Security Basics mailing list archives
Re: Wireless IP leads to arrest.. (UNCLASSIFIED)
From: gjgowey () tmo blackberry net
Date: Wed, 10 Oct 2007 04:57:15 +0000
That's not entirely true. A number of years ago I accidentally stumbled on something. I had a NIC in my system that had a 192.168.x.x addr on it and I was connecting to the ISP via dialup (as I said this was a number of years ago). For some screwy reason that I never quite figured out because the ISP was using 192.168 series addr's for its internal equipment my system was receiving email traffic destined for one of their mail servers. By some freak coincidence the 192.168 addr that my NIC was set to resulted in some weird addr collision with one of their servers that caused traffic to come over my PPP link that should have stayed on their side. In effect, I somehow wound up arp poisioning a switch on their end. Geoff Sent from my BlackBerry wireless handheld. -----Original Message----- From: Nic Stevens <nic.stevens () gmail com> Date: Tue, 09 Oct 2007 15:40:05 To:security-basics () securityfocus com Subject: Re: Wireless IP leads to arrest.. (UNCLASSIFIED) How would the ISP know the mac address? I can't see my mac address from my server located elsewhere. Once I leave home my mac address doesn't follow. Chinea, Jose L. Jr. (Contractor) wrote:
Classification: UNCLASSIFIED Caveats: NONE This one is simple! The media has no idea what it is talking about! How many times do we hear on the media terminology that makes no sense at all!?!?!?! More than likely they tracked IP to an ISP and then demanded the ISP to reliquish the MAC address to username being used at that time (every ISP has a username and password in order to access their resources). Also, if there was a 5 year investigation already going on, they may have already known of the hacker's location and narrowed down any monitoring to a single subnet on the ISP's network. just a theory.... but this is probably what happened and the media didn't know how to word it Luis Computer Systems Analyst II -----Original Message----- From: cobrajet [mailto:uby500 () yahoo com] Sent: Tuesday, October 09, 2007 3:12 PM To: security-basics () securityfocus com Subject: Re: Wireless IP leads to arrest.. Hi Guys, I am sorry for the delay in getting you more info on this (I was traveling). Here's the story as it appears on the web and for the life of me I can't fathom what damning electronic evidence they used to arrest this guy? ..or for that matter what the crime was (a criminal opinion?) "Type of Investigation: Forgery and Identity Theft; Date and Time: 3/25/06 at 1:00 pm; Location: V/Fredonia; Subject(s): xxxxxxxx, of Rock Hill, SC; Charges: Forgery 3rd, Identity Theft 3rd; Court: C/Dunkirk; Details of the Incident: A five-month investigation concluded in the arrest of above subject. It is alleged that the above subject opened a yahoo email address with the name of the victim. The subject then sent a politically charged editorial letter to the Observer in the name of the victim. This letter was published. An investigation into the opened yahoo profile and the sender of the letter showed internet addresses that came back to the above subject's addresses in South Carolina and Fredonia. The subject was issued appearance tickets for the above charges and will appear in the C/Dunkirk Court at a later date. This incident was investigated by the Chautauqua County Sheriff's Office by Inv. Lawrence S. Klajbor." How could they arrest someone using an IP address alone without siezing or analyzing anything? How could they determine (from many states away) who did what on a wireless PC network without supporting forensics or misc investiagting evidence? I was curious as to your comments/clarity nbecause this looks very odd to me. security-35 wrote:Maybe it was IP + Mac Address of the Wireless NIC? Where's the full story (link)? Eric Marden xentek: enlightened internet solutions http://xentek.net/ On Oct 6, 2007, at 11:03 AM, cobrajet wrote:How can this be possibile? A man in WNY was arrested and sentenced to a year in jail over an email with the sole piece of evidence being an IP address? (- and a wirless IP address at that?! -) How can they determine from an IP address who in the house or on a network is actually on the computer? Can anyone explain this to me?8-O -- View this message in context: http://www.nabble.com/Wireless-IP- leads-to-arrest..-tf4580165.html#a13074514 Sent from the Security Basics mailing list archive at Nabble.com.-- View this message in context: http://www.nabble.com/Wireless-IP-leads-to-arrest..-tf4580165.html#a13124923 Sent from the Security Basics mailing list archive at Nabble.com. Classification: UNCLASSIFIED Caveats: NONE
-- Rock is dead! Long live paper and scissors!
Current thread:
- RE: Wireless IP leads to arrest.. (UNCLASSIFIED) Chinea, Jose L. Jr. (Contractor) (Oct 09)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Nic Stevens (Oct 09)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Tremaine Lea (Oct 10)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) gjgowey (Oct 10)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Eric Marden (Oct 10)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Matthew Lee Hinman (Oct 10)
- RE: Wireless IP leads to arrest.. (UNCLASSIFIED) Friend, Jason A Mr CTR USA AMC (Oct 10)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Ansgar -59cobalt- Wiechers (Oct 11)
- RE: Wireless IP leads to arrest.. (UNCLASSIFIED) Craig Wright (Oct 11)
- RE: Wireless IP leads to arrest.. (UNCLASSIFIED) Adams (Oct 12)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Yousef Syed (Oct 15)
- Re: Wireless IP leads to arrest.. (UNCLASSIFIED) Nic Stevens (Oct 09)
- RE: Wireless IP leads to arrest.. (UNCLASSIFIED) Craig Wright (Oct 11)