Wireless Connection Security
Wi-Fi
Hotspot Security
by
Phil Haley
You've set up your Boingo account,
you're hanging out at the Home Turf sports bar in LAX and you figure
you'll do a little business or check your e-mail while sipping a
Chardonnay. Well, that's the point of all this; being able to take
care of a few things while in a relaxing atmosphere.
Don't, however, get so relaxed that you ignore
security and give all your confidential information to some
unscrupulous hacker. Yeah, you see the guy. He's over in the corner
wearing that fake nose and glasses with the ridiculous Bozo the
Clown cap. Yep, drinking a Blatz. Dead give away.
Sorry, they won't be that obvious, I doubt they ever
drink Blatz and very seldom wear clown caps. When you're thinking
back, trying to remember who was around when your password was
stolen, you probably won't remember the woman in the tastefully
tailored business suit, and if, by chance, you do, she won't be the
one you suspect. The best defense is to implement some simple
security practices and measures that will safeguard your business
and personal information.
Hot Spot Security: Simple Stuff
Be aware of those around you.
When you're considering Wi-Fi security in public
places one of the first safeguards is anything but high tech.
Remember a few years ago when people were getting huge phone bills
because someone was watching as they keyed in pass codes? It's still
happening to Wi-Fi network subscribers. Do what you can to keep
prying eyes from your keyboard and screen. You pay good money for
your monthly subscription and there's no reason to let anyone
piggyback or steal your credit card number as you sign up for a
daily use fee at Starbucks.
Speaking of passwords:
Those of us who toil and travel are prime targets for
those who may be of the persuasion to purloin. In other words, it's
quite possible to be targeted for laptop theft. Use a complex
password to protect your files, folders and laptop from access by
those villains of concourse and lobby.
Don't Share!
Yes, I know, mothers have been telling us to share for
centuries but, at least while using a Wi-Fi hotspot, make sure you
disable file sharing. It might be great for the home and good at the
office but it's disaster in the making at your favorite coffee
house.
Use a Personal Firewall.
If you're using a corporate laptop make sure you talk
to your IT department before you install any firewalls but if the
laptop you're using is your own let me suggest downloading a copy of
ZoneAlarm. There are others of course but, for personal use, since
ZoneAlarm is free and seems to test better than the rest I can't see
a reason to recommend another.
Most of the reasons for using a firewall should be
self-evident but, to say the least, you'll want to be made aware of
any traffic coming or going and any unusual communication between
applications.
Hot Spot Security: Less Simple Stuff
Beware the Evil Twin
Otherwise known as 'Rogue Hotspots' or the 'soft AP
attack' this Wi-Fi version of the e-mail Phishing scam is
perpetrated by hackers who jam and mimic the signal and SSID of a
legitimate hotspot. They then serve up a sign-in page garnering
usernames, passwords and, in some cases, credit card numbers. If
they go so far as to allow a connection to the Internet they're then
in the position to intercept unencrypted traffic as well as any
files open to sharing (Don't Share!).
There are a few things you can do to protect yourself
from 'Evil Twins':
-
Don't set your Wi-Fi card to allow automatic
connection to any available network.
-
Check the list of available SSIDs to make sure
you're connecting to the right one.
-
Turn off the ad-hoc mode allowing other clients to
connect directly to you.
-
Turn off your Wi-Fi card entirely as soon as you're
finished.
-
Use the personal or enterprise version of
'AirDefense', whichever may be appropriate.
-
Although a firewall won't keep you from connecting
to an 'Evil Twin' it will help to safeguard your information
should you inadvertently fall victim.
Encrypt Confidential Information
Data that's transmitted between yourself and a secure
Web site can be counted on to be safe from the Starbucks Snidely
Whiplash so when you're purchasing goods, or banking on-line, you
can do so without fear. When you're logging onto the secure portion
of the site, however, you may be doing so without the protection of
security so be careful to note whether or not the sign in page is
secured (https). When sending e-mail there are a few things you can
do to safeguard yourself. For example, instead of using Outlook or
Thunderbird, take advantage of your ISP's Web interface which, in
most cases, will be secure and should protect your data during
transmission. If you frequently encounter the need to send large
files via e-mail then using a compression program will meet your
need to reduce the size of the file and most compression programs
will also secure the data with encryption. Another option is to use
a free encryption program like Cryptainer LE. Cryptainer LE can
encrypt any or all the files stored on your hard drive, protecting
them in case your laptop is stolen or compromised, as well as allow
you to e-mail them with the security of encryption. Cryptainer PE is
also offered for enterprise applications.
Use a Virtual Private Network
Think of a virtual private network (VPN) as a solid
conduit, or tunnel, between your laptop and your company's network.
By using a VPN your communications will be as secure as they would
be if you were sitting at your desk. Mac OS X™, Windows™ 2000 and
Windows™ XP have built in VPN clients and if you're a user of
Windows™ 98, ME or NT you can download the free Microsoft®
L2TP/IPSec VPN Client from Microsoft®. If you're a Linux user you
can download the free S/WAN VPN client. While the use of a VPN is
one of the best ways to protect your confidential data when you're
using a Wi-Fi hotspot it is, unfortunately, limited to communication
between your laptop and your company's server. If you want to
conduct personal business with similar security levels the best
solution is the award winning GoToMyPC software.
Use Anti-Virus Software
It's somewhat surprising that so many people are aware
of the dangers of 'net borne viruses and, yet, so many either fail
to incorporate anti-virus programs like McAfee & Norton or fail
to keep them up to date. When you're using a public hotspot it's
more important than ever to have anti virus software installed. Once
you've got the software up and running make sure that it's updated
on a regular basis and update it anytime you hear about a new virus
or a new version of an old virus. If you've got an auto-update
feature built into your program make sure you take advantage of it.
By following these security measures you should be able to enjoy,
with the confidence that your private information will remain
private, your favorite Wi-Fi hotspots around the world.
About the author: Phil Haley is a technical
writer and the editor of Refurbished Laptop Computer Info. For more
information regarding buying, maintaining, upgrading or enjoying a
laptop computer visit Refurbished Laptop Computer Info.
Back To Top: Wireless Connection Security
|
