Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Dec 2000 22:01:05 -0800
From:      "Jeremiah Gowdy" <data@irev.net>
To:        "Daniel Hauer" <dh@enter.net>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: MAC Address
Message-ID:  <002a01c06337$c005f1a0$aa240018@cx443070b>
References:  <Pine.LNX.4.30.0012102309540.1973-100000@daedalus.cs.brandeis.edu> <3A3457AA.7507D386@enter.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> > I'd want to do it because at our university there are plugs for laptops
on
> > DHCP network, but DHCP server knows everyone's MAC address so all my
> > activity is logged when I use it. Changing my MAC address would open
some
> > interesting posiblities.
>
> Sounds to me all this is just_slightly_unethical_if
> _not_bordering_on_illegal. This is a topic for a security mailing list?
> I thought we were here to boost network security, not circumvent it.
> Just a network technician's opinion.

Illegal or unethical to mess with IP/DHCP/MAC configuration on a network ?
So, if I connect to a public network and bind someone else's IP address,
should I be punished ?  Is that evil ?  Come on.  I'm a network admin, and
even I don't take it that seriously.  If someone on my network evades my
logging somehow, then that violates my Terms of Service, and if I'm smart
enough to detect them, I shut them down, and maybe ban them from the
network.  If I don't detect them, more power to them.  I happen to be one of
the people who think the burden of security is on the administrator to make
the system secure, and not on the "hacker" (or whatever your favorite term
is) to be nice enough not to exploit my network.  How do you think network
security is "boosted" ?  By people not "hacking" things ?

No offense, just this network administrator's opinion.   If you're into
network security, but you're not into a little hacking (your own system or
someone else's), then you're not exactly seeing the whole picture.  Security
flaws are *often* fixed because someone exploits them.  I'm not advocating
abusing people's systems, but there's a certain amount of Necessary Evil
that has to be done.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002a01c06337$c005f1a0$aa240018>