Friday, May 11, 2007

'Evil twin' Wi-Fi access points proliferate

There is little consumers can do to protect themselves from hackers eavesdropping on wireless communications

Head this warning to be wary of rogue Wi-Fi access points masquerading as legitimate counterparts at hotels and airports. IDG News Service's Jeremy Kirk interviews
Phil Cracknell, president of the U.K. branch of the Information Systems Security Association, who warns, "With the growth in wireless networks, the 'evil twin' type of attack is on the rise."

In April I was on the road in North Carolina and changed hotels in the Raleigh area. The new hotel had fee-for-access Wi-Fi, so why did I boot and immediately access the Wild Wild Web without ponying up my credit card? Thanks to the office of the community church visible from my window, I stumbled into their open, insecure network. At least, that's what a potential Evil Twin access point would want me to think.

Whether your access is for free or for fee, encrypt your communications before entering passwords or other sensitive data to at least provide some modicum of security. Redirect to TLS-encrypted web pages (https://) when available, and use a VPN tunnel to get back to the office or even your home network. Or even better, remember your ethernet cable and jack into the wall port. Although a crafty insider could still eavesdrop your communications, at least the drive-by sniffers in the parking lot will be left out in the dark.

Q. Would my hotel time have been better spent at the pool, anyway?

Shown: USBGEAR 802.11b/g USB Wi-Fi adapter