WiFi internet security

kc5dlo · Aug 2, 2005

Out in the country where I'm at, dial-up is very slow (2-3kbs sec). A near-by truckstop has a WiFi hotspot. I subscribed to it and with a directional Hi gain antenna, I get great results getting 550 to 600kbs download speeds. All at a cost similar to my old dial up. Plus I get my phone back.
The problem I'm having is understanding what I need to do as far as security. The signal from the truckstop is not encrypted as I understand it. What equipment do i need?

Steve

MikePA · Aug 2, 2005

If the truck stop has not implemented security on their Access Point, there's nothing you can do to secure the wireless connection.

The only thing you can do is secure your PC with products like Zone Alarm, anti-virus software, etc.

SnowRidge · Aug 2, 2005

(What equipment do i need?) 

To do what? If the wireless signal is not encrypted, there is precious little equipment that can help you. The best you can hope for is to understand the vulnerabilities and use a lot of caution in what you write or post on line.

In particular, financial accounts, SSNs, etc. should never be sent in a plain text email or through a Browser that isn't using SSL (secure sockets layer). Look for URLs starting with HTTPS when the browser makes a secure connection.

Be aware that some sites will send back the secure information in a plain text "confirmation email." These people are idiots, but as my wife likes to say, "Idiots abound."

Since you are connecting to a known WiFi hotspot. It is pretty well guaranteed that your data will be intercepted and logged by someone at some time. The war driving hobbyists will certainly do it, and I think it is likely that nefarious types will too, from time to time. Whether they can get anything of use to them and harm to you is a matter of how careful you are, and to some degree, luck.

BTW, I am curious how the sign up procedure worked. How does the truck stop know you are using their system, and what information did you have to provide? Did they ask for the MAC address of your wireless card? Did you or someone else configure or reconfigure your wireless connection? Did they provide a fixed LAN IP, something like 192.168.20.123? Are you certain it's not encrypted?

kc5dlo · Aug 2, 2005

The first time you try and open a webpage when you connected to their system, You are redirected to a log on page. There you can go to a sign up page and register a login name and password. Once registered, you simply log on and you start surfing.
They did not ask about the MAC address.
The wireless utility searched the available networks. In this case TA. You click on TA and it connects automaticly. The IP is set by them.
No, I'm not certain that its not encrypted. When looking at the wireless utility that came with my NetGear card, it shows to not be useing encryption.

MikePA · Aug 2, 2005

This is similar to the way many hotels offer wireless Internet access. No security and no encryption.

SnowRidge · Aug 2, 2005

(They did not ask about the MAC address.) 

I think they already had it. From your description of the process, it looks like they log them all and require registration every time they spot a new one connected to their system. Interesting.

 (When looking at the wireless utility that came with my NetGear card, it shows to not be using encryption.) 

Well, that's it then. There's not much you can do that hasn't already been mentioned. Just be extremely cautious in what you do online and expect to get your data logged. /forums/images/graemlins/frown.gif

kc5dlo · Aug 2, 2005

Thanks everyone. I dont use the computer for any buisness so I'll just have to be carefull. I can hope for new technology to get affordable faster internet in the future. In the mean time, I'll just continue and hope it works ok.

SnowRidge · Aug 2, 2005

One thing you might be able to do, if you aren't the only long term paying customer, is to suggest they install a dedicated encrypted access point for users such as yourself.