wifi security

[Pokerjoe]

http://www.nytimes.com/2011/02/17/technology/personaltech/17basics.html?_r=1&src=me&ref=general

This is a pretty troubling article. I just checked a bunch of books and none of them are https.

Anyone have ideas about what to do? Seems we aren't really too safe using wifi even at home, much less on the road.


Since not all Web sites have “https” capability, Bill Pennington, chief strategy officer with the Web site risk management firm WhiteHat Security in Santa Clara, Calif., said: “I tell people that if you’re doing things with sensitive data, don’t do it at a Wi-Fi hot spot. Do it at home.”
But home wireless networks may not be all that safe either, because of free and widely available Wi-Fi cracking programs like Gerix WiFi Cracker, Aircrack-ng and Wifite. The programs work by faking legitimate user activity to collect a series of so-called weak keys or clues to the password. The process is wholly automated, said Mr. Kitchen at Hak5, allowing even techno-ignoramuses to recover a wireless router’s password in a matter of seconds. “I’ve yet to find a WEP-protected network not susceptible to this kind of attack,” Mr. Kitchen said.

[Pokerjoe]

BTW, I should add that I know NOTHING about this stuff. So if someone who does says it's all cool, we've nothing to worry about, good. But until then, does anyone here know about this stuff and want to weigh in? I personally don't want to log in one day and see that my whole account was dusted off in an online casino.

[scott235]

Best advice I've ever gotten on SBR- get a seperate password for payouts only. Given over phone is best.

[king]

This is not new news. Ever since wifi was introduce to the public the issue was known. The article doesn't example that it almost never happens, it's a scare tactic to buy some service. The writer KATE MURPHY is an idiot on this subject her self as every week the same issue is shown on the New York Times or other major News.

It really amazes me that the writer doesn't write how many people were effected by this. She had no evidence or research, and computer security specialist, NSA, professors are all laughing when they see an article like this. Also us computer security specialist don't use programs run by amateurs to find wep or wpa access.

[brad89]

“I’ve yet to find a WEP-protected network not susceptible to this kind of attack,” Mr. Kitchen said.

In your router settings, change the encryption/security to WPA2. WEP (which is mentioned in the article) is much weaker than WPA2.

Also, yes, avoid using public connections unless you have to use it.

[ThaWoj]

would this be similar to something like facebook? i.e. say u live in an apt complex and use the office's free wifi that is available to everyone. can someone get access to your facebook over that network, either while u are using it or even when you're not? should u 'logout' everytime u close the website or it doesnt matter?

[Covy]

would this be similar to something like facebook? i.e. say u live in an apt complex and use the office's free wifi that is available to everyone. can someone get access to your facebook over that network, either while u are using it or even when you're not? should u 'logout' everytime u close the website or it doesnt matter?

Being logged in or not will not make a difference. By logging onto facebook initially, when the password is typed in, it is stored on the website's cookie, which is easy for hackers to take.

[ThaWoj]

Being logged in or not will not make a difference. By logging onto facebook initially, when the password is typed in, it is stored on the website's cookie, which is easy for hackers to take.

so to understand u correctly, it doesnt matter if i use the password store feature/remember me or manual log-in every time i enter the url in the browser?

[Stallion]

I still use a wired connection, I will never go wireless.

[jgilmartin]

In your router settings, change the encryption/security to WPA2. WEP (which is mentioned in the article) is much weaker than WPA2.

Also, yes, avoid using public connections unless you have to use it.

This. That said, still wish more books were using https.

[Birre]

Using a VPN is the only way to have a secure connection over wifi (but the VPN provider must be a trusted one)

[Covy]

so to understand u correctly, it doesnt matter if i use the password store feature/remember me or manual log-in every time i enter the url in the browser?

Yes.

By using a wi-fi network, you are transmitting information from your laptop/computer to your router. Even with a saved password, that information must still be submitted to the website to log on. It is almost too easy to steal that information. The safest way to log on is to use a wired connection, or if using a wireless, connecting through a VPN.

[BOP24]

I still use a wired connection, I will never go wireless.

This. Hackers can even get into a WPA2 encrypted network with no problems

[Ibrakadabra]

Unfortunately there probably ain´t no way to be 100% safe.