Re: Duplicate MAC problems

On Nov 23, 4:44 am, "pedro.fo...@xxxxxxxxx" <pedro.fo...@xxxxxxxxx>
wrote:

At wi-fi network (802.11a/b/g), users fake them MAC Address to a
authenticated MAC to bypass the security. If the legitimate computer
uses a bad designed TCP/IP stack (ie. Windows), this approach will
work completely, if it uses a good TCP/IP stack implementation that
respect the RFC 793 specification (ie. Linux), will not work. This is
because when a Windows host receive a packet that he is not expecting
he just drops the packet. A Linux machine will reset the connection.

Linux's approach is *way* better. Once you know that there is spoofing
going on and there is no security, shutting down the connection is
better than accepting the spoofed packets.

Sonny, is your ISP should use a 802.1x authentication method. It's the
best approach I know.

Some authentication, any authentication, will do. The problem is that
there is no authentication at all.

DS
.

Relevant Pages

  • Re: How to SELECT records based upon ASP.NET Roles
    ... security principals directly. ... be able to use SQL row-level security as well (which is something I've never ... When using Windows ... authentication in IIS, this will be a WindowsPrincipal object, but it would ...
    (microsoft.public.dotnet.security)
  • Re: How to SELECT records based upon ASP.NET Roles
    ... security principals directly. ... also be able to use SQL row-level security as well (which is something ... using Windows authentication in IIS, ...
    (microsoft.public.dotnet.security)
  • RE: Combine Forms Authentication with Windows
    ... | Subject: RE: Combine Forms Authentication with Windows ... since those internal users need to call ... | | So you need integraded security, this means that the users need ...
    (microsoft.public.dotnet.general)
  • Re: Websites require a login
    ... It's *my* understanding (and I'm not a security expert) that when using ... integrated windows authentication you are using NTLM authentication or ... Windows 2000 and 2003 via Active Directory. ... That's why the server is requiring a login. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cannot open database requested in login
    ... Assuming your goal is to use windows integrated ... security then leave out the username ... ASP.NET service) as a login to SQL Server and with access to the ... >> you should see security tab, change authentication to "SQL ...
    (microsoft.public.sqlserver.security)