900 and ~2400 MHz fields that cordless phones and 802.11b operate
in. 802.11a is also in unlicensed spectrum.

As for the assertion that FHSS is a security feature, this statement
is absolutely false. FHSS was never intended to provide security but
instead to allow greater bandwidth within a given spectrum. Unless a
random wide spectrum hopping sequence is implemented it is trivial to
determine the hopping pattern and configure a sniffer to follow it. 

Even if it is random, it is almost as trivial to monitor multiple
frequencies with timestamping to reconstruct data after the fact.
While it will limit the capability of an attacker to interact with
the stream in real time, it will not protect data.

> On Thu, Apr 17, 2003 at 05:12:11PM -0400, Bill wrote:
> > The Dash service uses the license-free radio spectrum 
> allocated by the 
> > Federal Communications Commission to promote communications 
> and data 
> > networking services. Our system uses frequency-hopping 
> spread spectrum 
> > technologies (originally developed for military communications)
> > to  provide a safe, reliable, interference-resistant connection
> > to the  Internet.
> > 
> > So if I understand this correctly, this ISP is using ham radio to
> >  provide connectivity?
> 
> Where do you get that conclusion from?  If they are, they are 
> operating illegally and will be shut down by the FCC.  I do 
> not know what the "license-free" portion of the radio 
> spectrum is, but if you feel like following up on this, I 
> would be interested to hear about it.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPp9T9qq/UK5/FuEgEQKL/gCg6ONJSZtzGqOxoPleGk6rrwvguzIAn1JY
G6AQEb/svF+eocke1ai6F6iQ
=hrYU
-----END PGP SIGNATURE-----

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.463 / Virus Database: 262 - Release Date: 3/17/2003




More information about the wplug mailing list