We've all done it: found an unencrypted Wi-Fi connection and decided to piggyback on an unsuspecting neighbor's Web hookup -- even if it was only a temporary fix while we waited for a repairman, or until we could get cable installed in a new apartment. According to a recent poll conducted by Wakefield Research and the Wi-Fi Alliance,
32-percent of respondents admitted to trying to steal a neighbor's Wi-Fi connection at some point, a significant increase over the 18-percent that copped to the same crime (and yes, it
is illegal) in 2008. The concern here isn't with the actual theft or breach of trust -- although you should probably feel a little guilty about that, you sneaky bastard. It's that unencrypted Wi-Fi connections pose a serious security risk. Using an unencrypted connection leaves your accounts vulnerable to readily available hacking tools like
Firesheep. Some, like Chet Wisniewski of Sophos, aren't afraid to do a little fear-mongering to convince people to lock down their Wi-Fi connections. As he told USA Today,
pedophiles and terrorists could easily take advantage of your unencrypted connection.
The danger, however, goes both ways. Yes, those with Wi-Fi routers should turn on any security features they can, but mooching exposes you to just as many dangers. Chances are that if you can get onto a Wi-Fi network, you're probably not the only one who has realized this. Any log-in or credit card information you enter is just being passed through the air for someone to snag.
Tags: networking, security, StealWifi, theft, top, UnencryptedWifi, web, Wi-Fi, wifi
Comments
10
Subscribe to commentsJustin WilcoxFeb 4th 2011 6:04PM
>Any log-in or credit card information you enter is just being passed through the air for someone to snag
Now hold on just a second there before you get all hasty. For one, if you are using a merchant that passes Credit Card info around and doesn't use https, well you get what you get. https is still secure over unencrypted wifi except for perhaps some man in the middle attacks, though I don't think this is possible.
As for log-in info. They don't really get your password through this, they just steal your precious cookies so they can fool the server into thinking they are you. This is also being fixed by logins over https. Facebook just recently opened that up and gmail has been doing that for some time.
kj76Feb 7th 2011 5:23PM
@Justin Wilcox
A man in the middle is VERY possible on an open network. Wireshark and another program or two and you'll see everything that is going between the AP and the end user.
UberSilFeb 7th 2011 9:31PM
@Justin Wilcox
So are you for improving people's control over an aspect of their life or against?
AliceFeb 7th 2011 7:47AM
You never use a credit card or anything personal when using other peoples WIFI connection. Despite what they say, it is noit illegal to use any open WIFI since it their responsibility to protect their internet connection. The 2.4 GHz band is used for many things such as Ham Radio, wireless cameras, WIFI etc.
UberSilFeb 7th 2011 9:31PM
@Alice
That depends on where you live. For example, in England it's perfectly alright although rather immoral but in the States it is illegal. This fact even goes so far as to shape how the recording industry goes phishing (yes, I'm using the right spelling) for lawsuit settlements.
Justin WilcoxFeb 7th 2011 9:45PM
@kj76
No, I meant like Man in the Middle over https. https websites use encrypted traffic even if the Wifi connection itself isn't encrypted. Wireshark, et. al won't help you view https encrypted traffic. However, I do think it could be possible in theory to intercept a request for a secure page and feed the client a fake certificate, although it will still need to be signed by a trusted-by-the-client-browser CA
UberSilFeb 7th 2011 9:31PM
I've never had to wait for the cable man in any new place I've moved into. All you do is call the cable company two weeks before you move (provided your not looking at a midnight dash) and tell them to do everything but the in-house stuff. You are more comfortable doing that yourself and you realize that if something goes wrong inside the house then it's your problem.
fulford01Feb 8th 2011 10:59AM
NOT!!!!!!
AjaxanonFeb 9th 2011 1:51PM
"pedophiles and terrorists could easily take advantage of your unencrypted connection" WTF? O.o No seriously, WTF?
selfdeprecateFeb 11th 2011 7:52PM
In other news, 68% of people either do not have access to an open wifi network or is paying $60+ a month for something 99% of them will not fully utilize.