LinuxWorld.com

Laptop wireless security refresher

Critical laptops need careful connections.

By James E. Gaskin, Network World, 05/08/08

Let's recap: during my first Laptop Safety Seminar in Indianapolis on April 23, I was surprised at how many questions from the audience concerned basic laptop wireless security. People love laptops and love wireless connections, but don't love the extra security steps required so too often just avoid them. Not a good plan.

Story tools

Sponsored by:

E-Mail article
Print article
Contact author
AIM article	del.icio.us
Reddit	Digg
Stumble	Slashdot It!

Now that 65% of new computers bought are laptops, and almost all of them include wireless networking right out of the box, those extra security steps are critical.

Microsoft built peer-to-peer networking into all versions of Windows as far back as Windows 3.1 for Networks (my copy dredged up from the Gaskin Lab archives is dated 1992). Many small businesses and home networks rely on this peer-to-peer network protocol to exchange files between systems quickly and easily. Right click on a folder, click Properties at the bottom of the context menu that appears, and Sharing is the second tab on the page that opens. Two clicks later, or a couple more if you have to poke holes in your firewall, and the folder can be accessed by anyone. Every folder icon with a little hand under it is shared in this manner, even over wireless networks.

Windows 2000 allowed access to these files using the Guest login with no password by default. Windows XP makes it a little more difficult, but users routinely set up the Guest account with an easy password. I bet half of them use the password “guest.” Username “guest” with password “guest” violates every security policy every written by a security expert.

People don't understand that a public Wi-Fi network is just one local network, where every device is visible to every other device. This works the same way as a small business network with all computers plugged into the same router. While this arrangement makes sharing resources like network printers and shared PC drives simple, an advantage in a safe office environment, the same arrangement is completely insecure on a public Wi-Fi network.

Consider wireless hackers waiting for unwary prey in areas offering free Wi-Fi just like any other criminal: there aren't that many, but if you get unlucky you stand to lose quite a bit. Muggers may only take your wallet and watch, but wireless hackers can empty your bank account before you know you've been wirelessly mugged.

1 | 2 | 3 | Next >

React: Give us your thoughts on the issues here.