August 27, 2007

Get paranoid: Your Wi-Fi net is wide open

Reason No. 8: Oh, I'll just hop on to this FraudDaddy3 Wi-Fi connection and pay bills while I wait for the bus

Got a secure Wi-Fi connection? Good for you. But your neighbors may not be so lucky.

According to an October 2006 survey by the Wi-Fi Alliance, three out of 10 home networks are insecure. More surprisingly, one out of four business Wi-Fi networks is totally open, according to a May 2006 survey by RSA.

That same RSA survey found that 20 percent to 30 percent of access points in major cities throughout the world use the user name and password supplied by their router manufacturer, allowing knowledgeable "war drivers" to log in to the device and change its security settings.

Aside from sucking up bandwidth, war drivers can use your connection to send spam, download porn, and snoop around your shared folders.

Using an open Wi-Fi network yourself isn't exactly safe, either. You could log on to an open network in an airport or other public space and end up on an “evil twin,” a Wi-Fi network set up to mimic a legit one but operated by some creep with a laptop and a mobile access point, notes Paul Henry, vice president at Secure Computing. The crooks could then sniff your data, grab passwords and other sensitive information, and gain access to your corporate network or steal your identity.

If your home net isn't already locked down, now's the time. And if you must access open Wi-Fi nets, use end-to-end encryption for the sensitive stuff.

[ Paranoia index | Reason No. 7: There's a spook in your inbox ]

Dan Tynan is contributing editor at InfoWorld and author of the Tynan on Technology blog.

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.