Thoughts? n n nhttps: www indiegogo com projects fingbox-network-security-wi-fi-troubleshootin...

[G+_Jason Perry]

Thoughts?

https://www.indiegogo.com/projects/fingbox-network-security-wi-fi-troubleshooting#/

[G+_Rainbow dashx86]

Ieda is sound but I think I wound stick with known names like ring and nest.

[G+_Rick]

I bought into when the campaign was early. My Fingbox arrived about three weeks ago but unfortunately just before that I bought the Synology RT2600ac router and it does just about everything the Fingbox does plus other features I'm more interested in, i.e. VPN plus. I'm currently not using my Fingbox.

[G+_Ben Reese]

I love the idea, but haven't pulled the trigger. Seems like something a Pi can do - mostly. The "Digital Fence" is a nifty idea.

 

I use and love the Fing app. This seems like a fixed network extension of that.

[G+_Jason Perry]

Ben Reese?, I am in the same boat as you. I love the Fing app, and this feels like a logical extension of it.

 

But the price tag combined with the fact I have a lot of these features in my network already makes me want to try to get a pi to do it.

[G+_Jason Perry]

Here's a project Fr. Robert Ballecer, SJ?, make a device you can drop on someone's network that will help you monitor it, so you know what's wrong before they call you.

[G+_Jason Marsh]

It's "digital Fence" is nothing more than flooding your network with ARP packets to tell everyone that "it" is the gateway for your network. Then you can control which device can go online at what time, what sites are blocked, etc.

 

It's nothing one couldn't work around from a client machine. I figure if you set a fixed IPv4 config on a client it would be immune to Fingbox's traffic policing.

 

And, Yes, you could do this with a Raspberry Pi or any other small, lightweight, low-power computer, at a fraction of the cost. Or with your $200+ router. I think every router I've owned since about 2007 has had most of the useful capabilities of the fingbox. So maybe some $35+ routers could be capable, too.

[G+_Ben Reese]

Might take a look at that digital fence thing again.... Unless I'm misunderstanding what it does, it seems to detect when devices are nearby that are not connected to your network.

 

"This is a first of its kind security feature which lets you know if any device with Wi-Fi enabled is in the proximity of your box, even if that device is not connected to your Wi-Fi network."

 

I'm pretty sure I've heard Darren Kitchen? talking about something similar with the Wi-Fi Pineapple. Essentially, every device that isn't connected to Wi-Fi is constantly broadcasting its MAC and trusted SSID's. "11:22:33:44:AA:BB:CC here, is 'FBISurveillanceVan' around?"

 

iPhone and I believe recent Android devices now randomize the MAC to prevent physical tracking of people using this method, but it should still be enough to know if somebody was within 50' of your house.

[G+_Jason Perry]

+Ben Reese, throw in a RTL SDR and I wouldn't be surprised if you can catch phones with WiFi off. I have been really itching to do a project like this.

[G+_Jason Marsh]

So I assumed the digital fence was what they were calling their device blocking/quiet time feature. Apparently, it's a monitoring function for unauthenticated devices.

 

Should the average person really care about what devices are nearby but not connected to their AP? What actionable information is there? Sure, you can use what's nearby to have fingbox put up notifications on your cell, but don't we all experience a bit of notification fatigue already? I think a Ring doorbell/camera would be more useful for most people to see who is actually AT their home, rather than who is nearby. What if the dog-walker often walks by your home, even when he's not walking to or from your home or handling your dogs. Do you need spurious notifications?

 

I recently saw a billboard proclaiming that a certain gentlemen's club had 100% gluten-free lap dances. I suspect more people could actually benefit from that, than could benefit from Fingbox's "security" features. Since one's LAN and WLAN are also gluten-free. Perhaps Fingbox should update their marketing literature.

 

For the average user, Fingbox is as necessary and useful as a pet rock.

 

For the KH community, it is the premium bottled water of network security.

[G+_Jason Perry]

When I quickly looked at the site, I thought it highlighted devices that were on your network, but have not been seen by your fingbox before.

[G+_Jason Marsh]

I just watched a video review of it again. Yes, you can approve/block new devices on your net. Take my money now!

 

For 99.99% of users, if it's on your net, you put it there. You don't need to buy a box to tell you what you've put on your net. You can look at DHCP leases or connected devices on your router for free.

 

You also don't need a box to scan your net to find open ports. That's easy and free with a multitude of tools for mobile and desktop.

 

You can also see what's nearby with a site survey. Perhaps on your router, but easily accomplished on your phone. For free.

 

WiFi site survey with notifications isn't something I'd equate with a fence of any kind, either. A fence is a barrier to entry. Criminals an ne'er do wells are crushed when they see that digital fence, you know. Better try another network...

 

A camera monitors, as do other sensors (IR, sonar, radar, tripwires, booby traps). Perhaps they should have called that feature a digital tripwire, since it's not actually going to prevent entry, but can notify you.

 

If someone asked me for permission to monitor and track myself or my devices when I was near their network/home, I'd recognize them as a paranoid lunatic, respectfully decline and immediately terminate any personal or professional relationship with them. WTH, Fingbox?

[G+_Ben Reese]

Just found a review on the YouTube channel Crosstalk (also just recently discovered Crosstalk when researching which Ubiquiti AP to buy). The Fingbox is an interesting gadget. The "fence" (more of a tripwire) works about as I expected. But the device blocking/pausing is a bit concerning. The blocking works as I expected, but as I hoped it didn't... By arp spoofing.

 

The host goes into detail even showing on Wireshark how the Fingbox locks devices out of the Internet.

[G+_Jason Perry]

Thanks Ben Reese?, Funny you mention crosstalk I have watched quite a few of his videos, but I am not sure it I have subscribed yet.