01-19-2009, 09:57 AM #11
I mean no disrespect, in fact quite the opposite, when I say
Thanks for a bit of reality check. This is a smallish locally owned company that sublets space and services to other businesses (executive business suites) so I'm not sure how tightly their personnel structure is set up.
01-19-2009, 01:05 PM #12
In all seriousness, what she claims which is stealing IP addresses implies that the tenant has knowledge of someone doing this.
I agree that if they are just piggybacking on the network, then the network manager (whoever that may be) isnt aware of even basic network security principles.
Please before you contact the FBI find out if this is just some person piggybacking, or if it someone actually using an IP address for some malicious purpose
If its the former, well integrator has covered the things you can do for basic network security ( if whomever is managing the network isnt 100% sure they can do these things, please hire someone to do this job, it needs to be done right), and his list isnt a to do list, its a must do list.
If its the latter, then i do stand by my suggestion
01-19-2009, 03:59 PM #13
One of our Ops Managers will be out of Wednesday to look into it. He is very knowledgeable in this area and also has the appropriate contacts if necessary. Thanks again for all the suggestions.
01-20-2009, 11:01 AM #14
While Nate is correct and I also doubt there's any "theft of IP addresses", I'd only modify his observations slightly concerning WPA to say that you can crack some but not others. The passphrase quality is the key to WPA security. Aside from social engineering techniques, cracking WPA ultimately comes down to using a brute force or "dictionary" hack against a captured passphrase (which takes a little skill, a card that has "monitor" mode and the ability to inject packets). Enforcing strong passphrases should ensure that such an attack could not be accomplished in an individual's lifetime unless they have access to some mighty fancy processing power.
WEP is another story altogether and should not be used anymore."I don't mind that they stole my ideas. I mind that they have none of their own." - Nikola Tesla
01-27-2012, 12:19 AM #15
- Join Date
- Jan 2012
01-27-2012, 01:15 AM #16
04-27-2012, 01:10 AM #17
- Join Date
- Apr 2012
I know this post is a bit old but here is my 5 cents worth.
First I would have asked the victim, how do you know they are stealing your IP addresses?
Secondly I would try & determine the motive for stealing the IP addresses.
Thirdly I would try & keep my investigation as discreet as possible to maintain the element of surprise.