Public Wireless, or its Evil Twin?


250,000+ readers!

Home

Windows Tutorials

Public Wireless, or its Evil Twin?
by Kurt D. Lynn on 20080319 @ 00:24AM EST | google it | send to friends
Channel: Windows | Infopackets Gazette | (related terms: network, airport, wireless)

The next time you're in an airport, train station, bus station, coffee house, or other public place and decide to "jack in" to the Internet, you might well be exposing yourself to identity thieves -- or worse.

Here's how it works: the girl across from you in the airport coffee shop has a laptop in her briefcase that's set as an 'access point', or a 'WiFi hotspot'. She's even given the access point a legitimate-sounding ID, say, something like "Free Airport WiFi". You power up your own laptop, quickly browse for available networks, see "Free Airport WiFi", note that it's unsecured but ignoring that, you connect.

On connecting, her computer promptly proxies your access to the web and begins feeding your laptop with look-a-like pages for your banks, email access portals, or other sites. She's recording everything that passes through her access point. She's an "evil twin".

OK, suppose you don't connect to the Free Airport WiFi. Suppose instead you go to the connection labeled "Verizon Wireless Hotspot" and connect to it. After all, you know Verizon is a common wireless provider. Unbeknownst to you, however, there's a kid down the hall with a laptop in his knapsack, that is doing the same thing as the girl in the coffee shop. Except his access point is proxying pages that look just like the sign-on pages to Verizon. Of course, the pages you see are familiar. They offer you service for $8.95 for the day -- just like Verizon -- and ask for your credit card information -- just like Verizon. So you enter your credit card information.

That's how easy it is. Ignoring your browser's pop-up warnings, not checking to see if the "lock" icon is displayed on the URL address bar, and not ensuring you have a secure (https) link also make it easy. (Source: pcworld.com)

A recent survey of 14 U.S. and 3 Asian airports found that more than half of the available networks were open and unsecured (this included some airline or airport operations networks). Of the remaining secured networks, most used the weaker WEP protection rather than the stronger WPA. That only makes it easier for third-parties to hack into any data being sent to and from the wireless access point.

Clearly, wireless access is not as tame as you might have thought. So, if you use public wireless make sure you do the following:

(a) Use a VPN whenever possible
(b) Choose websites that offer secure connections
(c) Choose a network that offers WPA (Wireless Protected Access)
(d) Avoid connecting to unknown public WiFi's just because their available
(e) Never connect to "peer-to-peer" or "ad-hoc" networks
(f) Only send private information over a public network if you're using a secure site.

(Source: businessweek.com)

If you don't heed these precautions, you may find that instead of connecting to a network to do business, you're connecting to its "evil twin."

Recent articles (from all channels):

2008/05/09 Today in History: for Friday, May 09, 2008
2008/05/09 [ShellX 20080509]: 'Advanced Run', and 'Diver Windows Manager'
2008/05/09 Texas Refuses Facebook Friend Request
2008/05/09 Photo-Enforcement Technology Replaces Officers On Patrol
2008/05/09 Cuban Government Says 'Ok Computer'
2008/05/09 Excel Can E-Mail Your Weekly Reports For You!
2008/05/08 [ShellX 20080508]: 'Shell Enhancer', and 'Lansweeper'
2008/05/08 Xobni: MS Outlook Social Networking Technology for your Inbox
2008/05/08 Music Companies Jump on GTA IV Bandwagon
2008/05/08 Fascinating: Memristor to replace Binary
2008/05/08 Adobe Hopes To Make Flash Master Of The (Mobile) Universe
2008/05/08 Spiffy Envelopes and Labels in MS Word
2008/05/07 [ShellX 20080507]: 'Winbin2iso', and 'Loop Typer'
2008/05/07 Yahoo Adds Security Warnings To Search Results
2008/05/07 Apple to Lose Money on iTunes Movie Releases
2008/05/07 Amazon.com takes New York Tax to Court
2008/05/07 Need Glasses for the Slide Sorter View in MS PowerPoint?
2008/05/07 After Winning The DVD Format War, Blu-Ray Sales Tank
2008/05/06 [ShellX 20080506]: 'Visual Basic 6.0 Portable', and 'Double-...
2008/05/06 Yahoo Outsources to Jajah
2008/05/06 New HP Circuit Could Change Technology Forever
2008/05/06 Movie Downloads To Match DVD Release Dates
2008/05/06 Microsoft Ends Yahoo Bid
2008/05/05 [ShellX 20080505]: 'Ie7 Pro', and 'Desktop Ok'
2008/05/05 The WB Network Hops Online
2008/05/05 Microsoft Slashes Price of Xbox 360 Overseas
2008/05/05 Google CEO Wants YouTube to Take More of Your Money
2008/05/05 Finding Items in MS Outlook's Reading Pane
2008/05/02 [ShellX 20080502]: 'Software Virtualization Solution', and '...
2008/05/02 Rogers Brings iPhone to Canada
2008/05/02 New Google Tool Cuts Down Irrelevant Image Search Results

--

Subscription Management

To subscribe to our newsletter, or to read past issues:

http://www.infopackets.com/windows+newsletter.htm

To remove or change your subscription information, visit:

http://www.infopackets.com/remove+change+email.htm