The first show from DruidWiki Radio! Your host will be [...], a.k.a. yibble. Tune in for some tunes, testing, oddness and er… stuff.

Events Board - DruidWiki

technorati tags: mp3, radio, druid, druidry, shoutcast, show

If I was just passively sniffing traffic from a wireless network, I could be there for days, accumulating enough legitimate data (derived from one key) to brute force the key, and the key isn’t that hard to brute force when you do have the data, due to weaknesses in the key scheduling algoritm of RC4. So, ARP is a predictable packet, a few bytes of the header are usually the same, and the size of the packet is recognisable. So we have known plaintext, and the ability to sniff known ciphertext. Great, if we re-inject this ARP packet into the network, something’s going to respond. We’ll receive more cipher text, to compare against known plain text.

Even on a low-traffic network, we can encourage traffic using this re-injection technique, and then sit back and accumulate the data (Initialisation Vectors, or IVs) we need to brute force the WEP key.

Simple, eh? Well, that’s what I was doing last night. Hopefully, I’ll get to test out some exploits against WPA-PSK tonight, or soon, at least.

Oh, and maybe I’ll play with polutting the airwaves, with this little number:

If one access point is good, 53,000 must be better.

Black Alchemy’s Fake AP generates thousands of counterfeit 802.11b access points. Hide in plain sight amongst Fake AP’s cacophony of beacon frames. As part of a honeypot or as an instrument of your site security plan, Fake AP confuses Wardrivers, NetStumblers, Script Kiddies, and other undesirables.

Projects - fakeAP

technorati tags: wlan, wireless, hacking, information security, wep, wpa

Both are from the Woodland Faerie range, the one on the left is Ellen, and the other is Awen. I’m not allowed them until Christmas :( I also shouldn’t really visit the web-site that often, I could easily spend a fortune, and I don’t have an alarm for the garden, and with the ‘investment’ in some of the limited edition sculptures, you would certainly need an alarm.

The drive through Woburn Abbey Deer Reserve, was also lovely. A copious amount of well kept land, inhabited by species of deer from across the world. We were also lucky enough to see some challenges erupting.

technorati tags: faerie, sculpture, craft, woburn abbery, christmas

What else is going on? Well, we’re experimenting with a live audio stream for the DruidWiki.org web site. The idea being that a few of us can shedule live shows in the events board system, pick up the stream and away we go! Early days so far, but you have to test these things periodically to see if the community is ready. To the folks I know, if you’re interested in DJing, or hosting shows, talk shows, chat shows, poetry hour, anything really, drop me a line and I can hook you up with the right credentials for you to start streaming.

One thing I don’t want is for someone to stream a playlist without any interactivity. It’s a waste of bandwidth, we’re only after live shows, with a voice. If there’s a show playing, you can tune in here. (Windows users should just be able to click that link.)

Hopefully, I’ll find some time at the weekend to write a status module that can display here, as well as on the DruidWiki. So readers can see if the stream is up (On Air) before attempting to connect.

technorati tags: radio, mp3, stream, druidry, blog, del.icio.us