Privacy Risk on new ebay.com.au website First and Last Name in Cleartext

The new ebay.com.au website has been released with much fanfare but the creaters of the website have now decided to embed the users first name and last name on most pages visited.  The test is delivered under plain http and can easily be captured over the air or wire using Wireshark.

Steps to replicate:

1. Login to ebay.com.au with correct credentials
2. Navigate to he home page
3. Hover the mouse to the top left hand corner under the "G'Day <First Name>"
4. Be greeted with a hover over panel with <First Name> <Last Name> in plain sight.

Conducting a Wireshark trace illustrates the issue.  A sting search in packet details for GH_alertData will display the first / last name.

Why is this bad:
Potentially a hacker can gain easy access to your first, last name and ebay id and use this info to produce a phishing email or collect this data for further attacks.

Where can this happen:
The most likely place for this to happen is over an unencrypted wireless network, i.e at the airport or the cafe.  Wired networks are also vulnerable.

What can ebay do:
Secure their website by using the https protocol for the entire website.

What else sucks:
On a internet connection that can stall, i.e 3G/wifi, the hover function can time out and throw up the message, "We're sorry, there was a problem retrieving this information".  Now the user can easily log out without refreshing the page.
Sidejack friendly...

WindyCityTech Blogger
WindyWindyCityTech Wordpress

reaver wps error: sqlite3 library not found! ubuntu | sqlite3_open

./configure not working?

New with reaver-wps 1.3

Need a bit of sqlite action

sudo apt-get install libsqlite3-dev

done!

WindyCityTech Blogger
WindyWindyCityTech Wordpress

Installing Reaver WPS on Ubuntu 11 code.google.com/p/reaver-wps

What a great program.

To install on Ubuntu, you need to have the prerequisites:

• a brain
• build-essential  i.e apt-get install build-essential
• libpcap0.8 library and the development library libpcap0.8-dev
• aircrack-ng- preferably the subversion
• patched compat-wireless drivers - no channel -1 shit
• wireless card that can do injection
• reaver wps code http://code.google.com/p/reaver-wps/

The rest is pretty simple, just the usual extraction., ./configure, make, sudo make install.
Pay attention to the ./configure and make processes, if there is anything missing required, check or investigate.

You will need to put you wireless card into monitor mode, use airmon-ng for this.

You will also need to establish a good, solid signal between the AP and you radio, if you cannot then it will wont work very quickly or at all.




WindyCityTech Blogger
WindyWindyCityTech Wordpress

Inside the Netgear WG602 v2 Access Point DDWRT

Here are some pics of the insides of a Netgear WG602 v2 Wireless Access Point.

It has a internal and a external antenna, the external antenna has a reverse SMA male connection which allows a much better antenna to be installed.

Also there is a 4 pin header on the board.  From this source it seems that the header is a TTL RS-232 signal.

There is plenty of discussion online that this AP is capable of running DD-WRT Open firmware, which is great!

Enjoy the pics.