Fake AP

[bobzilla]

"If one access point is good, 53,000 must be better."

http://www.blackalchemy.to/Projects/fakeap/fake-ap.html

(from BAWUG)

[izzy4505]

Hmmmmm, hopefully people don't start using this rediculously, or there goes all the fun in wardriving.

[kai]

I hate to post on an old topic, but I've recently discovered that Home Depot uses this (or an application similar to it) to generate fake APs with the SSID of "orange."

Just a little FYI, but I wonder why they would do that? What does Home Depot have to gain by doing this (or lose by not doing it)?

[izzy4505]

Are you sure they're using that and not just a crapload of APs? Last time I was in a home depot looking around they had one about every 30 feet.

[kai]

NS logs it as a Fake AP.

My real question is that why would they need a fake ap generator. Or even it isn't a fake ap generator (and NS is incorrect), why do they need cisco WAPs every 30 feet?

It just isn't adding up in my little head.

[izzy4505]

NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.

[Mick]

Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138

[jmedica01]

Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138

Orange (The Home depot) ontario that is, donno what their considered
in the US

[hratch]

sorry folks. Izzy is correct on this one.

Home Depot uses SSID orange

Peer to Peer networks will spew a bunch of mac addys in NS

trust me. i have seen more than a few "orange" ssid's across this country.

[poacher]

From the original link I do like their description of war drivers:

"Fake AP confuses Wardrivers, NetStumblers, Script Kiddies, and other undesirables."

So I'm undesirable. Well now I finally understand why she left me. [/i]

[Dr_Dropper]

NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.

Yeah i use CommView for wifi quite a bit and it has a nice little tool that will identify the manufacturer of a network adapters mac address from only the first three octets. its come in handy more than a few times.