OneMestizo
2008-09-30, 15:50
My university has an all encompassing computer account system, meaning our computer accounts, email accounts, and VPN authentication (i think) all have the same username and password.
The problem comes from what I think is the vpn authentication. To go on the internet using the university's network, one must supply their username and password somehow. Basically this involves opening up firefox, and a window appears prompting for your login info. However, this username and password is sent in plain text.
The campus networks are wireless and, I believe, unswitched. They may be switched, but in any case I am receiving traffic from other computers. This poses a couple of problems.
1) Sometimes (not always, it is very strange), I receive shitloads of traffic, causing my own connection to slow to a crawl.
2) I can open up wireshark or ettercap and see what everyone is doing. I can also get their school user name and pasword this way, and thus have access to their email accounts and lab computer accounts.
As you can see, this is frighteningly retarded. First of all, how do I stop my own network interface by being flooded with other people's traffic? Second of all, how do I prevent other people from monitoring me and getting my username and password?
EDIT: If it makes any difference I'm running Linux/GNU
The problem comes from what I think is the vpn authentication. To go on the internet using the university's network, one must supply their username and password somehow. Basically this involves opening up firefox, and a window appears prompting for your login info. However, this username and password is sent in plain text.
The campus networks are wireless and, I believe, unswitched. They may be switched, but in any case I am receiving traffic from other computers. This poses a couple of problems.
1) Sometimes (not always, it is very strange), I receive shitloads of traffic, causing my own connection to slow to a crawl.
2) I can open up wireshark or ettercap and see what everyone is doing. I can also get their school user name and pasword this way, and thus have access to their email accounts and lab computer accounts.
As you can see, this is frighteningly retarded. First of all, how do I stop my own network interface by being flooded with other people's traffic? Second of all, how do I prevent other people from monitoring me and getting my username and password?
EDIT: If it makes any difference I'm running Linux/GNU