|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [Full-Disclosure] TiVo Network Security
From: S . f . Stover (attica
stackheap.org)
Date: Sun Jan 04 2004 - 01:13:36 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On 04 Jan 04 12:25:48AM Randal L. Schwartz[merlyn
stonehenge.com] wrote:
: Well, if you're running WEP for the sole purpose of hiding TiVo data,
: and then you run strong crypto over that for your normal data traffic,
: and the only result of breaking wep is that someone can connect to
: 204.176.49/24, I really don't see the point of worrying too hard about
: rotating the WEP key.
:
: Let'em crack it!
True. I was thinking more along the lines where you wouldn't be able to run a
VPN because TiVo can't understand it. In "production" wireless environments,
I prefer to tunnel all traffic over ssh via squid proxy, but it doesn't sound
like TiVo would integrate into that environment. However, if you keep moving
through WEP keys, you could drop the ssh-tunnelling, integrate TiVo, and still
remain reasonably secure...
: Plus, the user interface for changing the WEP key on the TiVo requires
: far too many up-down-left-right pushes for me.
;-)
--
aka Dolph Longhorn GPG Key ID: 0xF8F859D0
http://pgp.mit.edu:11371/pks/lookup?search=0xF8F859D0&op=index
"There is no such thing as right and wrong, there's just popular opinion."
-Jeffrey Goines
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE/970gBJRbvfj4WdARAuVOAJkBOEzfJKfEAY57EEnskDhr78eImACfQpU+
QhppimertAxfPQ7puusRHyc=
=pmBL
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]