wagamama
wagamama

Exclusive: hackers make chop suey of wireless security

vnunet.com

investigation reveals Wagamama noodle chain has no wireless security and is open to hackers

Written by James Middleton

According to underground culture, the staple diet of hackers is Jolt cola and Ramen noodles. But the food could be could be picked up for free after hackers discovered a gaping security hole in the network of noodle house Wagamama.

vnunet.com today received an email from an anonymous hacker who claimed to have gained access to the wireless network at the Wagamama branch on London's Lexington Street, just down the road from vnunet.com's centre of operations and its investigative news team base.

The hacker told us: "It wasn't that the wireless security was weak. It was crap. There was no security at all."

"Me and good old time OpenBeOS kernel hacker went down yesterday night to our 'favourite' restaurant to get a nice warm bowl of noodles," wrote the hacker.

"The thing striking us in the first place is that [Wagamama] changed all their remote terminals used to collect orders with nifty little Compaq iPaqs, and that, incredibly enough, all those iPaqs have a Lucent 802.11 wireless network card sticking out, and blinking profusely."

Whipping out a wirelessly equipped laptop the hackers sniffed around and found that the 802.11 network was publicly accessible.

"No wireless encryption protocol, no passwords, not the slightest difficulty to pick up the signal and start snooping packets," said the hacker. "In less than one minute we had enough information to access the network entirely, and start to have some fun."

The hackers then furnished us with a list of IP addresses corresponding to network objects on Wagamama's system.

"In few moments we basically found that xxx.xxx.x.x is their billing server, and it runs SCO OpenServer 5.0 (pretty easy to hack into, if you carry around a copy of NMAP or any other port-scanning software ...). I'm not going to tell you how, it's pretty easy to do it, but you can walk away with a full five-course Asian meal paying only for a bottle of coke, or a beer," he said.

Worryingly this indicates that the hackers gained access to financial records and billing systems which were left completely unprotected.

They also informed us that they had discovered a router which allowed access to other networks, possibly other branches in the Wagamama chain, as well as the company's mail server.

vnunet.com despatched senior reporter James Middleton to conduct an urgent investigation.

The manager on duty in the Lexington Street branch said that he had no idea of the lack of security.

"I was not aware of this problem," he explained. "But it is terrible. Getting access to some things like the food orders is not so important, but if they could access the billing system that is a problem."

Paul O'Farrell, commercial manager of the company, said he wasn't aware of the problem as network management was outsourced to GEAC, which specialises in restaurant IT systems.

"The wireless network is a stand alone in each restaurant," he said. "They would only be able to get as far as the server in each branch. Although there is a router it only goes through to the network at GEAC, not other branches."

O'Farrell said that the migration to a wireless network and iPaq handhelds from a proprietary GEAC system was only recently undertaken, but that this discovery raised issues that "need to be addressed".

"It is possible a malicious or mischievous user could use this information to crash the server," he said. "But they couldn't really do any other damage."

Tags:

reader comments

related articles

McDonald's chips in with web access

Burger and broadband to go 08 May 2002

 

Top execs don't understand wireless

Over half fail to see the benefits 03 Apr 2002

Hacking

2001: A Hacker's Odyssey 16 Jan 2002

related whitepapers

today's top stories

What does Windows 7 mean for Microsoft?

With the sting of Vista still fresh, Redmond has to make next Windows work 10 Jul 2009

A smarter way to use BI

Getting the most from business intelligence systems requires not only careful management on the part of IT leaders, but also the committed involvement of decision-makers across the organisation 08 Jul 2009

The truth behind the Google/Microsoft/NHS rumours

Before Monday 6 July, did you know that Google and Microsoft had services for storing health records? Thanks to an article in... 10 Jul 2009

Quenching a thirst for IT modernisation

A substantial restructure at soft drink supplier Nichols -­ purveyor of Vimto - ­led the company to update its software to Sage 1000 to replace its in-house application. This resulted in the streamlining of the IT department and an opportunity to customise the system 08 Jul 2009

How Satyam cleaned up its act

Chief executive CP Gurnani tells Angelica Mari why Tech Mahindra opted to keep the Satyam brand after it bought the scandal-hit services firm, and explains what the deal means for existing and prospective customers 09 Jul 2009

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Will Google Chrome OS be a genuine alternative to Windows?

Will Google Chrome OS be a genuine alternative to Windows?

Tell us your views on the new operating system rivalry

View poll results

Latest audio and video articles

network cablesVideo

How to maximise the value of your IT networking investment

A panel of experts discuss networking strategies that deliver real value to business 03 Jul 2009

green footprintsVideo

How to manage enterprise energy use - and the role IT can play

A panel of experts explore how firms can get to grips with their carbon footprint and make smarter use of energy 01 Jul 2009

Latest in-depth articles

Google ChromeAnalysis

Lack of enterprise appeal takes shine off Chrome OS

Enterprise buyers unlikely to ditch Windows for Chrome OS in the near term, say experts 09 Jul 2009

Satyam CEO CP GurnaniNews

How Satyam cleaned up its act

Chief executive CP Gurnani tells Angelica Mari why Tech Mahindra opted to keep the Satyam brand after it bought the scandal-hit services firm, and explains what the deal means for existing and prospective customers 09 Jul 2009

Advertisement

Primary Navigation