RE: RE: Wireless security and VPN

VPN over 802.11x is not secure at all. I have seen several demonstrations of various "Main-in-the-Middle" attacks on 802.11 networks which have broken the secure VPN connection. These type of attacks are well known, and becoming more common place.

AirDefense (registration required) (http://www.airdefense.net) has several documents that will support this claim.

The most important one is titled "Wireless LAN Security - What Hackers Know That You Don't"

If you have questions, feel free to contact me offline.

-Brian Scott Ashcraft-
 Systems Software Engineer
Miskatonic Technologies

-----Original Message-----
From: peter.ve@pandora.be [mailto:peter.ve@pandora.be] Sent: Friday, November 22, 2002 5:34 AM
To: Robinson, Sonja; 'Chris Martin'; Brian Bettger Cc: security-basics@securityfocus.com
Subject: Re: RE: Wireless security and VPN

what about the new PEAP protocol ?

>802.11b which is used by current wireless devise is inherently insecure and
intended only for the individual(s) named herein or others specifically authorized to receive the communication. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender of the error immediately, do not read or use the communication in any manner, destroy all copies, and delete it from your system if the communication was sent via email.
>
>
>
>
>**********************************************************************
>
Received on Tue Nov 26 15:08:24 2002

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek