LAS VEGAS, Nevada USA — Rick Hill, Senior Scientist for Tenacity Solutions, Inc. of Reston, Virginia probably shook up a few attendees during his presentation at DEFCON 14, the nation's largest annual hacker conference.

Hill's presentation was on network "stumbling", the act of locating wireless network access points with open connections.  His presentation, named "WarRocketing – Network Stumbling  50 sq. miles in < 60 seconds", was about his project of launching a handheld computer aboard a 1/3 scale Nike Smoke while it searched for open networks.

The innovative method for locating wireless networks involved using a kit installed in the 1950s research rocket replica. In the rocket's nose cone, Hill embedded an Ipaq handheld computer with an attached 802.11b/g wireless card, as well as an onboard computer and a powerful antenna.

Click to enlarge

In an article on the Washington Post blog site, computer security expert Brian Krebs had this to say:

"He tested the rocket in a rural area of Culpeper, Va., launching the missile up to an altitude of 6,800 feet, with a large parachute allowing the rocket more than six minutes of scanning for wireless networks within a 50-mile radius.

"While the entire mission was a success, that particular launch netted only two networks. Hill said the technique showed its promise, but also the method's inherent limitations — testing such projectiles in densely populated areas would be dangerous (and probably illegal ... Hill had to get clearance from the Federal Aviation Administration, required for any launch higher than 2,000 feet)."

The DEFCON 14 presentation roster detailed Hill's presentation:

WarRocketing – Network Stumbling  50 sq. miles in < 60 sec.
Rick Hill, Senior Scientist, Tenacity Solutions, Inc.

Abstract:
Network "stumbling" has taken many forms since Marcus Milner first released Netstumbler in May 2001. Historically, stumbling aficionados preferred data collection method has been Wardriving – almost everyone owns a car and it’s easy to fire up your laptop and drive around. Of course, other methods exist…creative souls have utilized everything from bikes, to boats, to planes in pursuit of new networks. Groups in the U.S. and Australia have performed "WarFlying" using Cessnas and other, small aircraft. 

Enter a newer (& faster) technique: "WarRocketing".

This talk is about 802.11b network discovery. It details the design, launch, and recovery of a rocket whose objective is to network stumble 50 square miles in less than a minute. Wardriving coverage is limited by obstructions such as trees, houses, and terrain. Our aerial platform, (the Rocket) does not have these limitations. Essentially, it provides Line-of-Sight to ALL targets in the antenna pattern!

The Presentation will include photographs of the rocket construction, (1/3 scale model Nike Smoke), a launch video, and screen capture & analysis of all computer activity during the flight: network stumbling, # of A/P's registered, and so on. No prerequisite—only an interest in Network Stumbling and Wireless Technology.

Bio:
Rick Hill, CISSP, CWSP works as an information systems security engineer for Tenacity Solutions, Inc., an IT consulting firm based in Reston, VA. Specializing in Wireless Security, his day job involves C&A of govt. networks, site surveys, and performing network security assessments. In a previous life, he did equipment automation and optimized new production lines for ITT Automotive, an ABS brake systems manufacturer.

Rick's after work interests include working to become his neighborhood's Wireless Internet Service Provider (WISP), Netstumbling, and shooting High Power Rockets. A born-again Rocketeer (BAR), he started flying those little Estes "kid size" rockets at 8 years old. His motto today: "bigger toys for bigger boys." Rick's been a Tripoli rocketry association member since 2000. He also holds a Technician class amateur radio license (KG4BSY), which he uses primarily for rocket telemetry and investigating cool new wireless applications.

Excerpts for this article taken from the Washington Post © 2006

---

08-08-2006 01:58 PM  #1
Art Upton Space Cowboy   Joined: Aug 2006 Posts: 89	While the Nike Smoke rocket is Kewl, I have one, War Blimping is more practicle then WarRocketing Art Upton K8XG.com BoosterVision.com

08-12-2006 12:53 AM  #2
ddmobley Administrator   Joined: Jul 2006 Posts: 3213	I think the authorities would agree.

01-06-2007 07:09 PM  #3
powderperson1949 Powderperson1949   Joined: Dec 2006 Posts: 2	What size of Nike Smoke do you have? Shoot a photo! Ray

01-07-2007 10:07 PM  #4
Just Jerry Freeform rockets advocate   Joined: Aug 2006 Posts: 1123	So THIS is why the BATFE is after rocketry! Just Jerry Keep open networks safe from rocketry wielding users!

01-08-2007 10:00 AM  #5
powderperson1949 Powderperson1949   Joined: Dec 2006 Posts: 2	Now I see the full artical, I understand now! Ray