Discussion:
WLAN Security Consultants
R. Simkins
2003-03-21 13:07:36 UTC
Permalink
Hello again!

I was wondering if there is anyone who can tell me what is involved in WLAN
security consultancy. Methods, approaches, etc.

I am going to finish my degree in the UK this year and after that I am
dreaming of going into freelance WLAN security consultancy.

Basically finding companies with open APs or weak security and asking them
to pay me to tell them how to secure it.

Is anyone doing this or working for a company doing this?

Which tools are best? WEPcrack, etc.

Thanks

Rob
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
Eric Chamberlain
2003-03-22 02:31:55 UTC
Permalink
It's generally frowned upon in the industry if you look for vulnerabilities
in other people's networks and then ask them for money.

If you are serious about the industry, companies are going to look for past
experience with wireless installs. How many previous nodes have you
installed? Who are your references? What experience do you have that they
will want to pay for? If your experience is just academic, they can FTFM
for free.

--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu
-----Original Message-----
Sent: Friday, March 21, 2003 5:08 AM
To: WLAN list
Subject: [BAWUG] WLAN Security Consultants
Hello again!
I was wondering if there is anyone who can tell me what is involved in WLAN
security consultancy. Methods, approaches, etc.
I am going to finish my degree in the UK this year and after that I am
dreaming of going into freelance WLAN security consultancy.
Basically finding companies with open APs or weak security and asking them
to pay me to tell them how to secure it.
Is anyone doing this or working for a company doing this?
Which tools are best? WEPcrack, etc.
Thanks
Rob
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
R. Simkins
2003-03-23 11:57:44 UTC
Permalink
Thanks Eric,

I don't have any past wireless experience. My dissertation in WLAN Security
is the only thing that makes me aware of the weaknesses in WLANs.

I know that many companies are blissfully unaware of the holes in their
WLAN. The service I could provide is making them aware that they are open. I
could then offer them advice on how to improve their security. I don't have
a total knowledge yet but hopefully when my dissertation is complete I will
be up there.

Basically, I enjoy not having to do a 9 till 5 and the longer I can avoid it
the better! I see this as a way to do what I am interested in and make some
money helping businesses become more secure.

I am not sure if it would be successful, which is why I am asking for help
to try and understand how I could go about it.

If anyone does this as a consultant and has the time to discuss it via
e-mail with me I would be very grateful.

Thanks

Rob
***@hotmail.com

p.s. I don't think WiFi is as well documeted here as in the USA, I have a
feeling that many companies have not used WLAN security specialists to
implement their WLANs.

----- Original Message -----
From: "Eric Chamberlain" <>
To: "'WLAN list'" <***@lists.bawug.org>
Sent: Saturday, March 22, 2003 2:31 AM
Subject: RE: [BAWUG] WLAN Security Consultants


It's generally frowned upon in the industry if you look for vulnerabilities
in other people's networks and then ask them for money.

If you are serious about the industry, companies are going to look for past
experience with wireless installs. How many previous nodes have you
installed? Who are your references? What experience do you have that they
will want to pay for? If your experience is just academic, they can FTFM
for free.

--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu
-----Original Message-----
Sent: Friday, March 21, 2003 5:08 AM
To: WLAN list
Subject: [BAWUG] WLAN Security Consultants
Hello again!
I was wondering if there is anyone who can tell me what is involved in WLAN
security consultancy. Methods, approaches, etc.
I am going to finish my degree in the UK this year and after that I am
dreaming of going into freelance WLAN security consultancy.
Basically finding companies with open APs or weak security and asking them
to pay me to tell them how to secure it.
Is anyone doing this or working for a company doing this?
Which tools are best? WEPcrack, etc.
Thanks
Rob
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless

--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless

Peter Boucher
2003-03-22 17:45:40 UTC
Permalink
Just make sure you get their OK before probing their security.

If you hack them first and then ask for money, you might even be prosecuted.

-----Original Message-----
From: R. Simkins [mailto:***@hotmail.com]
Sent: Friday, March 21, 2003 6:08 AM
To: WLAN list
Subject: [BAWUG] WLAN Security Consultants


Hello again!

I was wondering if there is anyone who can tell me what is involved in WLAN
security consultancy. Methods, approaches, etc.

I am going to finish my degree in the UK this year and after that I am
dreaming of going into freelance WLAN security consultancy.

Basically finding companies with open APs or weak security and asking them
to pay me to tell them how to secure it.

Is anyone doing this or working for a company doing this?

Which tools are best? WEPcrack, etc.

Thanks

Rob
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
Loading...