Rick Hill won't say where he launched his "wardriving" balloon on Friday, but he will tell you that it got a pretty good look at about 370 wireless networks, while scanning up and down the Las Vegas Strip.
Hidden in the back of a 22 foot (6.7 meters) moving truck, Hill and his team of about a dozen volunteers launched the balloon Friday morning, sending it 150 feet into the air for about 20 minutes to use special antennas and scanning software to scope out the Las Vegas skyline for unsecured wireless networks, an activity Hill calls "warballooning."
Hackers have practiced wardriving for years, driving around in cars with computers and specialized software that sniffs for networks.
Two years ago Hill set his sights a little higher and fired off a model rocket loaded with similar equipment -- and gave a Defcon presentation on that project -- but warballooning is something new. In his day job Hill is a senior scientist with Tenacity Solutions, a security services consultancy in Reston, Virginia, that works with the government.
Despite methodical preparation for this year's Defcon, and Federal Aviation Authority (FAA) approval, Hill's warballoon almost didn't take off at all.
That's because management at the Riviera Hotel, host of the Defcon hacking conference, changed its mind late last week and told him that he could not launch the balloon from hotel property. In fact, the Riviera said, he couldn't even bring the warballoon into the hotel. The reason for the grounding was vague. Riviera staffers told Hill that local police were concerned after a nearby casino had complained of the operation.
Hill suspects that local authorities might have been spooked by the fact that he called his device a warballoon. Something less bellicose might not have caught anyone's attention.
Still, he and the team who helped him were upset at being grounded. They felt that they had met all the legal requirements, but they couldn't get FAA approval to launch the balloon from another nearby location on such short notice.
But Hill, an amateur rocketeer, knows his FAA regulations, and he realized that if he launched the balloon more than five miles from Las Vegas's McCarran International Airport, he wouldn't need any federal sign-off.
The balloon he was using was rented from a national company that rents out the devices for real-estate photography. And though he knew that the balloon was perfectly legal to fly, he was still a little worried about local police shutting him down."That's when we did plan B: the covert operation," he said.
To cut down on any chance of the operation being shut down, they quietly inflated the balloon inside a rented moving truck while parked in the Treasure Island hotel parking lot. Then they drove to a nearby park and set it off from an abandoned parking lot. "It probably took us less than five minutes to get the balloon airborne." he said.
The tethered warballoon scanned the strip and found that about a third of the networks were unencrypted. From the balloon's 15 story height, they were able to survey about a 7 1/2 mile (12 kilometers) radius, Hill said. The balloon sent so much data, it just started rushing by on his screen. About one-third of all the networks they spotted were unencrypted, he said.
Near the end of the operation, a Las Vegas Metropolitan Police cruiser drove by the parking lot to see what was going on. Hill and his team waved. The police officers waved back and drove off.
No one at the Riviera could be reached who had knowledge of the warballooning incident, but Defcon director Jeff Moss confirmed Hill's account. Hill will talk about his warballooning adventures Sunday at Defcon.t.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Discover the advantages of an open architecture multi-vendor network solution
Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives
Email Archiving Implementation: Five Costly Mistakes to Avoid
Delivering the Power of Choice with Microsoft Dynamics CRM
The state of Middleware
Controlling storage costs with Oracle database 11g
Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
AOC Launches 18.5” Widescreen Green 16:9 LCD Monitor in Australia and New Zealand 2008-12-03 15:30:00+11
FrontRange Solutions eases software license management with new License Manager 3.0 2008-12-03 14:56:00+11
Progress Software's Cure for Managing Services-based Applications 2008-12-03 14:42:00+11
S3 Graphics Unleashes Full OpenGL® 3.0 API Support with Beta Driver for Chrome 500 Series GPUs 2008-12-03 14:08:00+11
Informatica Powercenter added to Nec Infoframe Solution Suite 2008-12-03 11:36:00+11
Enterprise Wireless WLAN Security
Learn more about the security challenges to be faced when defining and implementing security mechanisms within diverse wired and wireless network environments. Download this must-read guide to plan your wireless data protection strategy now.












