OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: fooling hubs [ARP Spoofing]
From: Mila, Brian D (brian.d.milaLMCO.COM)
Date: Thu Feb 10 2000 - 09:27:07 CST

On Tuesday, February 08, 2000 6:41 PM, Vincent; Christopher
[SMTP:christophervincentSTMARKSSCHOOL.ORG] wrote:
> cable modem is talking to. If I programed the MAC of one of my spare NICs
> to that of that one that M1 knows I have, i bet it will work. If I
program
> it to the MAC of my friends, i bet that it will think that I am my friend!
> Now, M1 doesnt have a download limit / cap (its has a speed cap at 1.5mbps
> down and 356kbps up) so it would not serve any purpose other than
discovery
> on how M1 actually authenticates. The only danger that it could pose to
> spoof my friends MAC is that some M1 websites let you change your e-mail
> password and some e-mail settings, and they used (last time I checked) to
> authenticate by the cable modem you were on.
>

You might also be able to DOS your friend. If mediaone denies access to two
identical MAC's, then using
your friends MAC might prevent him from connecting. Also, any reports of
misuse coming in might get
traced back to your friend and not to you. Just a thought.

Brian