RE: Wlan @ bestbuy is cleartext?

From: Keith Tyler (ktylerat_private)
Date: Wed May 01 2002 - 11:50:47 PDT

  • Next message: http-equivat_private: "Classic Cross Site Scripting: Gibson Research Corporation"

    I think what would be even worse is forging credit approvals. Let say you
    had a credit card and it was dead or expired. Im sure with enough time you
    could forge approvals into their wlan. That seems very possible.
    
    -----Original Message-----
    From: Philip Rowlands [mailto:phrat_private]
    Sent: Wednesday, May 01, 2002 11:06 AM
    To: vuln-devat_private
    Subject: Re: Wlan @ bestbuy is cleartext?
    
    
    On Wed, 1 May 2002, Blue Boar wrote:
    
    >Heres my delima... I checked out a few of the other best buy stores for
    >"beacon packets" and everyone I drove by was sending them out...so I assume
    >all BestBuy's are wlan enabled. What I need to find out is ... are
    >BestBuys's Cash register terminals indeed using wlan and are they indeed
    >sending out MY data in the clear... I am NOT comfortable using my credit
    >card at ANY BestBuy as of right now...  due to legality though I don't feel
    >comfortable walking into the store and confronting someone about it....
    
    You could contact an investigative journalist, even anonymously.
    Assuming your motives are to protect ignorant customers' CC numbers,
    rather than extortion, you'd probably get a fair hearing.
    
    Search for "whistleblowers guide" on Google :)
    
    http://members.tripod.com/whistle20/resources.htm
    
    
    Cheers,
    
    Phil
    



    This archive was generated by hypermail 2b30 : Wed May 01 2002 - 12:55:38 PDT