Alan Stevens

Don’t leave your wireless wide open

Wireless networks will remain vulnerable to hackers unless people employ strong encryption methods

Written by Alan Stevens

Since receiving a letter turning me down for a credit card I hadn’t applied for, I have become obsessed with identity security. I’m particularly worried about wireless networks because they remain a vulnerable conduit for personal information.

If you thought unsecured wireless networks were a thing of the past, think again. I found several conveniently listed by XP when I switched on my new Centrino powered notebook. Click, click and I was in, with a totally new IP address, happily surfing the web using someone else’s account, capturing their browser sessions and, well, you can guess the rest.

OK, I didn’t actually go that far (too scared they’d come round and sort me out) but it wouldn’t be difficult. Even on networks where steps have been taken to keep hackers at bay.

Take, for example, those that limit access by MAC address filtering, a very popular strategy in technologically challenged small to medium-sized businesses because it’s easy to set up and needs very little management. Unfortunately, without additional precautions, it’s as effective as a chocolate teapot.

That’s because MAC addresses are routinely included in Ethernet transmissions. So, if I wanted to find out what addresses were being given access to nearby wireless networks, all I’d need is a wireless sniffer and a few minutes to collect both the IP and MAC address details of any access points and their clients.

Which is where encryption comes in. It won’t stop hackers finding MAC addresses, but it does put a major hurdle in their way and will also hide important personal information. However, you need to choose the right technology – Wired Equivalent Privacy (WEP), for example, is no longer a viable option.

Don’t believe me? Type “WEP cracks” into Google and be prepared to find step-by-step guides telling you how to pluck WEP keys out of the air.

So, what exactly am I trying to say here? Well, I guess it’s to make sure that no matter what else you do, employ the highest form of encryption available to protect your wireless networks. These days, that means Wi-Fi Protected Access (WPA) at the very least or WPA2, which has even stronger encryption. Of course, if your hardware is more than a few months old it may not have such options, but new hardware isn’t expensive and I’d definitely recommend replacement in such cases.

It may not stop the kind of identity theft I’ve been subject to (the information turned out to be publicly available – even my date of birth), but it will help you sleep more soundly.

Tags:

reader comments

related articles

Nike+iPod image

Security concerns hit wireless devices

‘Plug and play’ device could lead to stalking and burglary issues 08 Dec 2006

 

Energy researcher improves security

Vendor Dns to provide managed service 01 Dec 2006

Visa boosts staff efficiency with wireless hotspot

Credit card firm gives staff and visitors onsite wireless access 30 Nov 2006

SQL Server tops wireless development charts

Research makes happy reading in Redmond 19 Dec 2006

Researchers crack WPA encryption

Pair break code used on half of all wireless traffic 07 Nov 2008

Coffee Republic brews up free Wi-Fi

Check the security standards first, warns AirMagnet 15 Apr 2008

Staff wireless networks put data at risk

Employees plugging their own routers into access points 06 Dec 2007

related whitepapers

today's top stories

CIOs must embrace collaboration tools

Author Don Tapscott gives Angelica Mari his reasons for promoting social networking tools and says transparency is the key to security 04 Dec 2008

On a quest to build a connected society

BT Design’s JP Rangaswami talks to Gareth Morgan about his pivotal role in the telecoms giant’s efforts to deliver universal broadband and his plans to tap into the creativity of the open source community 04 Dec 2008

IT leaders must stand by India

A sense of perspective is the most important response from IT leaders to the attacks in Mumbai 04 Dec 2008

Case study: Clifford Chance

Law firm implements Sun platform and reduces datacentres to gain efficiency and cost synergies 03 Dec 2008

Should CRM be more sociable?

As vendors rush to add more social networking bells and whistles to their CRM products, some experts warn that users must tread carefully when venturing into online communities 03 Dec 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Will the terrorist attacks in Mumbai affect your offshoring plans?

Will the terrorist attacks in Mumbai affect your offshoring plans?

Is India becoming a risky destination?

Previous poll results

Latest audio and video articles

Padlocked CDVideo

Technology and privacy

Watch the final video in a two-part Computing roundtable debate on the importance of putting data privacy issues at the heart of your IT plans 02 Dec 2008

Podcast imageAudio

Computing podcast - Standard Life's offshoring plans; and the prospects for government IT

The insurance giant outlines its new outsourcing strategy; and we ask if the government's economic bailout will affect its IT plans 28 Nov 2008

Latest in-depth articles

Doctors looking at a computerAnalysis

Watchdog wants IT to cure privacy woes

Information Commissioner Richard Thomas is urging organisations to put privacy protection at the top of their procurement and development criteria 04 Dec 2008

Colin McDonaldComment

Web 2.0 has potential to transform staff training

Employees can sharpen their IT skills through using the latest interactive training tools, writes Colin McDonald 04 Dec 2008

Advertisement

Primary Navigation