Security and public access WiFi

[Paul Drawmer]

What are the security issues with using public access WiFi?

And, are there any security issues with me not password protecting my own WiFi network? It's here when I'm not all day, why should I password protect it?

I am aware there are some potential legal issues with allowing illegal activity etc - but I'm only asking about the network security aspect.

[anonymous-user]

Paul Drawmer said:

What are the security issues with using public access WiFi?

And, are there any security issues with me not password protecting my own WiFi network? It's here when I'm not all day, why should I password protect it?

I am aware there are some potential legal issues with allowing illegal activity etc - but I'm only asking about the network security aspect.

If you do not protect your own, people could be using it all day!! Possible hacking but also your data limit could be surpassed.

[Griffo2008]

As above. Without yours being password protected, people can use it all day. If you have a limited allowance per month, your neighbours, the people opposite, or any random parked up in a car outside can abuse that allowance. Another thing, is if they start downloading i.e- child porn ... using your network, I guess it will be your name that shows.

As for public wifi spots, I'm beaten. I just use them as normal.

[Paul Drawmer]

garyhun said:

If you do not protect your own, people could be using it all day!! Possible hacking but also your data limit could be surpassed.

That's what I want to do.

How do I protect my self against 'possible hacking' and how real is the threat?

Line limit is a different problem - not worried about that.

[DeputyDawg]

Paul Drawmer said:

garyhun said:

If you do not protect your own, people could be using it all day!! Possible hacking but also your data limit could be surpassed.

That's what I want to do.

How do I protect my self against 'possible hacking' and how real is the threat?

Line limit is a different problem - not worried about that.

Are you asking how to set-up security on wireless networks? (WPA2 etc) And are you so naive to think no one will use your current open network?

[ymwoods]

The chance of a neighbour using your WiFi is high, the chance of you or another user actually being hacked is low however but not so low as to mean there is no point in protecting yourself.

Passwords, bank account details and all kinds of stuff can be "sniffed" on an open network if you know how.

[marshalla]

Paul Drawmer said:

garyhun said:

If you do not protect your own, people could be using it all day!! Possible hacking but also your data limit could be surpassed.

That's what I want to do.

How do I protect my self against 'possible hacking' and how real is the threat?

Line limit is a different problem - not worried about that.

Simplest solution is to switch it off when you're not using it.

[Paul Drawmer]

Sorry Guys, didn't make myself clear.

What's the problem security wise if I allow public access?
Is there really a problem at all, and why not allow access?

I'm not worried about the line limit/ porn problem - they are separate issues.

[Mr E]

Paul Drawmer said:

What's the problem security wise if I allow public access?
Is there really a problem at all, and why not allow access?

If you have no encryption (or weak encryption), I can sit outside your house and monitor everything you do over that network. Your banking and online shopping will be SSH and pretty secure. Everything else will be in the clear and easily readable.

Set WPA2 on your home network. It takes 3 minutes.
If you're feeling public spirited, by all means set a second WiFi point up for free access for the world on the same (A)DSL line.

If you're out and about and using public wireless, I tend to run a VPN back home for security.

[marshalla]

OK - two possible problems

i) someone outside your house uses your open network to gain access to the network inside your house. From there they can retrieve data from your machines, implant malware and monitor what you're doing.
ii) someone outside your house uses your open network to gain access to the Internet. They do something illegal (IIOC, ID-RC, hacking etc.) - when it is traced, it comes back to your connection and you have a world of pain proving it wasn't you.

[Accelebrate]

If you really want to allow public access I'd personally have a separate secure network for all your personal traffic and ensure that the public network has no access to the traffic from the secure network.

[KrazyIvan]

The new digital Bill about to be rush through would mean that if someone else connects to your wireless network and downloads illegal movies, music ect. They can cut you off regardless of the minor fact that it wasn’t you and have no proof to the contrary.

[goforbroke]

Why would you want to let other people use your Wi-Fi for free? I dont understand this, broadband is not a human right, it's a luxury that I pay for. I dont let other people on the street use my phone to call their friends, or use my car to do the shopping.

If someone can afford the equipment that uses Wi-Fi, they can afford their own net connection too.

I'm not trying to start an argument on the subject, just genuinely interested as the thought of opening up my web connection to all passers by has never crossed my mind...maybe i'm just a tight miserable bd.

[Simon says]

goforbroke said:

Why would you want to let other people use your Wi-Fi for free? I dont understand this, broadband is not a human right, it's a luxury that I pay for. I dont let other people on the street use my phone to call their friends, or use my car to do the shopping.

If someone can afford the equipment that uses Wi-Fi, they can afford their own net connection too.

I'm not trying to start an argument on the subject, just genuinely interested as the thought of opening up my web connection to all passers by has never crossed my mind...maybe i'm just a tight miserable bd.

Not at all for the same reasons would you open your toilet as a public convenience?

[lestag]

Paul Drawmer said:

Sorry Guys, didn't make myself clear.

What's the problem security wise if I allow public access?
Is there really a problem at all, and why not allow access?

I'm not worried about the line limit/ porn problem - they are separate issues.

The WIFI on your router is behind the routers firewall.
you have no protection except for anything that is on your computer.

This means that if you share pictures/documents/media player between your computers in the house , anyone else could also view edit *delete* *modify* those files.

It is as if their computer was in your house

Bluntly - DO NOT GO THERE

[Paul Drawmer]

lestag said:

The WIFI on your router is behind the routers firewall.
you have no protection except for anything that is on your computer.

OK - that's enough. I won't do it.

I had just thought I'd make it available for public use when I'm not here, it's paid for and not being used etc etc.
however; as above, I'll keep the protection on.

[Stevenj214]

My wi-fi has been unprotected since I got it, maybe 3-4 years now.

No viruses, no hacking, no peadophiles, no SWAT team beating down my door.

[Morningside]

As there are about 5 other wifi connections near me I notice that some BT customers have to have a small allocation of their network free to allow remote access - Maybe this could be open to abuse?

Trying to connect to them just diverts to a BTopenzone PAYG holding page (£3 a day pass etc) but give it time and I suspect someone will hack it for free access.

[ymwoods]

Morningside said:

As there are about 5 other wifi connections near me I notice that some BT customers have to have a small allocation of their network free to allow remote access - Maybe this could be open to abuse?

Trying to connect to them just diverts to a BTopenzone PAYG holding page (£3 a day pass etc) but give it time and I suspect someone will hack it for free access.

They do not HAVE to have it but it does give them a bonus, when I was with BT I was offered it.

Bassicly if you offer a part of your WiFi connection for free then you will get free access at other peoples WiFi (doing the same thing) and at BT Openzone hot spots. It's good in theory if you visit lots of places with Openzone hotspots but being able to connect to somoene elses WiFi is a bit redundant...you would have to drive into a residential street to get it, and then you don't have a power socket either.

[Accelebrate]

ymwoods said:

Morningside said:

As there are about 5 other wifi connections near me I notice that some BT customers have to have a small allocation of their network free to allow remote access - Maybe this could be open to abuse?

Trying to connect to them just diverts to a BTopenzone PAYG holding page (£3 a day pass etc) but give it time and I suspect someone will hack it for free access.

They do not HAVE to have it but it does give them a bonus, when I was with BT I was offered it.

Bassicly if you offer a part of your WiFi connection for free then you will get free access at other peoples WiFi (doing the same thing) and at BT Openzone hot spots. It's good in theory if you visit lots of places with Openzone hotspots but being able to connect to somoene elses WiFi is a bit redundant...you would have to drive into a residential street to get it, and then you don't have a power socket either.

I used an Openzone/FON hotspot when I first moved into my house and hadn't yet sorted out a phone line/ISP. Very useful.

It's worth noting that it's not the same as leaving your router unsecured though. The hotspots seem to essentially only serve a secure VPN type connection direct from BT, anyone using your hotspot does not have access to your private network or share the same IP address and has probably had to provide credit card details to register.