<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Security for retail wireless LANs</title>
	<atom:link href="http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/</link>
	<description>A former physicist tries to make sense of technology</description>
	<pubDate>Tue, 07 Feb 2012 20:40:33 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: mary fouts</title>
		<link>http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-10599</link>
		<dc:creator>mary fouts</dc:creator>
		<pubDate>Mon, 06 Aug 2007 14:08:26 +0000</pubDate>
		<guid isPermaLink="false">http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-10599</guid>
		<description>Retailers don't always think about the proper stop shoplifting equipment needed, much less about needing extra cash registers via wireless.  I think it is up to the cash regester industry to promote this aspect of their products.  --mary, http://www.sensortags.com</description>
		<content:encoded><![CDATA[<p>Retailers don&#8217;t always think about the proper stop shoplifting equipment needed, much less about needing extra cash registers via wireless.  I think it is up to the cash regester industry to promote this aspect of their products.  &#8211;mary, <a href="http://www.sensortags.com" rel="nofollow">http://www.sensortags.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: matthew</title>
		<link>http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-6088</link>
		<dc:creator>matthew</dc:creator>
		<pubDate>Thu, 14 Jun 2007 16:58:24 +0000</pubDate>
		<guid isPermaLink="false">http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-6088</guid>
		<description>From a technology perspective, 802.11 client bridges work fine to solve the problem.  (Well, not quite.  They mess with ARP in funny ways, but for the most part, those effects are not observable as long as you use them exactly as they were intended.)

However, from a security view, they provide a great way into the network because you typically configure the bridge, attach it to the client computer, and forget about it.  Attackers interested in attaching to the network can steal a bridge and get on, or gain access to the bridge's configuration for credentials.

Furthermore, the incremental cost for any type of client can be large compared to the cost of the cash register.  A search on cash registers with Ethernet led me to the &lt;a href="http://www.cashregistersonline.com/store/Scripts/SharpprodView.asp?idproduct=210" rel="nofollow"&gt;Sharp UP-600&lt;/a&gt;, which sells for around $900.  (I have no idea how comparable the Sharp is compared to the other registers that I was discussing.)  If the unit is an "overflow" unit used only for big sales a few times a year, maintaining, configuring, and managing a second part at 10% of the cost is not worth it to most stores.

Finally, the cost of an Ethernet hardware bridge is substantially more than client software.  The bridge costs $100, but the list pricing for commercial client software is generally $30-40 per unit.  Big stores could get better pricing than that, but there is greater ability to heavily discount large software orders, or use a zero-cost alternative.</description>
		<content:encoded><![CDATA[<p>From a technology perspective, 802.11 client bridges work fine to solve the problem.  (Well, not quite.  They mess with ARP in funny ways, but for the most part, those effects are not observable as long as you use them exactly as they were intended.)</p>
<p>However, from a security view, they provide a great way into the network because you typically configure the bridge, attach it to the client computer, and forget about it.  Attackers interested in attaching to the network can steal a bridge and get on, or gain access to the bridge&#8217;s configuration for credentials.</p>
<p>Furthermore, the incremental cost for any type of client can be large compared to the cost of the cash register.  A search on cash registers with Ethernet led me to the <a href="http://www.cashregistersonline.com/store/Scripts/SharpprodView.asp?idproduct=210" rel="nofollow">Sharp UP-600</a>, which sells for around $900.  (I have no idea how comparable the Sharp is compared to the other registers that I was discussing.)  If the unit is an &#8220;overflow&#8221; unit used only for big sales a few times a year, maintaining, configuring, and managing a second part at 10% of the cost is not worth it to most stores.</p>
<p>Finally, the cost of an Ethernet hardware bridge is substantially more than client software.  The bridge costs $100, but the list pricing for commercial client software is generally $30-40 per unit.  Big stores could get better pricing than that, but there is greater ability to heavily discount large software orders, or use a zero-cost alternative.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Moschops</title>
		<link>http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-5947</link>
		<dc:creator>Moschops</dc:creator>
		<pubDate>Tue, 12 Jun 2007 07:18:43 +0000</pubDate>
		<guid isPermaLink="false">http://blog.matthewgast.com/2007/06/06/security-for-retail-wireless-lans/#comment-5947</guid>
		<description>Why can't you just install a WPA2 enabled 802.11 to ethernet bridge?  Then they can just plug in a regular ethernet connection to it and no hardware upgrade is required.  For $100 you can get a DWL-3150 that fits the bill supporting WEP (snicker!), WPA, WPA-Enterprise, WPA2, and WPA2-Enterprise, plus its centrally manageable via SNMP. I'm sure there are plenty of others like it that you could use.</description>
		<content:encoded><![CDATA[<p>Why can&#8217;t you just install a WPA2 enabled 802.11 to ethernet bridge?  Then they can just plug in a regular ethernet connection to it and no hardware upgrade is required.  For $100 you can get a DWL-3150 that fits the bill supporting WEP (snicker!), WPA, WPA-Enterprise, WPA2, and WPA2-Enterprise, plus its centrally manageable via SNMP. I&#8217;m sure there are plenty of others like it that you could use.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

