Computers, Advice, Windows Software, Mac Software
Just How Risky Are Public Wi-Fi Hotspots?
Here's what you need to know: Public hot-spots -- most of which are open and don't require a password -- are, by nature, insecure. Sure, they may be easy and convenient to hop on from your computer, but that very openness is also what allows anyone, including hackers, to just walk in and sign on. In other words, when you're signed on to a public Wi-Fi hotspot (or at an unsecured network at your or someone's private home), it's entirely possible for someone to come along and snatch your data, literally out of the air.
Luckily, there are some essential precautions you can take to protect yourself when you're in a public hotspot. First and foremost, get a good firewall program -- not the one built into Windows or Macs, though. Most security suites from Norton, McAfee, and others come with one, and you can download free ones from the likes of Zone Alarm and Comodo. These apps are designed to prevent hackers from gaining access to the data on your PC, and will block and alert you to any attempts to wirelessly access your computer.
However, these programs do not protect what you send out over the air (like passwords) when trying to get access to your bank account online or credit card information when making online purchases. The biggest piece of advice we can give is not to make any transactions involving a credit card at a public Wi-Fi spot, and don't log into any service that doesn't use https to secure your data traffic. You can easily identify such sites by looking at the address bar in your browser, since they'll begin with "https" instead of just "http," and they encrypt all information being passed back and forth. Even most e-mail services such as Gmail offer this as an option -- just check the settings panel.
At home, securing your info is easier, but requires more steps. First, make sure you have a good wireless router that has a built-in firewall (most new ones including those handed out by ISPs do) and supports the latest security protocols -- WPA2. There are three methods of protecting your data on Wi-Fi, WEP (easily hacked, but still better than nothing), WPA (better), and WPA2 (best). Most modern routers support WPA2 and you should use it, with the highest level of encryption possible (256-bit).
If your router only supports WEP -- as many older ones do -- then get a new router, seriously. An additional measure is to turn off the SSID (or network name) broadcast in your router's settings. This will prevent other computers and devices from seeing your network automatically, though dedicated hackers will still be able to locate it. Also, change the default password on your router to something long and complex -- avoid dictionary words and mix letters, numbers and special characters to prevent anyone from easily guessing the password (for more tips on choosing a secure password, see '5 Tips on Keeping Your PC Safe').
The 'Today Show' makes a big deal of wardriving, an old trend in which hackers drive around neighborhoods looking for open Wi-Fi networks to steal data from. But the practice is far less prevalent than the show's reporters would have you believe. And if you follow our suggestions, such data thieves will likely pass your network by in favor of a less secure one that will make a much easier target.
Safe surfing!
Related Links:
- 5 Essential Tips on to Keep Your PC Safe
- 12 Ways Technology Threatens Your Privacy (and How to Protect Yourself)
Reader Comments (Page 1 of 2)
Tim said 6:16AM on 11-02-2009
what?
Reply
Dan said 8:21AM on 11-02-2009
Why would you be so stupid as to tell people not to take simple steps to secure thier information? Either your a friggin moron or your one of these people that make thier living by stealing from everyone else! I would imagine that you'd be the one telling everyone that they don't need to lock thier doors or have alarm systems at home, just before you break into thier house! It you had listened to the story, they were not trying to sell anything! They said "password protect your wireless" and or make sure you don't put personal information in email, etc from public access sites. They even went so far as to tell you how to password protect your older wireless units that didn't already have password setup built into the unit. So, shut up! Your comment was really stupid!
Reply
equinom said 8:24AM on 11-02-2009
20 years of computing and you think "anti-virus software is a joke and is most likely the makers of most of the "virus's" that are out there." ? What about the people that have been arrested for these crimes?
Reply
jmdeur said 8:29AM on 11-02-2009
what's with the bar chart for the coffee shop question? looks like someone needs to go back to web design class.
Reply
Rob said 2:23PM on 11-02-2009
the bar graph simply gives a graphic of the various totals, what's so bad about that? the bigger issue resides with the 198 who are not sure if they have used their laptops in a coffee house. i wonder if they can remember their own names.
Alice said 8:37AM on 11-02-2009
When my husband and I travel, we never use a public WiFi spot. Instead, we drive through a residential area and find a home that has WiFi with no password protection. There is a good free program which will display hot spots called "Network Stumbler". It displays their WiFi name and a small icon of a lock if it is protected. Many people broadcasting WiFi do not even password protect their router, enabling anyone to get into their complete network if someone desired to do so.
Reply
snowdragonwolf said 9:03AM on 11-02-2009
You do realize that is exactly what they mean by "war-driving?" Also, getting into someone else's wi-fi is seriously illegal. War-driving is simply driving around, trying to get into someone's wi-fi, and surfing... not necessarily getting personal information, but basically hacking someone's web access. Do yourself a favor and just get a wireless card thru your cell provider, and save the rest of the world a big headache. After all, that's what I do, and then I'm certain I'm secure...
Scott said 8:37AM on 11-02-2009
I like how the security "expert" is still using IE6 in 2009.
Reply
Tsu said 11:34AM on 11-02-2009
Probably to hide all the pr0n history he has on IE7 or Firefox. ;D
Ben said 8:51AM on 11-02-2009
I guaranty this was endorsed by internet providers. They don't want anyone stealing their neighbors internet. A good hacker can get right past a simple password.
Reply
ronpolo said 8:55AM on 11-02-2009
Alice,
What you just described is Illegal! $10,000 fine and 6+months in jail. Our neighbor was able to identify a car that was parked in front of his house....the kids were using his WIFI. Cops came confiscated the computer and later a judge found them guilty. $2000 fine and 1 year probation. You might want to rethink "free wifi" in the future. Stealing is Stealing!
Reply
Dallas said 10:32AM on 11-02-2009
Actually, connecting to an unsecure wireless network is completey and totally legal. If you broadcast it, people can pick it up. Hence the reason they tell you to turn off SSID on your wireless router. If all you do is connect to the net, and surf you are not breaking the law. If you get into their wireless network and start accesing the files on THEIR computer, then you have brokien the law.
d1ncharge1 said 9:20AM on 11-02-2009
do you idiots think that this guy is going to break the law on tv???? The USA has an open air act which means if you broadcast it wirelessly you are responsible to secure it, anybody has the right to anything wireless, free satellite TV is completely legal if you know how to get it........
Reply
d1ncharge1 said 9:30AM on 11-02-2009
holy stupid, people believe a pay for isp like aol when it tells them wifi is dangerous, then when there is an ad link to norton software after they tell you antivirus's are a must, and you believe them there too!! keep it up stupid people, antivirus's will bring more headaches and slow your pc more than virus's do, people keep buying them! dont get the free ones cause they must not work, and dont forget that norton has a machine that can see into the future and protect you from viruses as soon as they come out< or is that impossible? oh yeah it isnt. basically it is impossible to protect you from a virus being released today, do virus makers have anything to gain? or do virus protection programs have everything to gain, when paid for news tells you about a virus?
Reply
emfcorp said 10:14AM on 11-02-2009
d1ncharge1, I totally agree. AOL is the worst when it comes to the "click on this link after we have instilled fear in you". certainly AOL is getting paid every time that someone clicks their links. How can AOL survive now that it does not cost $20 for their service. Either it's magic or they are selling you something. I really hate Corporate America. Yep, the virus protection programs really screw a computer up, very true. Interestingly. the radar detector and radar gun industry is exactly the same. They come up with new radar systems to obsolete the old detectors. It's the same company developing both technologies.
Reply
Charles said 10:33AM on 11-02-2009
"i think this is surprising a lot of people"
Matt, if this surrpises you, then you are as naieve as the people you report about.
Reply
Captive said 12:11PM on 11-02-2009
I work tech support for several different types of connection. Most people don't see how important wireless security is. And we see a lot of people that assume they're safe just because they're in a rural area and they don't usually see cars driving around. Unfortunately this isn't the case. There are simple devices you can make off of the internet out of a soup can and a little wiring that will allow someone to pick up wireless networks from 3-5 miles away. Even farther if they put a little more effort into it.
One thing the article didn't go into regarding wireless security is that there's more at stake than the security of your computer. Not everyone that logs onto someone else's wifi is a hacker trying to get into their personal information. Sometimes they're just kids trying to download music or watch movies on the internet. The problem with this case is that some ISPs have bandwidth limits and you can be penalized if you go over these. It's a good idea if you have a wireless connection to check to see if you have a bandwidth threshold. Other people getting on your connection can use up this threshold and there can be penalties from your ISP (extra charges, service slowed down, or even losing your service altogether).
Reply
nevinsb said 11:33AM on 11-02-2009
I am very insulted by this article. Wardriving has nothing to do with "drive around neighborhoods looking for open Wi-Fi networks to steal data from" Maybe more research needs to be done before posting "news" articles like this.
Reply
jstokescrm said 11:47AM on 11-02-2009
There are more security games in town besides WEP and WPA. There are also numerous ways of filtering your network traffic, like IP and MAC address filters
Reply
Nicole said 11:50AM on 11-02-2009
This is why I am glad I live in The woods, trees all around and my WIFI can't be picked up unless someone is sitting in my driveway, and if someone is stupid enough to pull and park in my drive way, hack my internet, they will be meeting the end of a shot gun barrel. Cause they will be trespassing on private property and illegally using my internet. No one screws with my family.
Reply