Hacking the RSA Wireless Network: Bring Your A Game

Like This Blog 0

Added by Mike Danseglio February 26, 2013

I’m attending the RSA Conference this week. Right now I’m writing from the conference floor. The event looks to be amazing, with a great speaker line-up and really strong attendance. I can’t wait for the sessions to get fully underway.

This year the conference is providing free, unsecured wireless networking to all attendees. Yes, free and unsecured wireless access. In this screenshot you can see the official wireless network is the only unsecured network.

Figure 1. An invitation to hackers.

This is pretty darn easy to compromise for most attackers. I’d expect it to be thoroughly compromised in short order. And true to that, there’s an attack being conducted right now.

Sadly, the attacker is simply usurping the wireless network’s SSID. No DHCP server, no DNS server, no traffic redirection. Nothing.

Frankly I’m disappointed. If you’re going to hack the wireless network at the world’s biggest security conference, with the brightest security minds in attendance, at least show the courtesy of engineering a proper attack.

Until next time:

Mike Danseglio -CISSP / CEH
Interface Technical Training – Technical Director and Instructor