Community Newsletter: Q&A forum: What are the dos and don'ts for using public Wi-Fi?

okay that would help you with viruses, but her concern is that the information being sent from her computer will be captured through the waves. she's wondering what things she should/shouldn't do to prevent some one from stealing important information and passwords. you cannot convince some one to buy a macbook solely based on the fact that she's going on vacation and she wants to be secure. would you spend $1200 on a padlock for a suitcase filled with jewelry when you could just decide not to bring the jewelry on vacation in the first place? i don't want to make this a mac vs. pc war, but your suggestion is just so stupid and you obviously put no thought into her situation that i have no choice.

The question was about WiFi Security, not about vulnerability to a Virus. A typical snobish answer from a Mac User.
ac's have less than 10% share of the Market. Closer to 3%. If and when it gets a much larger share you will see plenty of Mac Attacks.

"PC whiney attack?" We aren't talking politics here, just how to connect to an insecure wireless network. We aren't doing anyone any favors by muddying up the waters with a Mac vs. PC argument.

I was always taught that anyone with a "sniffer" can steal data that is transmitted on an insecure connection. That would mean any password, credit card number, email or file transmitted.

The type of computer you own will not protect you once the data leaves your machine!

My advice: remain paranoid. Don't use an insecure network for anything except checking email. Change your password later after you do it when you are back on your secure connection.

For PC/Mac protection on ANY network: make sure your firewall and antivirus software are always up to date and USE THEM.

And don't forget: one of the major reasons for data loss and compromise is someone physically stealing your laptop! Make sure you carry a locking cable and use it to lock the laptop down in hotels, etc.

... a bit 'touchy' on the subject of Mac vs PC, are we?

That was a very nice rant, I must say, but you provided little (if any) substance to answer the original question.

And I will have a great day, thank you ...

It's funny how Mac people think the Mac is way better and PC people seem to always say they are the same. I've been using a Mac for years and personally I find it way better (and I have used Windows a lot). Sure there are a ton of programs out there for the PC but I'm not interested in the tons of software, most of it crap. I'm doing graphics and I have the programs I need. If you like your PC and it does all you need than that's fine but I'm willing to pay a little more (it's definitely not double the price for a Mac) for a system that I find much, much nicer to use. It's funny that your laughing at people for paying for something they like. Are you laughing all the way to the bank because someone is buying a more expensive car because they feel like it drives way better and is more comfortable? I think Apple really researches and comes up with really great interface ideas. Microsoft on the other hand just keeps adding features and really could care less about usability. Also, I've been using a Mac since they came out and I haven't had one single attack or virus. I'll continue to use my Mac that will do everything I need (and more) with what I find to be a much, much better interface. I could save a few bucks and get a PC next time but I'd rather pay a tiny bit more for nicer machine. If you're happy with your PC and that interface works for you then good for you.

I have been using PC clones (and one actual IBM PC) since their introduction, and have been on the net since before we called it "the internet" and have not suffered a single successful attack. It helps that I have used firewalls since before firewalls were commercially available (old PC with two network cards as an early firewall/proxy) and have maintained good practices. Even the hundreds of machines entrusted to my care - with all of the weaknesses engendered in DEU syndrome - have not experienced any attacks that caused outages or data loss.

I have used MAC - but they have usually been beyond the price range for general office machines. I have also had many UNIX and Linux systems and a few the younger group never even heard of (cp/m anyone?)

I consider most of the problem to be uneducated end users, so I have always concentrated much of my management efforts on user education. That almost never fails in the long run. DEU (dumb end user) syndrome is treatable . . .

I agree with this poster. Even though I tried hard to maintain a safe PC environment by using all the latest spyware and anti-virus softwares, I became weary of having to NUKE my PC several times a year because of viruses , etc. I finally took the plunge and switched to Apple both with a laptop and my home base imac. It hasn't been an easy transition as it has been a whole new learning curve and I have had to forgo some of the programs I grew up using that aren't made for Mac's, BUT it has all been more than worth it!! The ease of operation, the security, and the level of customer support supplied by Apple FAR OUTWEIGHS anything I ever saw with PC's. Apple also makes it very easy to transfer all your important files over to your new imac / ibook. I don't want to escalate any wars but this was my experience and it has been great! My only suggestion is if you jump into Mac's, buy a good book like David Pogue's "Mac OS X" to help you along with learning the operating system. It was a huge help. Apple was a little vague with their literature, even though they have great phone support and support at all their Apple stores.

1.Make sure you are on a legitimate network.
Ask an employee of the establishment you are lounging at for the name of the Wi-Fi network. Do not assume it is the one labeled "Free Wifi" or "Public Wifi", this could just be some wiseguy looking for people to hop onto his network as they surf so he can log everything you are doing. Also ask the employee what the password is. Most establishments in populated ares will have a password so people near by can't mooch.
2. Keep your eyes out for S for Security.
When you are on a site that may contain personal info make sure you see the S in https://www.bankofamerica.com. The https stands for secure. The new beta version of Mozilla Firefox 3 has increased security feature and will give you a big green bar when you are at a secure site. If a site you regularly use does not have a secure certification and you post private information to that site, anyone around you can have access to that information. So call the site's webmaster and demand certification.

There are a lot more steps you can take to securing your privacy in public. But if you follow these two simple rules you should have a great trip with safe surfing!

Do not give personal info to sites that do not meet the following criteria:
1) require a secure login (as in, the login page is https... and do check, don't assume)
2) remain secure (https) the entire time you're logged in.

as I posted in another thread, a tip for gmail users to let you follow the above criteria: load https://mail.google.com instead of http://mail.google.com and it will stay secure after you've logged in. That is not true of all sites, however; some only secure the login process, even if you specified https when loading the login page. So you'll have to keep your eyes open using something else for the first time.

Margaret,

First, be aware that (almost) ANYTHING that you type or any info that appears on your screen while you're using a wireless connection can be seen by others nearby.

If you are accessing a page that requires a login and password, or if you are entering ANY personal data (credit card, SSN, etc) make sure that you are on a secure site. That's easy enough -- just check that the web address begins with https instead of the usual http -- and your information will be safely encrypted before transmission. As long as you're on a page with an address that begins with https, the data you send and receive is protected from sniffers and snoopers.

But be on your guard, some web-based email providers have a secure login page, but after you're logged in the access reverts to normal non-encrypted mode. So any email you send or receive while on a wireless connection is out in the clear. Google's GMail and Yahoo Mail are examples of webmail services that work this way. Until recently Hotmail didn't even offer a secure login option. So look for the link or checkbox for the secure login when accessing your web-based email. If your service doesn't offer one, consider switching or decide to live with the security exposure.

Oh, and there are the "shoulder surfers" to watch out for. Just like when you're entering your PIN code at an ATM, you need to keep an eye open for anyone who might be glancing over your shoulder while you hunt and peck in the airport or coffeeshop. I always use two fingers when entering my pin or password... one presses the correct key and other is a decoy. So even if someone was watching from across the street with binoculars, it's almost impossible to steal a password.

Before you use a Wi-Fi hot spot, users need to take some precautions to ensure they are safely and securely connecting to the Internet.

1. Install a Firewall

Anytime you use your mobile gear on the road and especially in hot spots, make sure you have installed firewall software. Hot spots aren't secure access points and users need to take responsibility for their own security.

2. Disable Wi-Fi Ad-hoc Mode

You should only allow access point networks that you have created using your Wi-Fi software or you can use network connections in Windows XP. Don't allow instant network connections that you have not approved of or are aware of. When in a hot spot you may pick up other Wi-Fi networks that you do not want to access or allow access to your laptop. Disable ad-hoc mode before entering a hot spot.

3. Use a VPN

When connecting to a corporate network one should use their company VPN. This provides additional security for your gear. Working in a hot spot can create new risk exposures and the potential for your data to be comprised.

4. Disable File & Printer Sharing

When using a Wi-Fi hot spot, you don't need to have their laptops file and printer sharing enabled. Leaving this enabled while using a hot spot leaves you vulnerable to hackers. This is another item that should be disabled before entering a hot spot.

5. Turn It Off

When you aren't connected to a Wi-Fi hot spot, you should turn off your wireless devices. If you are working but don't wish to be connected, remove the Wi-Fi card. There should be a manual switch to turn Wi-Fi off or You can disable the connection using the Wi-Fi software.

6. Don't Advertise Your Wi-Fi

When users are in public areas such as a hot spot, it is not the time to brag to strangers about your Wi-Fi capabilities. Always be discreet when working and don't let others view your work. You could end up making yourself and your mobile gear a target for theft.

7. Make Folders Private

Making your folders private on your laptop will make it less appealing for a hacker to try and gain access to your documents. In a hot spot you don't know who is working around you or who might be attempting to access your laptop.

8. Password Protect Your Files

Another step to securing your data and making your work a less desirable target is to password protect specific files. There are a variety of software programs available which can provide you with password protection and the added peace of mind that it will bring. Remember to password protect any important files before using a hot spot.

Regards
Ankit

Can you recommend some password protection software to use to protect my files? I use vista hme premium.

I am using Protector Suite QL software by UPEK Inc. it integrates my file security and finger print recognition its nice and user-friendly it also encrypts your file and password/finger-print protects your files.

tip for using gmail: if you load https://mail.google.com instead of http://mail.google.com it will not revert back to regular old http after you've logged in... it'll stay secure (https). I don't believe that works for yahoo, though (at least not the last time I tried).

Hubby and I both have laptops with WiFi as well as wireless cards through Verizon. We use the wireless connections only at home and at work where we know we have bullet proof internet security both of a software nature and a hardware nature.

It is my understanding that most of these "open access" WiFi connections, by definition, are not secure. And before you think, "oh, well, I'm not transmitting any sensitive data," what about your email passwords that transmit automatically when you open Outlook or Outlook Express? or your bank account passwords when you check your balance? All it takes is someone with the equivalent of a keylogger to copy the transmission and you are done for.

Cite: Bradley Mitchell
Article from About.com

hotspot

Definition: A hotspot is any location where Wi-Fi network access (usually Internet access) is made publicly available. You can often find hotspots in airports, hotels, coffee shops, and other places where business people tend to congregate. Hotspots are considered a valuable productivity tool for business travelers and other frequent users of network services.

Technically speaking, hotspots consist of one or several wireless access points installed inside buildings and/or adjoining outdoor areas. These APs are typically networked to printers and/or a shared high-speed Internet connection. Some hotspots require special application software be installed on the Wi-Fi client, primarily for billing and security purposes, but others require no configuration other than knowledge of the network name (SSID).

Wireless service providers like T-Mobile generally own and maintain hotspots. Hobbyists sometimes setup hotspots as well, often for non-profit purposes. The majority of hotspots require payment of hourly, daily, monthly, or other subscription fees.

Hotspot providers strive to make connecting Wi-Fi clients as simple and secure as possible. However, being public, hotspots generally provide less secure Internet connections than do other wireless business networks.

About.com: Wireless/Networking; hotspot
http://compnetworking.about.com/cs/wireless/g/bldef_hotspot.htm



Cite: Bradley Mitchell
Article from About.com

Q. Are Wireless Networks Secure?

No computer network is truly secure, but how does wireless network security stack up to that of traditional wired networks?
A. Unfortunately, no computer network is truly secure. It's always theoretically possible for eavesdroppers to view or "snoop" the traffic on any network, and it's often possible to add or "inject" unwelcome traffic as well. However, some networks are built and managed much more securely than others. For both wired and wireless networks alike, the real question to answer becomes - is it secure enough?
Wireless networks add an extra level of security complexity compared to wired networks. Whereas wired networks send electrical signals or pulses of light through cable, wireless radio signals propagate through the air and are naturally easier to intercept. Signals from most wireless LANs (WLANs) pass through exterior walls and into nearby streets or parking lots.
Network engineers and other technology experts have closely scrutinized wireless network security because of the open-air nature of wireless communications.
The practice of wardriving, for example, exposed the vulnerabilities of home WLANs and accelerated the pace of security technology advances in home wireless equipment.
Overall, conventional wisdom holds that wireless networks are now "secure enough" to use in the vast majority of homes, and many businesses. Security features like 128-bit WEP and WPA can scramble or "encrypt" network traffic so that its contents can not easily be deciphered by snoopers. Likewise, wireless routers and access points (APs) incorporate access control features such as MAC address filtering that deny network requests from unwanted clients.
Obviously every home or business must determine for themselves the level of risk they are comfortable in taking when implementing a wireless network. The better a wireless network is administered, the more secure it becomes. However, the only truly secure network is the one never built!

About.com: Wireless/Networking; Q. Are Wireless Networks Secure?
http://compnetworking.about.com/cs/wireless/f/arewlanssecure.htm


As can be seen when it comes to both wired and wireless networks nothing is truly secure. The best that can be done is to secure your computer the best you can. I picked these two articles because they answered your question with plain common everyday language. Actually it does not matter, you use the network basically at your own risk. The only thing you can do is make your computer and network as secure as possible.

Rick