Road Warrior At Risk: The Dangers Of Ad-Hoc Wireless Networking
Airport Menace: The Wireless Peeping Tom
----------------------------------------
As a network security consultant, I travel quite frequently. At times, it seems like the airport is my second home. I actually like to fly, it's a moment in time where no one can reach me by e-mail, or mobile phone. It never fails that something interesting happens to me at the airport. I've even met some famous people during my travels. A few months ago, I ran into Frank Bielec, from the TLC show, Trading Spaces. But one of my favorite things to do at the airport is browse the wireless Ethernet waves. I'm never really surprised at what I find. I'm just glad I know more about wireless Ethernet than the average road warrior. The Dangers Of Ad-Hoc Wireless Networking
-----------------------------------------
Most people who have wireless Ethernet at home, or the office, connect to the wireless network by attaching to a wireless Access Point, or AP. This method of wireless networking is called "Infrastructure Mode". If you have a secure wireless network configured in "Infrastructure Mode" you are using MAC address filtering, some level of encryption, and have made some additional changes to your AP in order to prevent just anyone from using it or capturing data. For more information on configuring your "Infrastructure Mode" wireless network take a look at the "Wireless Network Security" page at Defending The Net. Links
-----
http://www.defendingthenet.com/WirelessNetworkSecurity.htm However, for those who are not using "Infrastructure Mode", and are configured to communicate from machine to machine, or "Ad-Hoc", there are a few things you should be aware of. A wireless Ad-Hoc network allows you to communicate with other wireless Ethernet systems without using a wireless access point. It's kind of a peer to peer configuration and it works rather well. The problem is, most people just set it up, and forget about it. At home, it's not a huge problem, but when your on the road, it could cause you a great deal of grief. The airport is probably the best place to find Ad-Hoc networks. Business men and women, delayed once again, power up their laptops and get to work completing the days tasks, or planning tomorrows agendas. I can't tell you how many systems I find in the airport configured this way. Not just in the terminal, but on the plane. About three months ago, just after we reached cruising altitude and were allowed to use our "approved electronic devices", I found that the gentleman two seats up from me had a laptop configured as Ad-Hoc. He walked by me about ten minutes later and commented on how much he liked my laptop. I thanked him, and asked if his laptop was on, and configured to use wireless Ethernet, he said yes. To make a long story short, I showed him that I could see his laptops wireless Ethernet and informed him of the danger. He asked me if I could access his hard drive, and I told him that it might be possible. He asked me to see if I could, so I obliged. After configuring my laptop to use the same IP address class as his, and typing "net use * hiscomputersIPAddressc$ "" /USER:administrator", I received a notice that the connection was successful and drive Z: was now mapped to his computer. I performed a directory listing of his hard drive and the guy almost had a heart attack! After this, he moved up to the seat next to mine and we spent the next hour or so configuring his laptop securely, starting with securing his computers local administrator account. At one point during the configuration, he made the statement that I got real lucky because his local admin account did not have a password. My response to him was, I get lucky quite often. Who Else Has Your Client List
-----------------------------
Just think of the possibilities. What do you have to lose if someone is able to just peruse the files and data on your laptop? Do you maintain your customer list on your laptop (Do you want this in the hands of a competitor)? How about your personal finances (Identity theft ring a bell)? So many people I talk to initially say, "I really don't have anything of great importance on this system". Then they think a little bit and start rattling of things they never really thought about before. All of a sudden, they get concerned. The fact is, whether it be "Infrastructure Mode", or "Ad-Hoc" wireless Ethernet communications, if not properly configured and secured, can pose a significant risk. There are thousands of articles on the Internet about the dangers of improperly configured wireless networks, yet the number of unsecured networks seems to be getting greater, not less. Strength And Posture Does Reduce Your Risks
-------------------------------------------
Keep in mind that your objective should be to reduce the chances that you will become a target for computer compromise. When I was growing up in South Philadelphia, I remember my father telling me that when you walk down the street, especially in the evening, to walk tall, and project a position of strength and authority. Why, because thugs typically pick out those who look like an easy target. The same thing goes for computer security. Reduce the risks of becoming a target buy configuring your system with a strong security policy. When I perform security assessments, I create a list of potential targets, and potential methods of compromise. I then prioritize that list by which system, with a particular vulnerability, may be easiest to compromise. Those at the bottom of the list typically never come on my radar screen; the best scenario it to keep of the radar altogether. Conclusion
----------
If your are using wireless Ethernet, no matter what configuration, follow a few rules and keep yourself secure against most common types of compromise. 1. Above all, make sure all your user accounts have strong passwords, especially those that have administrative control over your system; 2. Configure your wireless network to use some sort of encryption. I know there is a lot of concern about the "crackability" of WEP, but if this is all you have to work with, and then use it. It is still helpful; 3. If possible, use MAC addresses filtering to restrict unwanted systems from attaching to your wireless network; 4. Make sure the firmware for your AP's and wireless Ethernet cards are up to date. These updates can be found on your card or AP's support site. Remember, if you are compromised over your wireless network it can be near impossible to track down where the attack came from. Worse yet, think about how many systems become compromised, and no one ever knows it? About The Author
----------------
Darren Miller is an Information Security Consultant with over sixteen years experience. He has written many technology & security articles, some of which have been published in nationally circulated magazines & periodicals. Darren is a staff writer for http://www.defendingthenet.com and several other e-zines. If you would like to contact Darren you can e-mail him at Darren.Miller@ParaLogic.Net or DefendTheNet@ParaLogic.Net. |
Other Trading System Articles
Internet Poker Affiliate Partner Online poker is without question the fastest growing industry on the net and with billion dollars expected in total revenue for the next years, you as an Internet poker affiliate partner will be able to get a cut of the tremendous profits generated by this industry and by the virtual internet poker affiliate partner programs.Poker Affilia ...Franchises Offer Shortcuts, But Not Control Q: I will be retiring this year at age 60 and intend to fulfill my lifelong dream of owning my own business. I'm too old to start from scratch, so I'm looking at several franchise opportunities, including fast food, auto parts, and an accounting service. What should I consider before choosing one? Anthony R.A: Congratulations on the retir ...HYIP Legal? Are there really legal High yield investment programs around? We are too used to seeing scams all around us in the internet. This caused many to have an impression that HYIPs are illegal.There are in fact legal HYIPs that exist, offline as well as online. They are involve in real investments and have a much lower ROI than most scams that ...Become Rich From Working Online I am sure most of you have searched the Internet and seen people who have made their million-dollar empire from working online. Everyone tries to become this person by buying up e-books or promoting someone else’s product. I have tried them all. I was and affiliate, I bought tons and tons of e-books on how to create wealth working from home. ...The History Of Interest Throughout Time Although I am sure that someone at the State Department will argue otherwise, Cyrus The Great (590 – 529 BC), founder of the Persian Empire, was no terrorist. Quite far from it. Although one might not have wanted him as next-door neighbor, Cyrus II of Persia was very illuminated for his times, according to the Greek historian Herodotus. ...Can Car Insurance Be Affected By Your Bad Credit History? If you have bad credit you can be denied car insurance! The protections afforded to the consumer since the Depression of 1929 no longer exist. The Financial Laws passed through Congress in 1992 allowed banks, insurance companies, investment firms to handle banking, insurance and investment operations. Laws passed after 1929 had prevented banks f ...Why Do You Want to Become a Online Trader? Motivational guru Tony Robbins teaches that the reason for doing something rates much higher than the methods you use to get the job done. In order to make your goal REAL, you need to attach severe, horrifying, intense and profound fear to failure.Open up a notepad either on a desk or on your computer in a quite place and ...Forex Option Brokers The word Forex is derived from combining two words - Foreign Exchange. It deals with buying of one currency and selling of the other at the same time. Over $2 trillion in foreign exchange is transacted everyday.Currency exchange is a new option that has emerged for small investors. Earlier, the market was not easily accessible to small in ...Automated Trading Orders in Forex Trading Practical trading involves lots of simulations and automated trade orders using the power of computer. Charting, graph plotting, and automated trade orders; all these are used to enlighten your routine trading work and it spares you more time in studying the market.Some of the well known trading orders are zero stops, stop order, limit or ...E-Currency Trading: Not working Makes you More Money You are always hearing about this cash yielding system that requires no recruting or selling, just 60 minutes a day (at most) and no super human skill.A little hard to believe!Anyway that is always the first impression if you are someone who has surfed the web for some time.Instead, let's take a look at the Real Facts about ...Are These Simple Trading Mistakes Costing You Money In The Forex Market The 2% rule is a powerful tool in Forex trading. By adopting this rule you’re using a strategy that decreases the size of your losses during losing streaks, an important consideration. There is, however one small caveat that you need to be aware of when using the 2% rule to calculate how many Forex shares you are going to buy. As you know, the n ...Switzerland as an Offshore Jurisdiction Thinking of using Switzerland as an offshore jurisdiction, think again!The following comes from the Swiss embassy page and speaks for itself showing clearly that Swiss banking secrecy is not what it used to be.Bank Secrecy FactsBanking secrecy does not protect criminal or illegal activitySwiss banking secrecy is in no ...Real Estate Market Timing The United States, Canada and all other modern industrial economies experience significant swings in economic activity. In some years most industries are booming and unemployment is low; in other years most industries are operating well below capacity and unemployment is high. Periods of economic expansion are typically called b ...Picking Mutual Funds to Outperform the Market With over 6,000 mutual funds available, it may be tempting to pick funds from a popular star or index rating system. Savvy investors, however, balance multiple factors in their selection process. Ratings represent only the historical performance of funds and cannot predict the future. Performance consistency, management skill, and expense limit ...Traders, Defend Against the Dreaded Death Spiral. It has often been said that there is only two ways to get hurt really bad on a stock trade, getting caught in a "death spiral" by not using DTM: Decisive Trade Management in the way of stop loses and having a stock halted on you. Halts you have zero control over. Death spirals are of your own making if you do not practice the use of stop loses. ...Protectionism First let’s see what protectionism is. According to Mr. Webster it is the advocacy, system, or theory of protecting domestic producers by impeding or limiting, as by tariffs or quotas, the importation of foreign goods and services.That sounds pretty good. It is something that will protect the jobs of our workers from goods that can be pro ...Ever Been To A Pow Wow? Selling today has, in many cases, become like a giant shell game, or what I refer to as the Big Pow Wow. For those of you who haven't got a clue as to what I am talking about, let me explain. Years ago, when the white man invaded the Native American's homeland, they would often bring gifts. These gift exchanges were accomplished with a variety o ...Big Pharma Bottoming Process (BMY PFE & LLY) Big pharma innovators have been under pressure from generic drug competitors, Medicare changes, and lawsuits. There's been a general negative feeling towards high drug prices. However, the pendulum may swing in favor of drug innovators, because of greater awareness that large capital investments are required to create a new drug, and if those in ...Forex Trading 'Must Do': Instant Guide For Forex Beginners It is believe that more than 50% of Forex traders are losing money long term in the foreign currency exchange market. Yet, there are still a lot of Forex traders jump in to the market, trade blindly and lost their money. Trade after trade, its surprising to see that 'normally-losing' traders keep betting (not investing!) their money into Forex m ...Horse Racing Betting, The Risk Free Way You may or may not of heard of all this talk about been a change to horse racing betting where you can bet on horse races risk free.Yes that’s right, Risk Free!Now this isn’t some bogus system that gives you one horse that is guaranteed to win, it isn’t even like normal gambling. It’s more like trading as you are betting on more th ...Arbitrage Trading Home Business Many people today are looking for ways to earn a little extra money working from home. Maybe you are on of them. I know I am always on the look for new and exciting ways to earn some money working from home.That’s what I am writing this article. To tell you about Arbitrage Trading and SureBetPro, and how you can use them to ...The World Doesn’t Need Another Math Textbook I know this statement is shocking. Some of you may feel that I have announced the end of the civilization as we know it. How in the world will people learn math without the latest and greatest math textbook. The answer is simple. The same way people have always learned math prior to the modern education system, by doing math as they go about the ...The Stock Market Report That Wall Street Does Not Want You To Read The best way to maximize your profits is to be prepared to give some back to the Stock Market. When most traders first hear this, they are a little taken back. Why would you give any of your profits back to the Stock market; because you are never going to be able to exit right at the peak of the Stock market trend. But, you can still stay with t ...Teeth Whitening, the Plain Truth Virtually everyone wanting to brighten their smile can benefit from teeth whitening. Patients with teeth that are discolored due to age, smoking or other extrinsic staining factors are excellent candidates for teeth whitening. Research indicates that teeth whitening is completely effective in more than 78% of people. As teeth whitening continue ...What is an Online Forex Trading? For-ex stands for Foreign Exchange; it is a global market for dealing currencies at floating exchange rates. The foreign exchange is world’s biggest currency market, on an average everyday dollar one to two trillion is traded in the foreign exchange. The trade is mostly done over the internet and telephone lines. Online forex trading is a fast, ...
|
