Tue Feb 20, 2007 6:31PM EST
See Comments (175)
I got these two letters almost back to back, both asking pointed questions about figuring out whether someone else might be on their Wi-Fi network... or how to figure out who owned a nearby wireless network that was unsecured. Take a look.
Rob writes: Is there a program (preferably a free download) that enables me to view the computers (users) connected to a wireless signal at any one particular time?
Meanwhile, Zac writes: One of my poor neighbors has their Linksys router set on default configuration. I can even view their configuration page. I am not wanting to do harm to their network, and I don't want to secure it for them without their knowledge. Is there a way to contact the PC listed under the client list, or a program that takes snapshots of their Internet usage (maybe I could see their email address), so I can get a hold of them?
First, you can find out who's connecting to your Wi-Fi network by looking in the DHCP Client List, which is part of your router's configuration and settings software. Just go to the configuration web page (where you set up encryption and passwords, etc.), and look for the DHCP Client List. You'll see the computer name and MAC address of everyone connected. If something fishy is there, you've got an interloper. Be advised that clever types can get around this rather easily: All you really need to do is use a static IP address instead of a dynamic one and you won't show up on the list. However, most computers use DHCP for simplicity, and any casual hangers-on will certainly be DHCP users.
But let's get more complicated: Say you've found an interloper, or like Zac you've found an open wireless network and want to help the owner close it. How do you connect a MAC address to a name?
It's not easily done. Ultra-hackers use advanced tools or directional antennas to figure out the source of a wireless signal, but those are beyond the reach of most users. (Check out Ethereal and AirSnare if you're determined to go this route. Both are software for experts only and are probably overkill for finding an accidental Wi-Fi leech.)
My best advice for beginners is to simply scour the network to see if you can find any shared computers or drives. You might be able to easily pick up a name or address from a file on the network. (This is probably not completely legal, but neither is using your neighbor's open signal, so tread cautiously here.)
With access to the router (as Zac mentioned), some innocuous tricks to get the owner's attention and let him know that his wireless setup is insecure. For example: Change the SSID (or network name) to heyneighborcall5551212, or turn on parental controls (if the router offers them), redirecting popular URLs like google.com, yahoo.com, msn.com, etc. to something like this page.
Unfortunately there's really no foolproof way to figure out who's on your wireless network, so remember to use security at all times and keep tabs on that DHCP list once in awhile. If your network starts to slow down or you fear a hacker intrusion, check out Ethereal and AirSnare at the links above.
Join in the discussion. Here you'll see the comments in the order they were posted.
borgbike: B/c it slows ME down and Im the one paying for it!!
I have no idea how to follow those instructions... anyone able to dumb them down for a less computer saavy person like myself?
tpribors: Turning off SSID broadcasting on Windows networks is supposedly WORSE than leaving it it on, believe it or not--according to Microsoft: http://www.microsoft.com/technet/network/evaluate/hiddennet.mspx
Neighbor has unsecured WIFI? Why not knock on their door and talk to them. Odds are, they've never even thought about someone free-loading. If you don't know them well, make a simple flyer talking about ways to secure wireless networks and leave on their doorstep. Securing a WIFI network is recommended to avoid someone committing malicious intent via your setup.
You shouldn't change anything on anyone's network, secure or unsecure! If you're not an authorized user of that person's router, modem, or computer, you can be sued or worse, arrested by homeland security for being a hacker! Don't fool with people's stuff even if you think you're being a do-gooder!
I travel by truck all the time. I keep my laptop with me. Most of the time I just park near a residential neighborhood and I have internet access. I don't pry, it is just nice that I can get on anywhere I want. Even airports don't secure their wireless in some spots. Try the window by the runway, always get on there.
Just Secure your wireless network it is not that hard to do and instructions are widely available online...Not securing it is just being lazy. Or perhaps edit list of clients who are allowed to access it ...not to overwhelming either.
Hey Pete6584017, you don't have to enter all the MAC addresses, you just choose a password and everyone wishing to connect to your network has to type it in. So you might want to trust those people because once they know the password, they can change the settings.
if you want wireless, then accept the weakness of it!--hence, your screwed!--maybe the translation should be, "wireless for all"--duh!!...
I always thought you had to create a workgroup before you could see any other computers on the network. Is this not the case?
So Yahoo is advocating the violation of computer hacking laws? Snooping around on someone else's computer without their authorizaiton is illegal in California.
Yeah...or share if you feel charitable.
KNOW & U DO TOO
Maybe they know their wireless is open... I leave mine open, but I'm behind firewalls so maybe they are too. I don't mind if someone uses my wireless, I think with high rates the cable company charges for their service the least I can do is let someone get on for free.
I COULD CARE LESS IF ANYONE IS ON MY WIFI.anyone wh0 could hack my system would be bored to death!!!!!!!
As a security professional, I'm sickened by this article. Even as a CISSP, or CEH, it is unethical to connect to, and modify, another's network, even to protect them from themselves. Searching for files, even if your intent is to help them is an illegal act. The author should know this. Sad to say, but it is not your job to help your neighbor secure their networks. For those that wish to act the good samaratin, the question arises as to how to do it ethically? As part of my job, I constantly find unsecured networks. By using directional antennas and GPS devices, I can pinpoint their location. Beyond a friendly conversation, to alert them to their vulnerabilites, my actions extend no further. In securing your own 802.11x network, you can do things like disable SSID broadcast, enable MAC filtering, enable WEP/WPA and limiting DHCP scope. However, these are not undefeatable safeguards. A dedicated attacker can still break your encryption due to the IV vulnerabilites in WEP. MAC addresses can be spoofed. SSID's can be sniffed because even if the AP doesn't broadcast the SSID is still transmitted by every client connected. Corporations are the only ones who can afford real wireless security. It requires the use of more robust protections and authentication mechanisms such as radius, and the infrastructure to support them. The best home users can do is to make themselves a lesser target so an attacker just moves on to someone who is easier prey.
If I just want to open up my AP for other people to use (in order to maximise usage since I have already paid for a fixed monthly internet fee), I would like to know whether I am vulnerable to attacks or hacking? John Lee
I post this by using someone else's connection, It's been picked up by my laptop, why to stop using it. Is this illegal?
This was very helpful in know-how for begingers like me. Unsucure networks can and will always be a prime target for wanna-be hackers. I belive I belive that this is how they {wanna-be hackers} get there start and steal privite info, just to see IF they can do it and then go on from there to staeling your cridit cards number and other valulble persanol info. We need to keep all that info on the net secired and safe from wanna-be hackers, Thanks, Richard Philemon Jr.
Please enable your browser's cookies to activate the My Tech column.
| Computers | Home Office | Wi-Fi & Networking | Phones & PDAs | Cameras & Camcorders | TV & Home Theater | Portable Audio |
|---|---|---|---|---|---|---|
26 Posted by timin770 on Thu Sep 3, 2009 10:10PM EDT Report Abuse
i simply changed my SSID to 'virus server' to see if anybody had the balls to associate with my AP