The dangers of free WiFi

[PrisonworldTV]

WiFi should net be an issue with good firewall. The story should Is Your Firewall Current?

[petertfm]

@PrisonworldTV A firewall only protects you from network connections you haven't established. when your in the middle of the connection aka man in the middle, you can see almost all the traffic and modify/send malicious code to the victim. firewall would have no effect

[AyonymousFTW]

ya hack5darren!

[MasterKozuko]

That's all we really need. Bunch of older people being paranoid at Starbucks.

[anyr]

@krew7900 & @hydrox24 He doesn't spoof the SSID, what he is doing is using a custom built Router/Access Point (available for purchase now), which is running Jasager, which will simply respond to any probe sent out by a wireless device with a "Yes". So when your laptop says "Hey, are you my home network" most devices simply ignore these. But Jasager says, "Yep, I'm your home network alright, let's get you some tubes."

[BuddhaChu]

Thumbs down for not allowing this video to be watched on Wi-Fi connected devices. Semi-ironic in fact.

[sithnick]

thumbs up for hack tip sending you here.

[krew7900]

Lol the media dumbing it down, he didn't create a hotspot; he is posing as the wireless connection (ssid) you are trying to connect to.

[hydrox24]

@krew7900 It's more than possible that he is doing either. Both effective techniques but yes, more likely that he is simply spoofing the SSID in this video.

[jconman]

Poor Darren. Protecting your self involves so much more then what CBS has time for.

[joshuahardy95]

its darren from hak5

he said they dummed him down.. but its not that bad

[joshuahardy95]

@joshuahardy95 oh wait

"if your on an untrusted network dont trust it" HAHHAHA

[fieldofgrass]

meatwad.

[DLSS]

@Hak5Darren will this new firmware become available to the older pineapples aswell? (mark I and mark II) and what is the device used for the mark III?

[ax0r690]

@DLSS check out wifipineapple website by adding dotcom affter

[ryanshepherd]

SSL? Darren has a hak5 episode about SSLStrip.

[Jaymoon8503]

See it now. Anytime. Anywhere.*

*except on mobile devices, and embedded on other websites. Screw you Youtube permissions!

[tommy49er]

Sometimes I wonder about your american news. they really are just fear mongers over there aren't they. australian here. there are tonnes of ways to keep yourself secure on an open wifi and i'm sure Darren explained that but they cut the video down and said "BUY A VPN, IT'S THE ONLY WAY TO SAVE YOURSELF" i'm sure if you go to the cbs website there is now an add for "cheap" vpn services.

[TavitoX18]

You don't "need to buy a VPN" she says int he video, use an SSL tunnel to your home or OpenVPN and you are done, for free.

[hfsjansharr]

ssh-tunnel your traffic, people. Darren explains this on his youtube channel called 'hak5darren' or you can find it on 'revision3'.

[shahinabdus1]

he is using wifi pineapple to make a wifi hotspot . i also saw there is function of credit cards its in the backtrack5 METALSPOLIT FRAMEWORK or IN THE WIFI PINEAPPLE FUNCTION ?

[SinSchism]

@shahinabdus1 The function, actually. The pineapple that was on this episode happens to be the Pineapple Mk.III which has a nifty suite of tools, many of which are also on Backtrack distros.

Backtrack 5r1 is generally regarded as better because the "r" stands for "revision".

Honestly, you may want to do a LOT of research before picking up Backtrack or the Pineapple because there's a lot to know.

[shahinabdus1]

which is bettter backtrack 5/backtrack 5r1 ?

[MikeBoman77]

@shahinabdus1 backtrack 5r1

[andrewpocock1]

it is easy to do this, im not going to explain how because people reading this will try it

you can set it up with most laptops (certain laptop wireless chipsets work better)

the wifi pineapple is only ussed because it can be put in your bag with a battery pack and then do this while being hidden in a bad or where ever

[BadHaddy]

This piece is a bit of an attention grabber, but fundamentally reveals the truth. Public wifi is NOT safe. Even if its encrypted, if its password is public then anyone else on the wifi network can see your data. That device (the pineapple running Jasager firmware) is even more dastardly than the piece lets on.

Do not trust public wifi. I personally use a cellular broadband device for just this reason. Even then, i use VPN. If your data is sensitive, then don't use public wifi.

[macgeek1972]

Also, USE SSL DUUUHHH

[magicman1995]

@macgeek1972 "Because SSL is SECURE!" :P

[shahinabdus1]

which operating system he is using here ?

[superbeefus]

@shahinabdus1 Backtrack Linux.



[bubbleboy450]

@shahinabdus1 It's called Backtrack 5. A version of ubuntu specifically made with hacking tools.

[1969BALLER]

soo they can do this with out wifi?someone just wants the rights to charge you .

[michaelburrier]

Nice job Mr. Kitchen.

[antfry256]

SSH Tunnel problem solved or VPN

[WolfFlight]

Nice piece Darren... Anything that can be done to educate the public should be done. At least that is my philosophy.

[sep332]

Nice going Darren! At least they kept the important part: Don't trust the network!

[JoseCleveland]

WE are a country of civility and laws.

What do you say Candise ?? or Candi ??

[JoseCleveland]

They say Facebook is watched by CIA so no privacy there.

cia is same dept as fbi and they are under investigation in same area as Lackawanna 6 in NY for obtaining info on their former friends from High School

Apparently they don't care if they push others to RAGE. They never did when all the, now fbi-defined, domestic terrorist events took place. Like Oklahoma bombing, Waco in Texas, WTC 1993 bombing & later bombings. My town is close to that one & fbi wnt on tv to bcome Star Not JobDone

[amadeus5889]

Seriously, anyone who joins an unknown network deserves to get hacked.

[Hak5Darren]

@amadeus5889 agreed, but what isn't explained in the video is the special WiFi Router used.

Google "WiFi Pineapple"

It's a specially crafted device that looks to most users like an open network they've connected to before. It's common for the OS to remember and automatically connect back to access points they've been on previously. The WiFi Pineapple takes advantage of this fact and gives the hacker tremendous power over the targets Internet session.

[gcs8]

@Hak5Darren its a god damn shame how much of what you told them they cut out.

[fizafire]

I have a large penis

[mitchiedoo4]

@fizafire can I have it

[fizafire]

@mitchiedoo4 for science?

[Champion1970]

First

[Liljennings]

@Champion1970 well arent you a champ...