Posted Jun 25, 2006 at 06:42AM by Remi M. Listed in: Security Tags: Bluetooth, David Maynor, Jon Ellch, LORCON, BlueBag
Ó

Wi-FiIt seems that Wi-Fi drivers can put laptops at a greater risk of being hacked. Recently, some people have found a way to seize control of a laptop computer by manipulating buggy code in the system's wireless device driver. But don't you worry, these people are security researchers and they come in peace.

The hack will be demonstrated at the upcoming Black Hat USA 2006 conference during a presentation by David Maynor, a research engineer with Internet Security Systems and Jon Ellch, a student at the U.S. Naval postgraduate school in Monterey, California.

In the world of hacking, device driver hacking is technically challenging but with the emergence of  new software tools that make it easier for less technically savvy hackers, a.k.a script kiddies, to attack wireless cards, the field of device driver hacking is gaining some attention in the past years.

The two "researchers"  used an open-source 802.11 hacking tool called LORCON (Loss of Radio Connectivity) to throw an extremely large number of wireless packets at different wireless cards. Using the fuzzing technique, they want to see if they can cause programs to fail, or perhaps even run unauthorized software when they are bombarded with unexpected data.

While completing their conquest, they were able to discover many examples of wireless device driver flaws, including one that allowed them to take over a laptop by exploiting a bug in an 802.11 wireless driver. They also examined other networking technologies including Bluetooth, Ev-Do (EVolution-Data Only), and HSDPA (High Speed Downlink Packet Access).

Wireless devices are often built to constantly find new networks. This innate characteristic can lead to security problems, and in fact researchers in Italy recently created a project known as BlueBag, to emphasize this point. What they try to do is show just how many vulnerable Bluetooth wireless devices they could connect with by wandering around public spaces like airports and shopping malls. After spending about 23 hours wandering about Milan alone, they had found more than 1,400 devices that were open to connection.

So with these, the two hackers are willing to help out engineers who write device driver to always put security as the top priority so as to prevent hacking. The Black Hat USA 2006 conference will be held on August 2, 2006.


[Via Infoworld] Permalink  |   Email this  |   Linking Blogs   |   Digg It!

Bookmark / Find this article on:

0 Comments


Sort by:


QJ.NET Blog Network RSS Feeds
MyQJ Feed / PDA
MyQJ RSS / PDA
Blog of Blogs Feed / PDA
QJ.NET RSS / PDA
Gaming Consoles Feed / PDA
Nintendo DS RSS / PDA
PlayStation 3 RSS / PDA
PSP Updates RSS / PDA
Wii RSS / PDA
Xbox 360 RSS / PDA
PC Gaming Feed / PDA
Age of Conan RSS / PDA
Games for Windows RSS / PDA
MMORPG RSS / PDA
Tabula Rasa RSS / PDA
World of Warcraft RSS / PDA
Science Feed / PDA
Science RSS / PDA
Technology Feed / PDA
Apple RSS / PDA
Gadgets RSS / PDA
iPhone RSS / PDA
Mobile RSS / PDA
Photography RSS / PDA
Tech RSS / PDA
Add QJ.NET
Add to My Yahoo!
Google Reader Subscribe with Bloglines
Add  to your Kinja digest Subscribe in NewsGator Online
Subscribe with Pluck RSS reader Add 'www.qj.net' to Newsburst from CNET News.com
Subscribe with SearchFox RSS del.icio.us www.qj.net
Add to Technorati Favorite! Add to My AOL
furl! it Stumble for Treehugger!
User Favorites - October
Most Commented
No commented articles
User Favorites - October
Top Jumps
No available articles using criteria