site Search:


 
   
Hacking the Hardware Store
Duo use Wi-Fi to hack into Lowe's
by McWizzard Wednesday 12-Nov-2003 tags: legal · wireless
Wardrivers in Michigan take their Wi-Fi explorations a little too far. According to this Detroit Free Press report, two Michigan men used a laptop from a car in a Lowe's parking lot to access the company's internal network via Wi-Fi. According to the FBI, the two men used an employee account to access the network, install "malicious" files, and then gain access to customer credit card records. The men are being charged with causing damage to a protected computer system, and face a maximum penalty of 10 years in prison and a $250,000 fine.

view: topics flat text 
Post a:
page: 1 · 2

paulinkc

join:2000-12-30
Lees Summit, MO
Reviews:
·AT&T Yahoo

Stupid stupid stupid....

When will people learn? I understand the very nature of discovering security holes in a clients network, but to install malicious code and stealing cc#'s is down right WRONG no matter how you look at it.
I say lock em away and forget about them... just a harsh way of looking at it I guess.

53059959
Temp banned from BBR more then anyone

join:2002-10-02
PwnZone

Re: Stupid stupid stupid....

yea you wardrive to use other peoples bandwidth to download lotsa crap, not to steal credit card #'s. tisk tisk!

DBowmanJr

join:2003-01-22
Arlington, VA

Re: Stupid stupid stupid....

I think both parties are wrong, Lowe's and the wardrivers. Lowe's should already have security measures on their wireless system. But if a wireless connection is open, then let the games begin... but not in a malicious way...

RRedline
Rated R
Premium
join:2002-05-15
Williamsport, PA

Re: Stupid stupid stupid....

So if you don't lock your front door, you are to blame when somebody walks in and takes your TV? How do you figure that Lowe's was "wrong"? Negligent perhaps, but not "wrong". What's wrong is thinking that people who don't do enough to prevent a crime from happening are the ones responsible for said crimes.
--
One nation, under Zod!

Combat Chuck
Too Many Cannibals
Premium
join:2001-11-29
Erie, PA

Re: Stupid stupid stupid....

I think that's what he meant when he said Lowe's was wrong.

A better analogy would be, is it wrong if your friend gives you a key to his house so you can feed his cats while he's on vacation, and you just leave his door unlocked? Theres a huge difference between being careless with your own stuff, and being careless with other peoples things.
--
Infogrames != Atari

jwsmiths4
Part Man, Part Mac
Premium
join:2003-10-25
Savannah, GA

Re: Stupid stupid stupid....

I think an even better comparison would be saying that wardriving and stealing CC#s is like leaving your door unlocked and someone stealing your TV, and wardriving and stealing bandwidth is like leaving your door unlocked and coming home to find someone else watching your TV.
BosstonesOwn

join:2002-12-15
Everett, MA
Reviews:
·Comcast

Re: Stupid stupid stupid....

now thats a good analogy.. what comes to mind is that movie half-baked "the guy" on the couch lol. But some fat dude sitting on your couch one of your beer's in his hand. And then watching him eat your food. haha.. now thats funny.
--
This package does not contain a winner...

DenverDialup

join:2003-06-06
Littleton, CO
That's a good comparison, although even stealing bandwidth can be harmful -- i.e. ISPs who have explicit caps, or implicit caps like Comcrap, or even the crazy FAP "funnel system" used by DirecWay.

I agree that stealing bandwidth is less detrimental, but it should still be considered a crime. It's no different to me than the "door unlocked/robbery" comparison.
--
"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." -- Rich Cook

DBowmanJr

join:2003-01-22
Arlington, VA
Silly R, they are both guilty and the victims. Guilty for leaving their wireless system open and the victims because cc #'s were stolen.

We could argue this until we are blue in the face, but the sad truth is that this could have been prevented if WEP, WPA, or even MAC address control was activated.
ackman

join:2000-10-04
Acworth, GA
Yes, you are partly to blame if you don't lock your door. How smart would it be to leave a laptop computer or a cell phone on your car seat without locking your car door? It's almost like reckless endangerment, they created an unsafe situation. If anything, the customers whose credit card numbers were stolen should sue Lowe's for failing to provide adequate and reasonable security for their personal and confidential information. I do think Lowe's has a responsibility to use due care in setting up such a network, understanding the risks involved, and adequately protecting their internal data systems. It's not rocket science to anyone in the tech industry. Sounds like they just had a weak IT guy come up with this solution. Or a big consulting firm like Accenture sold them a whiz bang idea for a ton of money, then didn't finish it properly...not that the big consulting firms would ever do something like that of course...

rklein
God Among Hogs

join:2001-01-18
Clinton, MA
Check your state laws. In some states you're legally required to have an ignition lock on your car. If you use a screwdriver to start your car and someone steals it from you, they'll probably get locked up, but you may run into trouble with any insurance claims (regardless of the ignition lock laws).

So, to get back on track: yeah, the hackers were wrong and should be prosecuted, but Lowes was also negligent because of their lax security.
--
-Rich

pcdebb
RIP dadkins
Premium
join:2000-12-03
Brandon, FL
kudos:4
said by RRedline:
So if you don't lock your front door, you are to blame when somebody walks in and takes your TV?
Absolutely! it's wrong for someone to walk in, but if you leave the door open there's nothing stopping the miscreant other than just turning the knob. any company should know better. i wish i had a wireless device or i'd wardrive my store to see what data is flying thru the air, only to tell them to lock it up (if it hasnt been done already)
--
I want to die in my sleep like my grandfather...not screaming and yelling like the passengers in his car ... (posts) ... AIM ...

99664227
Heavily MODerated
Premium
join:2002-11-21
USA
said by DBowmanJr:
I think both parties are wrong, Lowe's and the wardrivers. Lowe's should already have security measures on their wireless system. But if a wireless connection is open, then let the games begin... but not in a malicious way...

Well if you read the paragraph it stated that the hackers used a employees account to gain access.

Look out federal prison here comes two fresh new fish....

MrTangent

join:2001-12-28
Earth
said by paulinkc:
When will people learn? I understand the very nature of discovering security holes in a clients network, but to install malicious code and stealing cc#'s is down right WRONG no matter how you look at it.
I say lock em away and forget about them... just a harsh way of looking at it I guess.

I'm curious, what's your thoughts on music piracy? What about speeding? Jaywalking? Returning videos without rewinding them? Death to all the above? Life imprisonment? Beheading? Hmmm?

--
"War Is Peace. Freedom Is Slavery. Ignorance Is Strength"

Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state

Hacking?

Is it really considered hacking if someone gave them an employee account?

also Lowe's obviously used Wi-fi as a way to avoid wiring the registers...now a smart company would of only been allowing the registers MAC's onto the network and since registers aren't changed very often i'm sure it would be that much of a hassle to upkeep and would easily thwart off wardrivers
--
Forum Posts:3504
GLX

join:2000-01-18
San Francisco, CA

Re: Hacking?

They generally use the WiFi stuff for inventory control (ie, handheld scanners and such), not registers. Just an FYI.

zoom3148
Superman
Premium
join:2001-04-30
Yermo, CA

Re: Hacking?

said by GLX:
They generally use the WiFi stuff for inventory control (ie, handheld scanners and such), not registers. Just an FYI.

Yeah I think You are right, I just noticed what looks like 2 or 3 wireless access points (routers?) up on the ceiling of My local Stater Brothers Supermarket (2-Short Black Antennas on each router), They also installed 2 Cameras and 2-19" TV's facing towards the Doors for security too(Physical, Not electronic).
--
Charter Pipeline rules in Hesperia, CA, Verizon (ex-GTE) sucks.....

72276539
Premium
join:2001-01-19
Atlanta, GA
said by Qumahlin:
Is it really considered hacking if someone gave them an employee account?

Of course not, this is perfectly legal and every should be allowed to do it. Since supposedly someone GAVE them the employee account(which the article does not mention anyone GIVING them an employee account by the way) what they did was just like doing any other business.
Cybertoad

join:2001-11-08
Houston, TX

Re: Hacking?

Let us not forget "social engineering" which is itself
a form of hacking. The difference is that you are
hacking people instead of computers.

It is very common for hackers to call in and pretend
to be someone else or play mind games in order to attempt
to trick someone such as an employee of a company into
revealing their login or password.

That login is later used to enter the system and do whatever
it is you wish to do with the information.

The same technique has recently been used with both Paypal
and eBay customers recently where hackers send out letters
pretending to be from those companies and requesting that
the customers "verify their login information". Actually
the message is from hackers trying to get the customers
to disclose their login information.

tower29
Premium
join:2002-02-12
Loveland, CO

Re: Hacking?

I received four of those e-mails from Ebay and I laughed all the way to the delete button. Anyone that ignorant to fill the form they sent me I feel very sorry for. "mothers maiden name" is a bell ringer to have your credit screwed for life. I had my credit card number stolen last year and it sucks. www.cashmove.com was the company that it was used on totaling 300 bucks.....tower

stomas3

@pas.corp.earthlink.n
no you are not a hacker if given the info or if you social engineering someone... A hacker is some one who will take something apart and see how it works. looks at its + and -. understands why it works that way, and applies what he learned to creating a better thing or what ever it may be. the person who did this using social engineering or not is a everyday 2bit criminal and anyone could of done that if they have the criminal mentality. my mother is not a hacker and she can get information from people that are internal information only. and some people can give that type of information unknowingly to someone. I have heard many times people at stores giving out sensitive information to other co-workers. but the difference between what my mother and i do with that information and what they did with that information makes them a criminal it does not make my mother a hacker or me a criminal. plane and simple... before you start throwing around the word hacker to every criminal first know what a hacker is and does.

Hall
Premium,MVM
join:2000-04-28
Dayton, OH
kudos:1

Re: Hacking?

said by stomas3:
no you are not a hacker if given the info or if you social engineering someone... A hacker is some one who will take something apart and see how it works. ... before you start throwing around the word hacker to every criminal first know what a hacker is and does.

You're fighting a losing battle (hacker vs cracker). The term "hacker" has been re-defined, at least for the general public, and we can't change it back. I do know the difference that you're alluding to though. Yes, in geek-speek, these guys are crackers, not hackers.
--
-= Mindspring MaxDSL via Covad 1536/384 TeleSurfer Pro =-

Hall
Premium,MVM
join:2000-04-28
Dayton, OH
kudos:1
said by Qumahlin:
Is it really considered hacking if someone gave them an employee account?
Just because someone may have given it to them doesn't mean they have the right to use it... And do you think someone "gave" it to them or they gained it some other way ??
--
-= Mindspring MaxDSL via Covad 1536/384 TeleSurfer Pro =-

DaSneaky1D
one wall to block them all
Premium,MVM
join:2001-03-29
The Lou
Reviews:
·Charter
Lowes actually have all of their registers connected to Ethernet networks. The registers are running Cat5 to right under the counters, then converted into fiber from there till it gets to the switch closet. Then it goes back to Cat5.

Know what your talking about before you jump to conclusions.
--
If first you don't succeed, try sucking another seed!

cyberthugin

join:2002-03-12
Kew Gardens, NY

Re: Hacking?

Duhh.
These guys are dumb.
First of all the 5-0 would grind the employee to give up the info on whom he gave his employee account # to?
grindkore

join:2000-12-29
Olmsted Falls, OH
So it's ok for me to throw rocks at your windows because you are obviously not smart enough to install bullet proof glass? This kind of logic can be applied to just about anything. Of corse when it's about hackers and viruses it's always blame the MS or blame stupid WiFi or whatever else comes to mind.
hovno2002

join:2002-04-30
Hackensack, NJ

Re: Hacking?

If I forget to lock my door, or I do not lock it properly, anyone has the right to go in my house and take my things? I dont' think so. Just because the door isn't secured, doesn't mean you can come in without a proper invitation.

Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state

No, I was just saying..I don't really count this as "hacking" As for my comment about how they should of secured their network..it was just that...a comment. Did I once say what they did was ok? Did I say it was their fault? No, I merely commented on the title. and commented on the store being idiots for not following simple security recommendations when running a wi-fi network

As for the "jumping to conclusions" Well I know for a fact the lowes near me has no cat 5 running to the registers and the wifi cards are visibly attached. So obviously not all lowe's registers use ethernet. I made the natural assumption that this lowe's was doing the same thing..if they aren't and have wifi for some other reason they still didn't follow basic security for a wifi network, especially one that has access to credit processing

--
Forum Posts:3504

AthlGrond
Premium,MVM
join:2002-04-25
Aurora, CO
Reviews:
·Comcast
said by Qumahlin:
now a smart company would of only been allowing the registers MAC's onto the network and since registers aren't changed very often i'm sure it would be that much of a hassle to upkeep and would easily thwart off wardrivers
MAC's can be easily cloned.
Kearnstd
Elf Wizard
Premium
join:2002-01-22
Mullica Hill, NJ
these people should know that jacking into another person's wireless is for use of their T-carrier for fast downloads. not stealing CC#s.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports
Kearnstd
Elf Wizard
Premium
join:2002-01-22
Mullica Hill, NJ
unless im doing business with a company they dont get my CC#(Ie ordering from Newegg.com or my EQ acct subscription).
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports

QuickHax

@centurytel.net
FYI - you can clone mac address. like serial numbers that can be generated and brute forced onto a network.

not to mention all security software has flaws. Buffer under run execution?

Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state

Re: Hacking?

Yes, you can clone mac addresses, but to clone you first must be able to obtain a mac address that is allowed on the network
--
Forum Posts:3504

AthlGrond
Premium,MVM
join:2002-04-25
Aurora, CO
Reviews:
·Comcast

Re: Hacking?

said by Qumahlin:
Yes, you can clone mac addresses, but to clone you first must be able to obtain a mac address that is allowed on the network
Which is what packet sniffing is for.
Raydr
Premium,MVM
join:2000-11-19
Carrollton, TX

WTF? "hacker craze"??

This article demonstrates the sheer ignorance of the reporter. That "They may have been engaged in the recent hacker craze known as "wardriving"" line REALLY pissed me off.

This reporter is gonna get an email from me.

ashenf@det-freepress.com

wicked_wifi
Are You Wifi Compatible
Premium
join:2003-11-04
Cooleemee, NC

Re: WTF? "hacker craze"??

This is what gets us legit wardrivers into trouble. The Public needs to know the difference from wardriving and these so called wannabes.

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK
Reviews:
·AT&T DSL Service

Re: WTF? "hacker craze"??

It's too late. The term "hacker" has evolved and now in the public eye means "Low life crook, pathetic virus writing geek, common criminal" etc

War-driving will quickly become one with "Crime" too.

These days, being equated as a "hacker" is almost the same as being called a "Terrorist"... just the way the Government and Corporations want it.
--
"Regulatory capitalism is when companies invest in lawyers, lobbyists, and politicians, instead of plant, people, and customer service." - former FCC Chairman William Kennard (A real FCC Chairman, unlike the current Corporate Spokesperson in the job!)

MuseQDaMusic
The Notes Are Free

join:2003-10-28
Racine, WI
said by wicked_wifi:
This is what gets us legit wardrivers into trouble. The Public needs to know the difference from wardriving and these so called wannabes.

Please explain 'legit wardriver'. Seriously.

wicked_wifi
Are You Wifi Compatible
Premium
join:2003-11-04
Cooleemee, NC

Re: WTF? "hacker craze"??

Legit wardriver. Disabling TCP/IP on your card and not connecting to AP's. Doins surveys of what wireless is out there. Remember connecting to any wirless network with out permision is a crime. Like me, I tend to travel a lot and I leave my lappy on and disable TCP/IP and use a program that tells me what wireless networks are out there. Then I transfer to a site that has a list of AP all over the world. Its for surveying purpose only. That is what I consider a legit "wardriver"
Raydr
Premium,MVM
join:2000-11-19
Carrollton, TX

My email to the reporter

Regarding your article: "Waterford men hacked store files, FBI alleges"
You wrote: "They may have been engaged in the recent hacker craze known as "wardriving" -- cruising around with a specially equipped laptop and an antenna searching for unsecured wireless networks hooked to the Internet."

I found this line extremely offensive, and others will as well.

Wardriving is not hacking, cracking, or gaining illegal access to a network without authorization.

A simple google search of "what is wardriving?" will yield many useful descriptions of Wardriving, such as:

»www.mobilelifestyles.net/additio···tion.htm

Unfortunately, there are still many websites and people who associate wardriving with attempting to gain access to a network. This is not the case, and the old definition is left over from the countless reporters (such as yourself) who inform users that "wardriving" is a "hacker" activity. Wardriving is legal and protected the same way that radar detectors are.

Wardriving is the same thing as driving around your town with your radio set to "scan".

Wardriving is the same thing as driving down a street and noting the color/size of each house.

Wardriving is harmless and in many cases very useful.

The CRIMINALS mentioned in your story deserve to go to jail, as what they did is illegal.

I hope for a correction or slight modification to the story; I do not wish to get pulled over for a minor traffic infraction, and end up arrested just because the police have read information that leads them to believe laptop+GPS+antenna = hacking into companies.

Thank you.

------
Marcus R. Matos - Matos Consulting (www.matosconsulting.com)
Gainesville Office: 352/336-4805 | Ocala Mobile: 352/342-0100

See 9 replies to this post

panth1
The Coyote

join:2000-12-11
Boca Raton, FL

Cat5

I guess they ran out of cat5 in the electrical department :P
--
ISPs: Road Runner/Powerlink Status: Road Runner

Sisqo
World Champs. Babe Who?
Premium
join:2002-08-14
Methuen, MA

Alot of dumb people out there!

I don't understand alot of hackers! Most claim that they are freedom fighters & that is why they do what they do.

But then you got these moron's that for no specific reason just decide to mess with people!

Granted hacking is ok as long as it's against Microsoft ! j/k lol.

I hope they get 20 years in prison & get sent to get their booty pounded by some big guy names Bubba!

I'm sorry guys it just gets me so irate, that you can't even shop anymore without worrying about some hacker screwing you!

odog
Cable Centric Vendor Biased
Premium,VIP
join:2001-08-05
Atlanta, GA
kudos:5
Reviews:
·Comcast

umm.... wifi for registers was straight up dumb.

any company using wifi for anything besides email and browsing is asking for issues. specifically a place that has such high employee turnover.

best buy or compusa used to have wireless registers and got pinched for fact that they were sending customer credit cards in clear text over the air.

what these guys was extremely dumb. how lowes setup their network was even dumber.

the open ceilings are perfect for conduit and fiber... they would have been far better off going that route.
--
disclaimer: my opinions are my own, my employer is not responsible.
Raydr
Premium,MVM
join:2000-11-19
Carrollton, TX

Re: umm.... wifi for registers was straight up dumb.

As I posted before, the main purpose of the wifi is inventory.

Edit: Oops, I didn't post it before here...it was on netstumbler.com. Here's the stuff from netstumbler:

quote:
Originally posted by audit
What I find interesting is, I've driven that area multiple times and never picked anything up.
That's because Lowe's/Home Depot and MANY other stores have broadcasting disabled.

Generally WEP is not active at these stores because they use other methods of protection.

These guys did some research or knew someone who had extra information about the network.

I assisted in setting up the wifi at a couple of Home Depot stores. If you go in, you'll see an AP with a "pringle can" type antenna on each side of the store. They are used mostly for the wireless inventory carts that you see in the aisles sometimes.

DBowmanJr

join:2003-01-22
Arlington, VA

Re: umm.... wifi for registers was straight up dumb.

If this is the case, then I would like to take back what I said about Lowe's. If those two guys intentionally broke any security protocol to gain access, then it's entirely their fault. If Lowe's had some kind of security up, then I'll eat my words. If not, and they left it wide open, game on...

pcdebb
RIP dadkins
Premium
join:2000-12-03
Brandon, FL
kudos:4

bad...

the most i've ever done is hopped on a network and that's it. I wouldnt consider it hacking if he had the employee account (unless the employee account was hacked). that's the same as having a key to unlock a door. but they messed up by installing the trojans and stealing customer info. if the employee accout was given to them ,then the employee should be held accountable as well
--
I want to die in my sleep like my grandfather...not screaming and yelling like the passengers in his car ... (posts) ... AIM ...

DaSneaky1D
one wall to block them all
Premium,MVM
join:2001-03-29
The Lou
Reviews:
·Charter

WiFi wasn't for the registers

OK, I posted this response above for someone else, I'll make it more visible here:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Lowes actually have all of their registers connected to Ethernet networks. The registers are running Cat5 to right under the counters, then converted into fiber from there till it gets to the switch closet. Then it goes back to Cat5.

Know what your talking about before you jump to conclusions.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you can get on a network while having account access, you can do anything they did. They just did their dirt wirelessly. Lowes use their WiFi for inventory, not transactions. If anything, blame Lowes for being stupid and allowing weak passwords to sensitive information.
--
If first you don't succeed, try sucking another seed!

Mellow
Premium
join:2001-11-16
Salisbury, MD

busted

I'm curious to know how the fbi tracked them down. Did someone notice two very white pasty looking guys with laptops sitting in the parking lot looking suspecious? That intrests me more than how they got an employee's login and how they got into the billing info.

hambone6666
Sigmarick Said Arse

join:2001-02-13
Stamford, CT

Re: busted

said by Mellow:
I'm curious to know how the fbi tracked them down. Did someone notice two very white pasty looking guys with laptops sitting in the parking lot looking suspecious? That intrests me more than how they got an employee's login and how they got into the billing info.

They were probably stupid enough to specify their home email addy to send the CC information too.

n00bs.
--
Please vote for my pictures...THANKS~
Raydr
Premium,MVM
join:2000-11-19
Carrollton, TX
The FBI survielled (is that a word?) and actually watched them show up with a laptop, followed them home and arrested them.
petecellar

join:2002-10-15
Philadelphia, PA
They probably would've gotten away with it if it weren't for the Credit Card theft. (that, and those meddling kids!)

Seems that any time there's Credit Card theft, they will catch you.

They couldn't have done something harmless though. Downloaded crap, or something. No, they had to try to steal people's money. If they weren't such total friggin idiots, they would know that any time there's Credit info involved, they will bust your dumb ass every time.

WhyADuck
Premium
join:2003-03-05
The story at »www.theregister.co.uk/content/69/34144.html gives a few more of the details.

Yowzaaah
Ours Go To Eleven

join:2000-12-14
DamnFlat, OH

a modest proposal...

All new wireless equipment leave the factory in a state whereby they cannot be plugged in and work right out of the box. I am convinced that a majority of these wireless security holes occur when someone with enough knowledge to be dangerous either tacks on an AP or "resets" a piece of misbehaving equipment with a paperclip.

Recently two national hotel chains I've stayed in have had MAJOR security issues with their WiFi as offered to guests. At one, the wireless router still had the default L/P unchanged. Quick lookup on the net and I'm in. From inside the router I could see every machine currently logged in, their MAC addresses, etc. I could have routed all traffic through my laptop and sniffed/logged packets, etc. I could have changed the password, I could have done a lot of things, but I didn't. I chuckled and did nothing since I didn't want to try to explain the problem to the clueless night clerk and I was gone in the morning.

It's in Newark, CA if there are any wardrivers out there who want to do a good deed and got there some afternoon to tell the head housekeeper, IM me and I'll hook you up with the address.
--
Don't suspect your friends...Report Them.

Brazil (if you haven't seen it, you should)

rolande
Certifiable
Premium,Mod
join:2002-05-24
Columbus, OH
Host:
Linksys
AT&T Midwest

Morons

What bonehead would access their network, upload malicious code to a credit card processing system and not expect an audit trail to pick them up and sound the alarm? Then on top of it all these clowns continue to access their network from the same store parking lot over and over for multiple days in a row. As soon as they did anything malicious, especially to a financial system, they should have known that their method of access would be tracked down and they would be nailed. Even if they were alternating to different stores, as long as they continued to feed their new found habit, eventually they would get busted.

They deserve to be made an example of just for being stupid...Not that I condone criminal behavior. Although, it is rather humorous to see companies scramble to save face when their security flaws and vulnerabilities are exposed nationally. It makes executives nervous and want to spend more money to keep these incidents from occuring possibly creating more tech positions and job stability.
--
Remember what they say: "There are 10 types of people in the world.. those who understand binary, and those who don't."

treeman
Premium
join:2000-07-15
Mcgaheysville, VA

No payments for 30 years

What was not probably mentioned is that one of the hackers was probably an employee that used his own access to gain entry and figured he would not get caught.

tacoma
Bleeding Dodger Blue
Premium
join:2001-05-18
Rancho Cucamonga, CA

I was just looking for a game!

At the end of the article it says- "Wardriving" is named after the old hacker practice called wardialing, the stunt that actor Matthew Broderick made famous in the 1983 film "WarGames." Broderick's character hacked into a military computer and nearly triggered a nuclear war with Russia.

ROFL.. Shall we play a game?
ksuderman

join:2001-10-21
Poughkeepsie, NY

Protected Computer System?

quote:
The men are being charged with causing damage to a protected computer system...
Granted, these guys are idiots and need to go to jail, but how can they be charged with causing damage to a protected computer system? If they were sitting in the parking lot they weren't accessing a "protected computer system" now were they. On a protected network you need more than an employee's username and password, you need the encryption key for the network, and Joe Employee isn't going to have that.

poutine

@dsl.wotnoh.ameritech

Are you guys smoking crack?

If you enter someone else's system without their permission YOU ARE IN THE WRONG, and I hope every extent of the law will be applied against you. Do you think the CEO of Lowe's designed the system there? Do you think it is personally his fault to know of every security hole there is? no, it's the company's that made the software and hooked it all up. WiFi for cash registers is fine, as long as you ipsec tunnel the connections and don't rely on hideously insecure methods such as WEP. If you think for a second that these people weren't in the wrong... you need a life, because you're delusional
wmustudent99

join:2003-09-09
Portage, MI

Re: Wireless Security

Wirless = Not Secure...Always!!!

WEP and WAP have both beened cracked. Setting up an access list can easly be gotten around by MAC spoofing.

Wireless needs some major overhauls before comapnies can begin to use them for secure information. I know that inventory may not be secure information but when you hook that into the rest of your network you just blew your security all together. You might as well put an ethernet port on the outside of your building.

Penguins
Have You Played Atari Today?

join:2001-12-01
Cleveland, OH

Sounds like police-speak to me.

"install "malicious" files, and then gain access to customer credit card records"

We all know in these press releases that the feds already hyper exagerate whatever happened or whatever dollar amount of damage there was to help make thier case.

The above quote sounds just super-vague to me. I wouldnt be suprised to find out nothing of the sort actually happened.

'Gain access to customer credit card records' could mean something as vague as having access to a computer in the same building, it certainly doesnt imply they actually stole any information.

'malicious files'... well, what the hell does that mean? I think it means nothing at all really, that could be codespeak for anything.
--
Pure magic in 2k of 6502.

QuickHax

@centurytel.net

Re: Sounds like police-speak to me.

Wouldn't they need to physically damage a machine to really cost them money? Or does lowes not use a backup / archiving / replication system.

Maybe they just charged a quarter million dollars worth of porn subscriptions to the cards :P

chrisf8657

join:2002-01-27
Glendale, AZ

Idiots are always in the masses

What morons....:o

ctceo
Premium
join:2001-04-26
South Bend, IN

{laughs histerically}

One of the least conspicuous ways to steal, and they get caught, Just how dumb were these people? Never Mind, scratch that question, I already know.
brandonroque

join:2003-11-12
Muncie, IN

Open Network

At the beginning of this forum, most of the people posting didn't even read the short article, because it clearly stated that it wasn't an open wireless network. Actually it was a RADIUS based closed system, the only reason the two guys got access is because an employee evidently lost there login info, or they were involved. That's most likely the reason the two men were caught, these guys definitely aren't very smart, this is how most low class, so called hacker's get caught.
###################################################
According to the FBI, the two men used an employee account to access the network, install "malicious" files, and then gain access to customer credit card records.
###################################################

Yoda2009

join:2003-10-07
Toronto, ON

Re: Open Network

SWEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE EEEEEEEEEE EEEEEEEEEEEEEEEEEET.

Monday, 04-Jun 21:59:05 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.