Tampilkan postingan dengan label info. Tampilkan semua postingan
Tampilkan postingan dengan label info. Tampilkan semua postingan

NetBackup Feature.

NetBackup Feature Deduplikasi Rely 7.
Symantec, as one of the world-class security company, today announced NetBackup 7. These applications are claimed to protect, preserve, and restore the information.
Symantec has also included features on deduplikasi this application. Symantec promises integration deduplikasi anywhere, either in the client devices, media servers, and third-party hardware devices.

With NetBackup 7, Symantec brings deduplikasi strategies anywhere. This strategy can help the company claimed to reduce storage consumption. By integrating deduplikasi closer to the source of data on client devices, increase the NetBackup backup speed and efficiency in branch offices, data centers and virtual environments, and reduce network traffic by 90%. Deduplikasi that integrated with the client to make additional hardware and special configurations are not needed because customers only need to upgrade to the latest version to realize savings in storage.

NetBackup simplifies data protection of virtual servers with a standard backup Hyper-V and VMware. Featured is claimed to increase the speed of backups via deduplikasi virtual environments and small-scale backup technology at block level, and presenting a single file recovery capabilities efficiently.

In 2010 State Of The Data Center survey, company / organization called granular recovery of virtual image as the biggest challenge in the virtual machine data protection. Symantec includes these features to bring recovery from backup files in the small-scale block level for lingungan VMware vSphere and easy recovery for individual files or folders from the backup image on a virtual machine on Hyper-V.

To help customers centrally manage their data protection environment and presents a single view of backup and recovery operations to them, 7 introduces NetBackup reporting and management console, called integrated OpsCenter. This new console to standardize monitoring and reporting of backup and archive information for the main products Symantec, including NetBackup, NetBackup PureDisk, Backup Exec and Enterprise Vault.

Symantec NetBackup 7 available globally on February 1, 2010 at a price of U.S. $ 4,995 USD for an Enterprise Server license and five client.
Continue Reading..

Google's Tambal Buzz.

Google has patched the hole in the Google Buzz on Tuesday (16 / 2), several hours after the SecTheory reported that the security hole. "We did not find that the gap was already used," explained a press release sent by Google to the journalists.

Security hole that is allowing criminals to enter the code made to the Google website. Criminals can also take over the account person and do anything with that account. They also can fool Google users to provide login information to the phishing techniques.

Google said it will continue to develop Google Buzz security. "We realize the importance of security of our users," explains Google in a press release.
Continue Reading..

Microsoft.

In the brand's popularity, Microsoft Salip Google.
Microsoft finally managed to overtake Google in the survey about the popularity of the brand in the UK Superbrands. The annual survey included 500 business brands in the UK and terpuncak put Microsoft on top rival, Google. Google is there at the top in 2009, fell from his pedestal to the fifth position.

10 great position in the survey revealed three technology companies. This amount is one less than in 2009. Nokia and Sony have been evicted by the Blackberry, which jumawa in third position.

Technology companies usually get a good position in this survey, mainly because of the nature of the stop-shop product. You are more likely to use Microsoft or Google's products than Virgin Atlantic, which in the survey was in position between the Blackberry and Google.

The survey itself is trying to find out what brands are strongly embedded in certain communities and measure the effectiveness of marketing departmene respectively. But it is surprising to see Apple have also entered into the major leagues. But since that was consulted business people, maybe they were not captivated by the brand.
Continue Reading..

Microsoft, Adobe, and Oracle Security Update Released.

"One of Microsoft's security vulnerabilities are going to affect everything, from Windows 2000 to Windows 7, but that in critical categories only for Windows 2000," beber Ben Greenbaum (Senior Research Manager, Symantec Security Response). "From the XP SP2 and later products, Microsoft has memerkuat heap memory with a memory heap protection strategy. This makes the security vulnerabilities are less of a problem for systems of more recent," continued Ben.

Meanwhile, Adobe is also scheduled to release a security update. One of the expected update will patch a security vulnerability critical zero-day and affecting the Acrobat Reader (first identified on December 14).

"We see this security vulnerability actively exploited by attackers. At the end of December this attack looks businesses rose sharply and then declined, but we continue to see attacks limited to such exploitation. It is possible that the kinds of exploitation that is more reliable under development," Greenbaum explained.

Following, Oracle also scheduled to release an advisory that will overcome the 24-hour security vulnerabilities as well as part of their security updates. Although this is a moon shining for Microsoft, but because Adobe overcome several security holes, at least one of critical events are also able to improve Oracle's 24 security vulnerabilities, many IT managers have to keep working hard.

Some problems of vulnerability in Symantec eventually spur to encourage users to patch their systems to address this security vulnerability. In addition, companies are encouraged to consider implementing a patch management solution automatically to help overcome these risks. More information, please visit the following Symantec blog.
Continue Reading..

Remind Symantec, Beware Scam World Cup!.

The tournament's most prestigious soccer, World Cup (World Cup) in 2010, precisely on June 11 next will be held.

With the presence of the World Cup, the 3.1 million tickets will be sold. In addition, there will be more than 400 million people worldwide who watch every game on television. Many fans who use the Internet to find tickets, accommodation, and flights. However, be careful. The problem cyber criminals such as spammers or scammers are scheming to attack Internet users to manipulate the World Cup.

Internet security service provider, Symantec also reveal the possibilities that can happen. Through www.2010netthreat.com site, Symantec provides the data, comments, security tips and useful links for football fans looking for news on the internet, tickets, and information about the tournament.

Paul Wood (senior analyst at Symantec Hosted Services), said that the biggest football tournament this world would attract more than 1 billion fans, including cyber criminals. "According to history, sports events such as large-scale, this will lead to an increase in the number of cyber threats," explained Wood.

"Phishing attacks increased 66% during the Olympic Games in Beijing in 2008. Facts about put two undersea communication cables in the South African coast last July also exacerbate the threat level. History shows that evil activity increased in a country following the availability of new bandwidth, "added Wood through a written statement.

Therefore, users should be careful. The attack is called a 419 scam, spam, and phishing will disguise and woo Internet users through special offers related to the event. To avoid easy. "The rule is, if one looks very unlikely to be true, it probably is a scam," beber Gordon Love (Africa Regional Director, Symantec).

These cyber criminals with some even picking up orek users' personal information, the following bank account number, and credit card number for the user's money drain. Sites that urge vigilance against any scam or spam is rampant.

Not wits, cyber criminals and then poison the user by displaying their fake web site on the first level of search results. "Users often assume that sites that appear first are legitimate sites / original, and perhaps to click these sites without first checking the source," added Love. So, beware!
Continue Reading..

Micron & Nanya Recommend 42-nanometer DRAM.

A DDR3 memory, 2 gigabit (Gb) DRAMs using 42-nanometer (nm) successfully developed by Micron Technology, Inc.. and Nanya Technology Corporation. This copper-based technologies will undoubtedly be useful in applications of high-performance computing, including servers, notebooks, and desktops.

The advantages of 42nm technology is also making 1.35-volt power into the power that is widely used standards compared with 1.5 volts on the previous generation memory. Please note, reduction of power consumption is very important for the server, because the cost of power and cooling infrastructure comparable to the cost of their own server equipment. with a power of 1.35 volts, then the savings can reach up to 30%.

The case when the memory on the server increased. Power consumption in memory would be increased as well. Expected to reach up to 21 watts per module and 1866 to reach the memory performance of megabits per second. Thanks to the small print and the memory density of 2GB of DDR3-42nm devices, capable of producing modules up to 16Gb capacity.

"With the movement towards the 42nm and 3Xnm process that has worked well in the facilities of our R & D in Boise, Micron expertise in copper and metalisasi special cell capacitor technology makes us remain a leader in the design of DRAM process," said Robert Feurle (DRAM Marketing Vice President ).

Micron reason to use copper, among others, is that the material cost of copper, compared with other techniques such as aluminum metalisasi. These samples are scheduled to begin in the second quarter of calendar 2010, while the implementation of planned production will begin in the second half of this year.
Continue Reading..

Cyber criminals Like Best Online Content.

There was sugar ants. Thus roughly appropriate maxim to describe the development of the current cyber crime that led to the users of social networking and other online content users. Data from Nielsen Online shows that the activity of social networking today is the fourth highest of all the activities a person does when connecting to the internet.

Related to this trend, Sophos released a report that summarized the year security Security Threat in 2010, where over 100 existing web sites, 50 of whom have a high security risk. Most crime in those sites directed at social networking, phishing and malware. Interestingly, 61 percent of respondents are involved in the research Sophos think that Facebook is a social network with the greatest security risk because most visited by Internet users.

The same thing also revealed Microsoft's latest Security Intelligence Report stating that the current online attacks aimed at the 2 main targets, namely: user (person) and the user's computer (equipment). "User target PC uses such as phishing social engineering, while the threat of more PCs from malware," said Jacqueline Peterson, Microsoft Asia Pacific Regional Security & Privacy Lead. Jacqueline also said that, from 100 percent of the threats that currently 49 percent are threatened with the high category or very dangerous (High Severity). "And worse, most of Berkategori very dangerous threat is the gap which was easily accessible," he added.

Responding to this, Lukman Susetio, Windows Client Product Manager Microsoft Indonesia, suggest to Internet users to be more careful and use a browser that can prevent and counteract phishing activity Malware. "The browser is good and secure an absolute necessity today. Internet Explorer 8 for example, it provides various security features as surf, like InPrivate feature and SmartScreen to help avoid phishing attacks by crackers, "
Continue Reading..

Mobile Broadband, Not Just Enjoyment.

Communications era has changed. From cable to wireless. The case with mobile communications.

No doubt, one can transform the telecommunications industry, such as health, transportation, media, government, and utilities.

To connect, these portable devices such thing would require broadband. In the event the GSMA Mobile World Congress held in Barcelona, Hans Vestberg as President and CEO of Ericsson declared its support to telecommunications. On that occasion, Hans and supports cultivation of additional growth and lead to beneficial changes in society.

Vestberg too little about the level of describing the transformation of society to reach a crossing, business, and people. Necessarily as much as 50 billion devices will be connected. In his opinion, Vestberg also said that broadband is now not only play a key role in creating new business models. But also to transform the economy while reducing carbon emissions from the way we live and work.

Even Vestberg also presented research results that says that people are willing to spend more money for connectivity with devices in addition pertable PC and phone. Survey respondents suggested that the average spending between 29-42 dollars per month for a combination of enhancements.

In the end, mobile broadband changed. From the mere fun to be a necessity. "Previously we used to decide when would be online, but now we have to decide when to offline," said Vestberg. Especially now that prices are getting cheaper smartphones, laptops more affordable, more and more netbooks are mushrooming.
Continue Reading..

Behind Intel Core I5 661.

Core I5 661

While still in her Core name I5, I5 Core 661 (code name Clarkdale) actually does not differ too much with the previous I5 Core using a code name (code name) Lynnfield. The most visible difference is the Core I5 661 is a dual-core processor while the Core I5 processor 750 is a four-core (quad-core processor as other processors joined the ranks of bernamasandi Clarkdale).

In addition, this is the first processor to successfully integrate graphics processing into the "home" processor. The rest is the same for both Lynnfield and Clarkdale was built on the Nehalem architecture.

As seen in the physical appearance of this new processor, IHS behind him there are two core, which one is the core processor, while the other is the core of the graphic processor.
Continue Reading..

Tips Securing Wireless Network

Weaknesses / Threats Network Wifi (Wireless Fidelity.

Security issues is very important in computer networks, especially in wireless networks. The presence of a variety of vendors wireless products serving a variety of products at affordable prices contribute to drive widespread use of wireless technology. This wireless technology is not only suitable for use in office or business users. Home users can also use this technology to facilitate connectivity.

This paper is more intended to provide information on threats as well as quick and easy way to secure wireless networks. As already discussed in the beginning, wireless technology is relatively more vulnerable to security problems. As the name implies, wireless technology uses radio waves as a means of data transmission. Security processes will become more difficult because you can not see radio waves are used for data transmission.
Weaknesses of wireless networks can generally be divided into 2 types, namely the configuration weaknesses and shortcomings on the type of encryption used. One example of the causes for weaknesses in the current configuration to build a wireless network quite easily. Many vendors that provide facilities that enable the user or network admin, so often found in wireless that still use the default wireless configuration innate vendors. Often mounted on the wireless network is still using the default settings such as SSID congenital vendors, IP Address, remote management, DHCP enabled, channel frequency, without encryption and even user / password for the administration is still the standard wireless built factory.
WEP (Wired Equivalent Privacy) is a wireless security standard before, when it could be easily solved with a variety of tools that are available for free on the internet. WPA-PSK is considered to be a solution to replace WEP, now also has to be solved by the method of offline dictionary attack.

Some weaknesses in wireless networks that can be used to attack the attacker, among others:

1. Security Gap
Many wireless network users can not imagine what kind of dangers they are up to now are associated with the wireless access point (WAP), such as WLAN signals can be infiltrated by hackers. The following can be a threat in wireless networks, including:
- Sniffing to Eavesdrop
Package is access to data such as HTTP, email, and Iain, Iain, which is passed by wireless waves can be easily captured and analyzed by the attacker to use applications like Kismet packet sniffer.
- Denial of Service Attack
This type of attack is done by flooding (flooding) network so that wireless signals collide and produce packages are damaged.
- Man in the Middle Attack
Increased security with encryption and authentication techniques can still be penetrated with a way to find a weakness that the network protocol operation. One of them by exploiting the Address Resolution Protocol (ARP) in TCP / IP so that a clever hacker can take over the wireless network.
- Rogue / Unauthorized Access Point
Rogue APs can be installed by someone who wanted to disseminate / transmit again by a wireless transmission of illegal / unauthorized. The goal, the attacker can infiltrate the network through this wild AP.
- Configuring the access point that is not true
This condition is very much due to a lack of understanding in configuring the security system of AP.
Activities that threaten the security of wireless networks over done in a way that is known as Warchalking, WarDriving, WarFlying, WarSpamming, or WarSpying. The number of access point / base station that was built along with the low cost Internet connection to subscribe, cause hacking activities are often applied to Internet access illegally. Of course, without the need to pay.

2. Hide SSID
Many administrators hid Services Set Id (SSID) wireless network with the intention that they only know the SSID that can be connected to their network. This is not true, because the SSID is not disembuyikan perfectly. At a certain moment or especially when the client will connect (associate) or when it will decide itself (deauthentication) of a wireless network, then the client will continue to send SSID in plain text form (although using encryption), so if we intend to tap, be with easy to find information. Some tools that can be used to get the ssid that are hidden among others: kismet (kisMAC), ssid_jack (airjack), aircrack and much more. Kismet meupakan following applications which make sniffing cup.

3. WEP
Technology Wired Equivalency Privacy, or WEP is an encryption standard one of the most widely used. However, WEP encryption techniques are vulnerable, disturbing enough. That said, this security hole is very dangerous. No more important data that can pass safely. All data that has been encrypted will be solved even by the intruders. WEP weaknesses include:
• A key problem is weak, the RC4 algorithm used can be solved.
• WEP uses static keys
• Problem Initialization Vector (IV) WEP
• message integrity problems Cyclic Redundancy Check (CRC-32)
WEP consists of two levels, namely 64-bit key, and 128 bits. Actually, the secret key to the 64-bit WEP key is only 40 bits, 24 bits is an Initialization Vector (IV). Similarly, the 128-bit WEP key, the secret key consists of 104 bits.
Basically, each packet of data sent by using WEP encryption consists of the Initialization Vector (IV) and the encrypted data contains a checksum (section to check whether there are changes to the data sent). WEP weak point lies in the IV length 24 bits. An algorithm is usually used to calculate the encrypted code from the IV and the WEP key before it is sent over WLAN. Recipients will reconstruct the data with the data of IV and WEP key must have been determined. WEP standard recommends that the code is always different IV for each packet of data. Unfortunately, not all manufacturers do it.
WEP standard makers also did not mention how to make IV. In general, use of random generators. With the use of these generators, can be sure that sooner or later the same IV code will be used again. The researchers estimate that the same IV is used every packet of data 4000-5000. After learning the principles of the WEP, the intruder only needs to wait for the same IV used to then calculate the WEP key and then enter into the network. At this stage, the intruder can do anything in the wireless network. Software to do all these things can be obtained free on the Internet. With a little additional knowledge and training, open WEP encryption can be done easily. Armed with the software, anyone can learn to be an intruder.
Attack above takes time and packet enough, to shorten the time, the hackers usually do traffic injection. Traffic Injection is often done by collecting the ARP packet and then sends back to the access point. This resulted in the collection of initial vector easier and faster. Unlike the first and second attack, to attack traffic injection tools required specifications and specific applications that start are rarely found in stores, ranging from chipsets, firmware version, and versions of drivers, and not infrequently have to do patching of drivers and applications.
Applications that can be used to perform the packet capturing Airodump. Here is an example of applications that are airodump on mengcaptute WLAN packet. After sufficient data dicapture, conducted cracking process to find the WEP key. Applications that can be used to penetrate the Aircrack WEP encryption. Here is an example of successful application aircrak find the WEP key.

4. WPA-PSK or WPA2-PSK
WPA is a temporary security technology was created to replace the WEP key. There are two types of personal WPA (WPA-PSK), and WPA-RADIUS. We have already be on crack are WPA-PSK, ie the method of brute-force attack offline. Using brute force trial and error many words from a dictionary. This attack will succeed if the passphrase is used wireless does exist in the dictionary used the word hacker. To prevent any attacks on wireless security using WPA-PSK, use a passphrase that is long enough (one sentence).

5. MAC Filter
Almost every wireless access point or router is facilitated by the MAC filtering security. This is actually not much help in securing wireless communications, because the MAC address is very easy dispoofing or even altered. Tools ifconfig in OS Linux / Unix or various tools such as network utilitis, regedit, SMAC, machange on windows OS with easy to use for spoofing or changing the MAC address. Wifi still often found in offices and even the ISP (which is usually used by the cafe-cafe) that only use MAC filtering protection. By using applications such as wardriving kismet / aircrack tools kisMAC or can be obtained information of each client MAC addresses that are connected to an Access Point. After getting this information, we can connect to the Access point to change the MAC in accordance with the client earlier. In wireless networks, MAC address duplication does not result in conflict. Only requires a different IP client had. Here is a list of client MAC addresses that are connected to an access point by using the tools kismet. To change the network interface MAC address, just use simple tools like MAC makeup.

6. Captive Portal
Captive portals become a popular mechanism for community infrastructure and WiFi hotspot service that provides authentication for penguna infrastruktrur and IP flow management, such as, traffic shaping and bandwidth control, without the need to install specific applications on a user's computer. Authentication process can be performed safely through a regular web browser on the user side. Captive portals also have the potential to allow us to do things securely via SSL & IPSec and Rule Setting quality of service (QoS) per user, but the network retains the open nature of WiFi infrastructure.
Captive portal is actually a router or gateway machine to protect or not to allow any traffic to the user registration / authentication. Here's how the captive portal:
• Users with a wireless client allowed to connect wireless to get the IP address (DHCP)
• Block all traffic except that led to the captive portal (Registration / Web-based Authentication) which is located on the cable network.
• Redirect or steered all web traffic to a captive portal
• After the user registration or login, please allow access to the network (Internet)
Here's an example page from the captive portal login.
Some things to note, that the captive portal is only tracking client connections based on IP and MAC address after authenticating. This makes captive portal is used without authentication is possible because the IP and MAC address spoofing can be. The attack carried out by IP and MAC spoofing. MAC address spoofing as noted earlier. As for spoofing IP, required more effort that is by using ARP cache poisoning, by doing redirect traffic from clients who have previously connected.
Another attack that is easy enough to use Rogue AP, Access Point that is configured using the same components such information as the target AP SSID, BSSID to the channel frequency used. So when there is a client that will connect to the AP made by us, can we divert traffic to the real AP.
Not rare captive portal built on a hotspot has a weakness in its network configuration or design. For example, authentication is still using plain text (http), network management can be accessed via wireless (located on a network), and much more. Another weakness of the captive portal is that the communication traffic data or when it is authenticating (connected network) will be sent is still not encrypted, thus easily intercepted by hackers. For that we need to be careful to connect to the hotspot network, so try using a secure communication protocol such as https, pop3s, ssh, imaps ff.

7. Wardrive
Wardrive is an electronic fishing expedition to find a weak wireless networks. Most, most of these wireless networks are not even given a password or encryption to protect it. This activity is carried out to search for any network that will be the object of attack. Thus, we can conduct attacks on wireless networks that we have to target. Kegitan To do this, it only needs simple equipment. These activities generally aim to get an internet connection, but many are doing for the specific purposes ranging from a sense of curiosity, try try, research, lab work, crime etc..
Application for Site Survey / Wardrive "Netstumbler 0.4.0"
The first step in the experiment mengexploit a Wireless Network Access Point is found. Tools that can be used to do this is NetStumbler. These tools are used to couple easily find the Wireless Networking Signal. These tools can also measure the signal strength and noise generated because of the large reply Connectivitas to one Access Point.
The results of scanning and analysis of WLAN networks in the region surrounding cosmic kosan IT Telkom use tools NetStumbler:
Graph signal obtained using these tools in the SSID "ITTelkom":

8. Protocol Weaknesses in Wireless Networks
The weaknesses of wireless networks, is not free from weaknesses of various kinds of protocols used, among others:

8.1 EAPOL (Extensible Authentication Protocol).
EAPOL is a common type of protocol used for wireless authentication and point-to-point connection. As the official client sends the packet to the AP. AP receive and give responses, or the AP has made the authorization process. EAPOL protocol, there is a gap that can be used to obtain authentication value.
However, there are only authentication value at the beginning of the official client communication with the AP. Furthermore, if already connected, EAPOL protocol did not appear again, except during the next 10 thousand packages appeared. A hacker can send (injection) EAPOL packet containing the result of spoofing spoofing addresses that have been harmonized SSID, MAC Address and IP Address of the source / destination.
Official client sends EAPOL packet to get a response from the AP for authentication process. Furthermore, the AP will check to see ID Card from the client. Attacker using the protocol weakness by creating a fake ID card in order to be allowed entry by the AP and get a number to enter the same room.

8.2 Beacon Management.
Beacon Management is one type of protocol used by each AP to transmit RF signals to preach the existence of AP. When done Beacon protocol capture and decode it, would get the fact that in each of his transmision rate, Beacon management sent some information, such as SSID, encryption type, channel, MAC Address, and Iain, Iain.
Weakness (vulnerability) that can be used from this type of protocol is as follows. An attacker will capture client management package Beacon emitted by the AP. Furthermore, the attacker client will transmit back to the Beacon management package. Typically, the value of Beacon emitted by AP for 100ms. If the attacker caught Beacon client AP, then re-emit the Beacon, Beacon 2 will be the same. Source senders different, but contains the same information. This means that there are two APs the same SSID contains information, MAC Address, the same. As a result, the client can not communicate with the actual AP, unless the attacker to stop sending such a package Beacon.

8.3 Deauthentkation / Disassociation Protocol
The term commonly used to take advantage of this gap is called the protocol Deauthentication Broadcast Attack. This attack will flood the packet Deauthentication WLAN with wireless service so screwed up in the client. This type of attack is the most dangerous attack because it would break the connection target client or the client is associated with AP Attacker disconnection request by utilizing Deauthentication / Disassociation a direct response by the AP. If there is an ISP company affected by this attack, it will be a lot of complaints from customers due to rupture the entire client network.
Applications that can be used for this attack is Aireplay. Here is an example of applications of work being done Aircrak Broadcast Deauthentication Attack.

8.4 RF Signal Jamming
RF signals are electromagnetic waves that are used to exchange information over the air from one node to another node. Currently, the RF signals are widely used, such as for transmitting FM radio waves, television waves, or as a means of sending data over wireless networks.
RF signals have the advantage, but also has weaknesses. RF signals easily disturbed by RF-based systems other external, such as cordless phones, microwaves, Bluetooth devices, and Iainnya. When these devices are used simultaneously, the performance of wireless networks can be decreased significantly because of competition in the use of the same medium. In the end, such interference can cause errors in the bits of information that is being sent so that there re-transmission and delay to the user.

8.5 Probe-Request Management
When the first client attempts to connect itself with the AP, the AP will respond to the probe, to check whether the client request to enter the wireless network are allowed or not. Gap which can be used by the attacker is to manipulate the probe packet-respond. Next, the attacker made a request-respond probes. If the request is done by sending a request as much as possible, for example, 500 packets in 1 second, the AP will not be able to respond to the package so much. That is, AP no longer able to communicate with other clients. This paper is more intended to provide information on threats as well as quick and easy way to secure wireless networks. As already discussed in the beginning, wireless technology is relatively more vulnerable to security problems. As the name implies, wireless technology uses radio waves as a means of data transmission. Security processes will become more difficult because you can not see radio waves are used for data transmission.
Weaknesses of wireless networks can generally be divided into 2 types, namely the configuration weaknesses and shortcomings on the type of encryption used. One example of the causes for weaknesses in the current configuration to build a wireless network quite easily. Many vendors that provide facilities that enable the user or network admin, so often found in wireless that still use the default wireless configuration innate vendors. Often mounted on the wireless network is still using the default settings such as SSID congenital vendors, IP Address, remote management, DHCP enabled, channel frequency, without encryption and even user / password for the administration is still the standard wireless built factory.
WEP (Wired Equivalent Privacy) is a wireless security standard before, when it could be easily solved with a variety of tools that are available for free on the internet. WPA-PSK is considered to be a solution to replace WEP, now also has to be solved by the method of offline dictionary attack.

Some weaknesses in wireless networks that can be used to attack the attacker, among others:

1. Security Gap
Many wireless network users can not imagine what kind of dangers they are up to now are associated with the wireless access point (WAP), such as WLAN signals can be infiltrated by hackers. The following can be a threat in wireless networks, including:
- Sniffing to Eavesdrop
Package is access to data such as HTTP, email, and Iain, Iain, which is passed by wireless waves can be easily captured and analyzed by the attacker to use applications like Kismet packet sniffer.
- Denial of Service Attack
This type of attack is done by flooding (flooding) network so that wireless signals collide and produce packages are damaged.
- Man in the Middle Attack
Increased security with encryption and authentication techniques can still be penetrated with a way to find a weakness that the network protocol operation. One of them by exploiting the Address Resolution Protocol (ARP) in TCP / IP so that a clever hacker can take over the wireless network.
- Rogue / Unauthorized Access Point
Rogue APs can be installed by someone who wanted to disseminate / transmit again by a wireless transmission of illegal / unauthorized. The goal, the attacker can infiltrate the network through this wild AP.
- Configuring the access point that is not true
This condition is very much due to a lack of understanding in configuring the security system of AP.
Activities that threaten the security of wireless networks over done in a way that is known as Warchalking, WarDriving, WarFlying, WarSpamming, or WarSpying. The number of access point / base station that was built along with the low cost Internet connection to subscribe, cause hacking activities are often applied to Internet access illegally. Of course, without the need to pay.

2. Hide SSID
Many administrators hid Services Set Id (SSID) wireless network with the intention that they only know the SSID that can be connected to their network. This is not true, because the SSID is not disembuyikan perfectly. At a certain moment or especially when the client will connect (associate) or when it will decide itself (deauthentication) of a wireless network, then the client will continue to send SSID in plain text form (although using encryption), so if we intend to tap, be with easy to find information. Some tools that can be used to get the ssid that are hidden among others: kismet (kisMAC), ssid_jack (airjack), aircrack and much more. Kismet meupakan following applications which make sniffing cup.

3. WEP
Technology Wired Equivalency Privacy, or WEP is an encryption standard one of the most widely used. However, WEP encryption techniques are vulnerable, disturbing enough. That said, this security hole is very dangerous. No more important data that can pass safely. All data that has been encrypted will be solved even by the intruders. WEP weaknesses include:
• A key problem is weak, the RC4 algorithm used can be solved.
• WEP uses static keys
• Problem Initialization Vector (IV) WEP
• message integrity problems Cyclic Redundancy Check (CRC-32)
WEP consists of two levels, namely 64-bit key, and 128 bits. Actually, the secret key to the 64-bit WEP key is only 40 bits, 24 bits is an Initialization Vector (IV). Similarly, the 128-bit WEP key, the secret key consists of 104 bits.
Basically, each packet of data sent by using WEP encryption consists of the Initialization Vector (IV) and the encrypted data contains a checksum (section to check whether there are changes to the data sent). WEP weak point lies in the IV length 24 bits. An algorithm is usually used to calculate the encrypted code from the IV and the WEP key before it is sent over WLAN. Recipients will reconstruct the data with the data of IV and WEP key must have been determined. WEP standard recommends that the code is always different IV for each packet of data. Unfortunately, not all manufacturers do it.
WEP standard makers also did not mention how to make IV. In general, use of random generators. With the use of these generators, can be sure that sooner or later the same IV code will be used again. The researchers estimate that the same IV is used every packet of data 4000-5000. After learning the principles of the WEP, the intruder only needs to wait for the same IV used to then calculate the WEP key and then enter into the network. At this stage, the intruder can do anything in the wireless network. Software to do all these things can be obtained free on the Internet. With a little additional knowledge and training, open WEP encryption can be done easily. Armed with the software, anyone can learn to be an intruder.
Attack above takes time and packet enough, to shorten the time, the hackers usually do traffic injection. Traffic Injection is often done by collecting the ARP packet and then sends back to the access point. This resulted in the collection of initial vector easier and faster. Unlike the first and second attack, to attack traffic injection tools required specifications and specific applications that start are rarely found in stores, ranging from chipsets, firmware version, and versions of drivers, and not infrequently have to do patching of drivers and applications.
Applications that can be used to perform the packet capturing Airodump. Here is an example of applications that are airodump on mengcaptute WLAN packet. After sufficient data dicapture, conducted cracking process to find the WEP key. Applications that can be used to penetrate the Aircrack WEP encryption. Here is an example of successful application aircrak find the WEP key.

4. WPA-PSK or WPA2-PSK
WPA is a temporary security technology was created to replace the WEP key. There are two types of personal WPA (WPA-PSK), and WPA-RADIUS. We have already be on crack are WPA-PSK, ie the method of brute-force attack offline. Using brute force trial and error many words from a dictionary. This attack will succeed if the passphrase is used wireless does exist in the dictionary used the word hacker. To prevent any attacks on wireless security using WPA-PSK, use a passphrase that is long enough (one sentence).

5. MAC Filter
Almost every wireless access point or router is facilitated by the MAC filtering security. This is actually not much help in securing wireless communications, because the MAC address is very easy dispoofing or even altered. Tools ifconfig in OS Linux / Unix or various tools such as network utilitis, regedit, SMAC, machange on windows OS with easy to use for spoofing or changing the MAC address. Wifi still often found in offices and even the ISP (which is usually used by the cafe-cafe) that only use MAC filtering protection. By using applications such as wardriving kismet / aircrack tools kisMAC or can be obtained information of each client MAC addresses that are connected to an Access Point. After getting this information, we can connect to the Access point to change the MAC in accordance with the client earlier. In wireless networks, MAC address duplication does not result in conflict. Only requires a different IP client had. Here is a list of client MAC addresses that are connected to an access point by using the tools kismet. To change the network interface MAC address, just use simple tools like MAC makeup.

6. Captive Portal
Captive portals become a popular mechanism for community infrastructure and WiFi hotspot service that provides authentication for penguna infrastruktrur and IP flow management, such as, traffic shaping and bandwidth control, without the need to install specific applications on a user's computer. Authentication process can be performed safely through a regular web browser on the user side. Captive portals also have the potential to allow us to do things securely via SSL & IPSec and Rule Setting quality of service (QoS) per user, but the network retains the open nature of WiFi infrastructure.
Captive portal is actually a router or gateway machine to protect or not to allow any traffic to the user registration / authentication. Here's how the captive portal:
• Users with a wireless client allowed to connect wireless to get the IP address (DHCP)
• Block all traffic except that led to the captive portal (Registration / Web-based Authentication) which is located on the cable network.
• Redirect or steered all web traffic to a captive portal
• After the user registration or login, please allow access to the network (Internet)
Here's an example page from the captive portal login.
Some things to note, that the captive portal is only tracking client connections based on IP and MAC address after authenticating. This makes captive portal is used without authentication is possible because the IP and MAC address spoofing can be. The attack carried out by IP and MAC spoofing. MAC address spoofing as noted earlier. As for spoofing IP, required more effort that is by using ARP cache poisoning, by doing redirect traffic from clients who have previously connected.
Another attack that is easy enough to use Rogue AP, Access Point that is configured using the same components such information as the target AP SSID, BSSID to the channel frequency used. So when there is a client that will connect to the AP made by us, can we divert traffic to the real AP.
Not rare captive portal built on a hotspot has a weakness in its network configuration or design. For example, authentication is still using plain text (http), network management can be accessed via wireless (located on a network), and much more. Another weakness of the captive portal is that the communication traffic data or when it is authenticating (connected network) will be sent is still not encrypted, thus easily intercepted by hackers. For that we need to be careful to connect to the hotspot network, so try using a secure communication protocol such as https, pop3s, ssh, imaps ff.

7. Wardrive
Wardrive is an electronic fishing expedition to find a weak wireless networks. Most, most of these wireless networks are not even given a password or encryption to protect it. This activity is carried out to search for any network that will be the object of attack. Thus, we can conduct attacks on wireless networks that we have to target. Kegitan To do this, it only needs simple equipment. These activities generally aim to get an internet connection, but many are doing for the specific purposes ranging from a sense of curiosity, try try, research, lab work, crime etc..
Application for Site Survey / Wardrive "Netstumbler 0.4.0"
The first step in the experiment mengexploit a Wireless Network Access Point is found. Tools that can be used to do this is NetStumbler. These tools are used to couple easily find the Wireless Networking Signal. These tools can also measure the signal strength and noise generated because of the large reply Connectivitas to one Access Point.
The results of scanning and analysis of WLAN networks in the region surrounding cosmic kosan IT Telkom use tools NetStumbler:
Graph signal obtained using these tools in the SSID "ITTelkom":

8. Protocol Weaknesses in Wireless Networks
The weaknesses of wireless networks, is not free from weaknesses of various kinds of protocols used, among others:

8.1 EAPOL (Extensible Authentication Protocol).
EAPOL is a common type of protocol used for wireless authentication and point-to-point connection. As the official client sends the packet to the AP. AP receive and give responses, or the AP has made the authorization process. EAPOL protocol, there is a gap that can be used to obtain authentication value.
However, there are only authentication value at the beginning of the official client communication with the AP. Furthermore, if already connected, EAPOL protocol did not appear again, except during the next 10 thousand packages appeared. A hacker can send (injection) EAPOL packet containing the result of spoofing spoofing addresses that have been harmonized SSID, MAC Address and IP Address of the source / destination.
Official client sends EAPOL packet to get a response from the AP for authentication process. Furthermore, the AP will check to see ID Card from the client. Attacker using the protocol weakness by creating a fake ID card in order to be allowed entry by the AP and get a number to enter the same room.

8.2 Beacon Management.
Beacon Management is one type of protocol used by each AP to transmit RF signals to preach the existence of AP. When done Beacon protocol capture and decode it, would get the fact that in each of his transmision rate, Beacon management sent some information, such as SSID, encryption type, channel, MAC Address, and Iain, Iain.
Weakness (vulnerability) that can be used from this type of protocol is as follows. An attacker will capture client management package Beacon emitted by the AP. Furthermore, the attacker client will transmit back to the Beacon management package. Typically, the value of Beacon emitted by AP for 100ms. If the attacker caught Beacon client AP, then re-emit the Beacon, Beacon 2 will be the same. Source senders different, but contains the same information. This means that there are two APs the same SSID contains information, MAC Address, the same. As a result, the client can not communicate with the actual AP, unless the attacker to stop sending such a package Beacon.

8.3 Deauthentkation / Disassociation Protocol
The term commonly used to take advantage of this gap is called the protocol Deauthentication Broadcast Attack. This attack will flood the packet Deauthentication WLAN with wireless service so screwed up in the client. This type of attack is the most dangerous attack because it would break the connection target client or the client is associated with AP Attacker disconnection request by utilizing Deauthentication / Disassociation a direct response by the AP. If there is an ISP company affected by this attack, it will be a lot of complaints from customers due to rupture the entire client network.
Applications that can be used for this attack is Aireplay. Here is an example of applications of work being done Aircrak Broadcast Deauthentication Attack.

8.4 RF Signal Jamming
RF signals are electromagnetic waves that are used to exchange information over the air from one node to another node. Currently, the RF signals are widely used, such as for transmitting FM radio waves, television waves, or as a means of sending data over wireless networks.
RF signals have the advantage, but also has weaknesses. RF signals easily disturbed by RF-based systems other external, such as cordless phones, microwaves, Bluetooth devices, and Iainnya. When these devices are used simultaneously, the performance of wireless networks can be decreased significantly because of competition in the use of the same medium. In the end, such interference can cause errors in the bits of information that is being sent so that there re-transmission and delay to the user.

8.5 Probe-Request Management
When the first client attempts to connect itself with the AP, the AP will respond to the probe, to check whether the client request to enter the wireless network are allowed or not. Gap which can be used by the attacker is to manipulate the probe packet-respond. Next, the attacker made a request-respond probes. If the request is done by sending a request as much as possible, for example, 500 packets in 1 second, the AP will not be able to respond to the package so much. That is, AP no longer able to communicate with other clients. This paper is more intended to provide information on threats as well as quick and easy way to secure wireless networks. As already discussed in the beginning, wireless technology is relatively more vulnerable to security problems. As the name implies, wireless technology uses radio waves as a means of data transmission. Security processes will become more difficult because you can not see radio waves are used for data transmission.
Weaknesses of wireless networks can generally be divided into 2 types, namely the configuration weaknesses and shortcomings on the type of encryption used. One example of the causes for weaknesses in the current configuration to build a wireless network quite easily. Many vendors that provide facilities that enable the user or network admin, so often found in wireless that still use the default wireless configuration innate vendors. Often mounted on the wireless network is still using the default settings such as SSID congenital vendors, IP Address, remote management, DHCP enabled, channel frequency, without encryption and even user / password for the administration is still the standard wireless built factory.
WEP (Wired Equivalent Privacy) is a wireless security standard before, when it could be easily solved with a variety of tools that are available for free on the internet. WPA-PSK is considered to be a solution to replace WEP, now also has to be solved by the method of offline dictionary attack.

Some weaknesses in wireless networks that can be used to attack the attacker, among others:

1. Security Gap
Many wireless network users can not imagine what kind of dangers they are up to now are associated with the wireless access point (WAP), such as WLAN signals can be infiltrated by hackers. The following can be a threat in wireless networks, including:
- Sniffing to Eavesdrop
Package is access to data such as HTTP, email, and Iain, Iain, which is passed by wireless waves can be easily captured and analyzed by the attacker to use applications like Kismet packet sniffer.
- Denial of Service Attack
This type of attack is done by flooding (flooding) network so that wireless signals collide and produce packages are damaged.
- Man in the Middle Attack
Increased security with encryption and authentication techniques can still be penetrated with a way to find a weakness that the network protocol operation. One of them by exploiting the Address Resolution Protocol (ARP) in TCP / IP so that a clever hacker can take over the wireless network.
- Rogue / Unauthorized Access Point
Rogue APs can be installed by someone who wanted to disseminate / transmit again by a wireless transmission of illegal / unauthorized. The goal, the attacker can infiltrate the network through this wild AP.
- Configuring the access point that is not true
This condition is very much due to a lack of understanding in configuring the security system of AP.
Activities that threaten the security of wireless networks over done in a way that is known as Warchalking, WarDriving, WarFlying, WarSpamming, or WarSpying. The number of access point / base station that was built along with the low cost Internet connection to subscribe, cause hacking activities are often applied to Internet access illegally. Of course, without the need to pay.

2. Hide SSID
Many administrators hid Services Set Id (SSID) wireless network with the intention that they only know the SSID that can be connected to their network. This is not true, because the SSID is not disembuyikan perfectly. At a certain moment or especially when the client will connect (associate) or when it will decide itself (deauthentication) of a wireless network, then the client will continue to send SSID in plain text form (although using encryption), so if we intend to tap, be with easy to find information. Some tools that can be used to get the ssid that are hidden among others: kismet (kisMAC), ssid_jack (airjack), aircrack and much more. Kismet meupakan following applications which make sniffing cup.

3. WEP
Technology Wired Equivalency Privacy, or WEP is an encryption standard one of the most widely used. However, WEP encryption techniques are vulnerable, disturbing enough. That said, this security hole is very dangerous. No more important data that can pass safely. All data that has been encrypted will be solved even by the intruders. WEP weaknesses include:
• A key problem is weak, the RC4 algorithm used can be solved.
• WEP uses static keys
• Problem Initialization Vector (IV) WEP
• message integrity problems Cyclic Redundancy Check (CRC-32)
WEP consists of two levels, namely 64-bit key, and 128 bits. Actually, the secret key to the 64-bit WEP key is only 40 bits, 24 bits is an Initialization Vector (IV). Similarly, the 128-bit WEP key, the secret key consists of 104 bits.
Basically, each packet of data sent by using WEP encryption consists of the Initialization Vector (IV) and the encrypted data contains a checksum (section to check whether there are changes to the data sent). WEP weak point lies in the IV length 24 bits. An algorithm is usually used to calculate the encrypted code from the IV and the WEP key before it is sent over WLAN. Recipients will reconstruct the data with the data of IV and WEP key must have been determined. WEP standard recommends that the code is always different IV for each packet of data. Unfortunately, not all manufacturers do it.
WEP standard makers also did not mention how to make IV. In general, use of random generators. With the use of these generators, can be sure that sooner or later the same IV code will be used again. The researchers estimate that the same IV is used every packet of data 4000-5000. After learning the principles of the WEP, the intruder only needs to wait for the same IV used to then calculate the WEP key and then enter into the network. At this stage, the intruder can do anything in the wireless network. Software to do all these things can be obtained free on the Internet. With a little additional knowledge and training, open WEP encryption can be done easily. Armed with the software, anyone can learn to be an intruder.
Attack above takes time and packet enough, to shorten the time, the hackers usually do traffic injection. Traffic Injection is often done by collecting the ARP packet and then sends back to the access point. This resulted in the collection of initial vector easier and faster. Unlike the first and second attack, to attack traffic injection tools required specifications and specific applications that start are rarely found in stores, ranging from chipsets, firmware version, and versions of drivers, and not infrequently have to do patching of drivers and applications.
Applications that can be used to perform the packet capturing Airodump. Here is an example of applications that are airodump on mengcaptute WLAN packet. After sufficient data dicapture, conducted cracking process to find the WEP key. Applications that can be used to penetrate the Aircrack WEP encryption. Here is an example of successful application aircrak find the WEP key.

4. WPA-PSK or WPA2-PSK
WPA is a temporary security technology was created to replace the WEP key. There are two types of personal WPA (WPA-PSK), and WPA-RADIUS. We have already be on crack are WPA-PSK, ie the method of brute-force attack offline. Using brute force trial and error many words from a dictionary. This attack will succeed if the passphrase is used wireless does exist in the dictionary used the word hacker. To prevent any attacks on wireless security using WPA-PSK, use a passphrase that is long enough (one sentence).

5. MAC Filter
Almost every wireless access point or router is facilitated by the MAC filtering security. This is actually not much help in securing wireless communications, because the MAC address is very easy dispoofing or even altered. Tools ifconfig in OS Linux / Unix or various tools such as network utilitis, regedit, SMAC, machange on windows OS with easy to use for spoofing or changing the MAC address. Wifi still often found in offices and even the ISP (which is usually used by the cafe-cafe) that only use MAC filtering protection. By using applications such as wardriving kismet / aircrack tools kisMAC or can be obtained information of each client MAC addresses that are connected to an Access Point. After getting this information, we can connect to the Access point to change the MAC in accordance with the client earlier. In wireless networks, MAC address duplication does not result in conflict. Only requires a different IP client had. Here is a list of client MAC addresses that are connected to an access point by using the tools kismet. To change the network interface MAC address, just use simple tools like MAC makeup.

6. Captive Portal
Captive portals become a popular mechanism for community infrastructure and WiFi hotspot service that provides authentication for penguna infrastruktrur and IP flow management, such as, traffic shaping and bandwidth control, without the need to install specific applications on a user's computer. Authentication process can be performed safely through a regular web browser on the user side. Captive portals also have the potential to allow us to do things securely via SSL & IPSec and Rule Setting quality of service (QoS) per user, but the network retains the open nature of WiFi infrastructure.
Captive portal is actually a router or gateway machine to protect or not to allow any traffic to the user registration / authentication. Here's how the captive portal:
• Users with a wireless client allowed to connect wireless to get the IP address (DHCP)
• Block all traffic except that led to the captive portal (Registration / Web-based Authentication) which is located on the cable network.
• Redirect or steered all web traffic to a captive portal
• After the user registration or login, please allow access to the network (Internet)
Here's an example page from the captive portal login.
Some things to note, that the captive portal is only tracking client connections based on IP and MAC address after authenticating. This makes captive portal is used without authentication is possible because the IP and MAC address spoofing can be. The attack carried out by IP and MAC spoofing. MAC address spoofing as noted earlier. As for spoofing IP, required more effort that is by using ARP cache poisoning, by doing redirect traffic from clients who have previously connected.
Another attack that is easy enough to use Rogue AP, Access Point that is configured using the same components such information as the target AP SSID, BSSID to the channel frequency used. So when there is a client that will connect to the AP made by us, can we divert traffic to the real AP.
Not rare captive portal built on a hotspot has a weakness in its network configuration or design. For example, authentication is still using plain text (http), network management can be accessed via wireless (located on a network), and much more. Another weakness of the captive portal is that the communication traffic data or when it is authenticating (connected network) will be sent is still not encrypted, thus easily intercepted by hackers. For that we need to be careful to connect to the hotspot network, so try using a secure communication protocol such as https, pop3s, ssh, imaps ff.

7. Wardrive
Wardrive is an electronic fishing expedition to find a weak wireless networks. Most, most of these wireless networks are not even given a password or encryption to protect it. This activity is carried out to search for any network that will be the object of attack. Thus, we can conduct attacks on wireless networks that we have to target. Kegitan To do this, it only needs simple equipment. These activities generally aim to get an internet connection, but many are doing for the specific purposes ranging from a sense of curiosity, try try, research, lab work, crime etc..
Application for Site Survey / Wardrive "Netstumbler 0.4.0"
The first step in the experiment mengexploit a Wireless Network Access Point is found. Tools that can be used to do this is NetStumbler. These tools are used to couple easily find the Wireless Networking Signal. These tools can also measure the signal strength and noise generated because of the large reply Connectivitas to one Access Point.
The results of scanning and analysis of WLAN networks in the region surrounding cosmic kosan IT Telkom use tools NetStumbler:
Graph signal obtained using these tools in the SSID "ITTelkom":

8. Protocol Weaknesses in Wireless Networks
The weaknesses of wireless networks, is not free from weaknesses of various kinds of protocols used, among others:

8.1 EAPOL (Extensible Authentication Protocol).
EAPOL is a common type of protocol used for wireless authentication and point-to-point connection. As the official client sends the packet to the AP. AP receive and give responses, or the AP has made the authorization process. EAPOL protocol, there is a gap that can be used to obtain authentication value.
However, there are only authentication value at the beginning of the official client communication with the AP. Furthermore, if already connected, EAPOL protocol did not appear again, except during the next 10 thousand packages appeared. A hacker can send (injection) EAPOL packet containing the result of spoofing spoofing addresses that have been harmonized SSID, MAC Address and IP Address of the source / destination.
Official client sends EAPOL packet to get a response from the AP for authentication process. Furthermore, the AP will check to see ID Card from the client. Attacker using the protocol weakness by creating a fake ID card in order to be allowed entry by the AP and get a number to enter the same room.

8.2 Beacon Management.
Beacon Management is one type of protocol used by each AP to transmit RF signals to preach the existence of AP. When done Beacon protocol capture and decode it, would get the fact that in each of his transmision rate, Beacon management sent some information, such as SSID, encryption type, channel, MAC Address, and Iain, Iain.
Weakness (vulnerability) that can be used from this type of protocol is as follows. An attacker will capture client management package Beacon emitted by the AP. Furthermore, the attacker client will transmit back to the Beacon management package. Typically, the value of Beacon emitted by AP for 100ms. If the attacker caught Beacon client AP, then re-emit the Beacon, Beacon 2 will be the same. Source senders different, but contains the same information. This means that there are two APs the same SSID contains information, MAC Address, the same. As a result, the client can not communicate with the actual AP, unless the attacker to stop sending such a package Beacon.

8.3 Deauthentkation / Disassociation Protocol
The term commonly used to take advantage of this gap is called the protocol Deauthentication Broadcast Attack. This attack will flood the packet Deauthentication WLAN with wireless service so screwed up in the client. This type of attack is the most dangerous attack because it would break the connection target client or the client is associated with AP Attacker disconnection request by utilizing Deauthentication / Disassociation a direct response by the AP. If there is an ISP company affected by this attack, it will be a lot of complaints from customers due to rupture the entire client network.
Applications that can be used for this attack is Aireplay. Here is an example of applications of work being done Aircrak Broadcast Deauthentication Attack.

8.4 RF Signal Jamming
RF signals are electromagnetic waves that are used to exchange information over the air from one node to another node. Currently, the RF signals are widely used, such as for transmitting FM radio waves, television waves, or as a means of sending data over wireless networks.
RF signals have the advantage, but also has weaknesses. RF signals easily disturbed by RF-based systems other external, such as cordless phones, microwaves, Bluetooth devices, and Iainnya. When these devices are used simultaneously, the performance of wireless networks can be decreased significantly because of competition in the use of the same medium. In the end, such interference can cause errors in the bits of information that is being sent so that there re-transmission and delay to the user.

8.5 Probe-Request Management
When the first client attempts to connect itself with the AP, the AP will respond to the probe, to check whether the client request to enter the wireless network are allowed or not. Gap which can be used by the attacker is to manipulate the probe packet-respond. Next, the attacker made a request-respond probes. If the request is done by sending a request as much as possible, for example, 500 packets in 1 second, the AP will not be able to respond to the package so much. That is, AP no longer able to communicate with other clients.
Continue Reading..

Best Hacker in the World

Hackers are people who study, analyze, and then if wanted, can create, modify, or even exploit the system contained in a device such as computer software and computer hardware such as computer programs, administrative and other matters, particularly security.
Here are some profiles 14 World Best Hacker for now:

1. Kevin Mitnick
Kevin was the first hacker to face plastered in
poster "FBI Most Wanted".
Kevin is also a "Master of Deception" and has written a book entitled "The Art of Deception".
This book explains various social engineering techniques to gain access to the system.

2. Linus Torvalds
A true hacker, to develop the Linux operating system is a combination of "LINUS MINIX".
Linux operating system has become the operating system "standard" hacker.
Together with Richard Stallman with the GNU-Linux version of its initial build and collaborate with programmers, developper and hackers around the world to develop the Linux kernel.

3. John Draper
Inventor Herz 2600 single note using a plastic whistle from a cereal box prize.
Is the pioneer of the use of 2600 Hz tone and is known as Phone Phreaker (Phreaker, read: frieker)
2600 Hz tone used as a tool to make free phone call.
In development, 2600 Hz tone is no longer made with a plastic whistle, but uses a tool called "Blue Box".

4. Mark Abene
As one of the "Master of Deception" phiber optics, inspiring thousands of teenagers to learn the phone's internal system state. Optical Phiber also named as one of 100 people a genius by New York Magazine.
Using Apple computers, Timex Sinclair and Commodore 64.
His first computer was a Radio Shack TRS-80 (trash-80).

5. Robert Morris
A child of the scientists the National Computer Security Center, which is part of the National Security Agencies (NSA).
First time writing such Internet Worm momental in 1988.
Meng-infected thousands of computers connected in a network.

6. Richard Stallman
One of the "Old School Hackers", working at the MIT Artificial Intelligence lab.
Was disturbed by commercial software and copyright and personal.
Eventually established GNU (read: guhNew) which stands for GNU is NOT UNIX.
Using the very first computer in 1969 at the IBM New York Scintific Center at the age of 16 years.

7. Kevin Poulsen
Digital fraud against the radio station KIIS-FM, ensuring that it is a caller to win a porsche 102 and 944 S2.

8. Ian Murphy
Ian 3 people Muphy with colleagues, hacking into the computer AT & T and composed settings of his internal clock.
This results in the user community telfon get a discount "midnight" at the end of the day, and who had waited until midnight to pay the higher bills.

9. Vladimir Levin
Graduates St. Tekhnologichesky Petersburg University.
Citibank computer cheating and profit 10 million dollars.
Interpol arrested at Heathrow Airport in 1995

10. Steve Wozniak
Build an Apple computer and use the "blue box" untukkepentingan own.

11. Tsutomu Shimomura
Traces captured Kevin Mitnick.

12. Dennis Ritchie and Ken Thomson
Dennis Ritchie is a writer in C, along with Ken Thompson wrote a UNIX operating system is elegant.

13. Eric Steven Raymond
Mr. hackers. A pioneer hacktivist and opensource movement.
Writing a lot of hacking guide, one of them is: "How To Become A Hacker" and "The new hacker's Dictionary".
So phenomenal and is known by the whole community hacking world.
According to Eric, "the world has a lot of interesting problems to be solved danmenanti".

14. Johan Helsingius
Operate the most popular anonymous remailer in the world.
Continue Reading..

Windows XP - Manage Access Rights Files or Folders to share.

In Windows XP, sharing files or folders can be done in various ways. If you choose a simple way, you can instantly share files or folders with everyone who is in a network or workgroup. In addition, through the Windows XP Professional, you also can set permissions of files or folders to share to certain users or groups. To do this, you must first change the default configuration.

Tip To change the configuration, you can follow these steps. First of all, you need to go into the Control Panel window and click "Folder Options". Furthermore, Windows XP will display the Folder Options window. There, you can select the tab "View" and look for the option "Use simple file sharing (Recommended) which you can find under the area" Advanced set ting ". Uncheck the box located in the option "Use simple file sharing". Furthermore, you can close this step by clicking the "OK" and "Apply".

Furthermore, to assign access rights to files or folders to share, you can set the following manner. Explore the files or folders that have been shared through Windows Explorer. Right-click the file or folder context menu and select "Properties". Furthermore, through the window that appears, select the tab "Security" and there you can specify access rights to files or folders that have been shared. To note, this step can only be done on the hard disk formatted using the NTFS system and you must be a principal owner of the file or folder to share.
Continue Reading..

Windows XP - Search System Folders and Hidden Files.

To find a number of folders and system files are hidden by Windows XP, you no longer need to bother. The easiest way is through the Search function to enable the search option files and folders hidden. How do I?

Tips First, you need to activate the Search Results window. Way, click the "Start | Search". Furthermore, through the menu on the right of Search Result window, you can access the option "All files and folders".

Now, the right menu Search Result window has changed and there you can access the "More advanced options". The next step is to enable the search option files and folders hidden. For that, you can give a check in the box "Search hidden files and folders". Now, you can easily do a search folder and system files are hidden by Windows XP.
Continue Reading..