[unisog] XP silently configuring ad-hoc wifi networks

Frank Sweetser fs at WPI.EDU
Fri Sep 23 17:23:55 GMT 2005

On Fri, Sep 23, 2005 at 10:57:06AM -0500, Christopher Chow wrote:
> check out the posting at SANS-ISC that may relate (it refers to AP 
> networks, but who knows the activity of this yet to be identified 
> pathogen -- could be also making its own adhoc networks to spread under 
> the radar and avoid IDS systems
> http://isc.sans.org/

Yup - I was actually reading that when I decided to throw the question out
there and see if anyone had more detailed info about the behavior we've been
(allegedly) seeing for a few weeks now.  If there really is a way to convince a
default configuration XP box to associate to a new SSID, that could be a
fantastic vector.

Frank Sweetser fs at wpi.edu  |  For every problem, there is a solution that
WPI Network Engineer          |  is simple, elegant, and wrong. - HL Mencken
    GPG fingerprint = 6174 1257 129E 0D21 D8D4  E8A3 8E39 29E3 E2E8 8CEC

More information about the unisog mailing list