Passwords

Post #142,478 by Steve Lowe 2/20/04 10:38:42 AM Reply	Passwords Like box said, test for password integrity, especially on VPN and dial-in access points. Got wireless? Check for open access inside and outside the building. Our place is terrible. Our sysadmins setup passwords to 'password' and never force users to change them. I can VPN or dial-in as most users and get direct access to our lan. I can also directly access our lan from the parking lot or the street in front of the building via 802.11b. ----- Steve
Post #142,484 by FuManChu 2/20/04 11:19:25 AM Reply	Cool. What's your office address? >:) At least use WEP. Sheesh. I was one of the original authors of VB, and I wouldn't use VB for a text processing program. :-) Michael Geary, on comp.lang.python
Post #142,485 by Steve Lowe 2/20/04 11:26:33 AM Reply	heh, you think THAT's bad... We do events all over the country and have a major retail operation at each one. Each POS terminal talks to the server via 802.11b. Unencrypted. Yes, including credit cards. We'll be in Sandy Eggo this fall... ----- Steve
Post #142,488 by folkert 2/20/04 11:43:57 AM Reply	use ike-scan for this :) it can even figure out VPN gateway settings if they are not properly done. Air-Snort works great for Wirelss... even has on the fly De-encryption options. Poor Saps. -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* "Lately, The only thing keeping me from being a Serial Killer is my distaste for manual labor." -- Dilbert Calendar, January 4, 2004
Post #142,517 by drewk 2/20/04 1:30:28 PM Reply	Maybe I should try that I installed vpnc, the debian cisco vpn client package, but can't get it to connect. What do I install to try to sniff the proper configuration? (I've got the login info for the windows client, but our IT guys don't support linux.) === Implicitly condoning stupidity since 2001.

Welcome to IWETHEY!