GG Technology: WiFi Hacking for secure voice commnications
Secure communications are key to global guerrilla ops. One way to accomplish this is through the use of wireless network hacking and Skype. A simple process (amplifications are welcome):
1) Sniff for an unguarded WiFi access point using a tool such as Netstumbler ($150). Focus your efforts by using a map of known networks.
2) Connect to the network using a WiFi enabled PDA or laptop. IP address will be delivered from the network (not likely to be on the FBI's Dragonware list). A low cost directional antenna can extend range markedly (a wok, Chinese parabolic cookware, or the venerable Pringles can -- using Chinese cookware is new but effective).
3) Launch Skype using an ad-hoc profile (change frequently). Skype will provide P2P voice and chat communications with strong encryption.
This could be quite risky for terrorists:
The technology already exists to use Phased Array Radar techniques to pinpoint rogue WiFi laptops in 3 dimensions at extended range.
http://www.wifi-forum.com/wf/showthread.php?t=352
http://www.vivato.com
Posted by: Watching Them, Watching Us | Sunday, 06 June 2004 at 05:30 AM
On risk. With the vast number of wifi access points around, I think it is safe to assume that wifi clients assumed by the feds to be benign by default. However, if it somehow becomes known that a wifi access point is commonly used for encrypted traffic (say, by way of sniffing traffic at internet supernodes -- not at all inconceivable), then the user/terrorist is in trouble, and phased array antennas are not even necessary.
For this reason it is of utmost importance to the user to avoid calling attention to himself. Skype does not help here.
Skype is good at providing strong encryption but the wifi cafe method provides no means for protection against traffic analysis at internet supernodes. Intelligent steganographic methods could be used to mask crypto data in this situation, but the user would forfeit realtime voice capability. From what I know, steganography does not stand up to rigorous statistical data analysis but I doubt a supernode sniffer has the computational power to search for ciphertext stegonagraphically embedded in traffic. The sniffer is already busy on plaintext email sniffing and unmasked ciphertext detection.
Foregoing steganography, another option for the user is to configure his laptop/PDA as a Freenet node, using such communications devices as anonymous remailers or other proprietary methods. I won't go into details here but I do believe that as benign hackers find more ways to foil the RIAA, new anonymous/encrypted filesharing networks become available for leveraging by would-be terrorist operatives.
The problem of intercepting these communications has no solution and this fact is a byproduct of technological growth. This dynamic has been with us since sharp pointed sticks were invented (they help to kill bears, but can also kill people).
Posted by: anon | Saturday, 10 July 2004 at 02:45 AM