full-disclosure - A WiFi security tool I would like to see developed

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <000001c2a705$9c823810$6501a8c0@rms2>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: A WiFi security tool I would like to see developed

Hi,

Here is a WiFi security tool that I would like to see developed and made
available free of charge on the Internet.  The tool would be a packet
sniffer that listens to unprotected email traffic on a WiFi network.
When it sees an email message being sent in the clear, it sends out its
own message to the "To", "From", and "CC" email addresses saying that
the message could be easily read by the "bad guys".  The message who
link to a Web page that describes the security problems with unprotected
WiFi networks and then offers some possible solutions to the problems.

This tool would be a great way to educate the public on the dangers of
insecure WiFi hotspots.  It would make crystal clear to all
participants of the email conversation how easy it is for eavesdroppers
to listen in.

>From privacy reasons, the tool should not keep a record of any the
TCP/IP traffic that it sniffs.

I believe that the tool can be put together without too much trouble
using existing public domain software libraries.

Any takers?

Thanks,
Richard M. Smith
http://www.ComputerBytesMan.com