Thu Jan 17, 2008 11:43AM EST
See Comments (17)
I greatly respect security expert Bruce Schneier and I blog about his writings frequently. But his latest, a column for Wired, had me a little taken aback. Why? Schneier says he leaves his home Wi-Fi network open for any passers-by who might like to borrow its signal.
Such behavior flies in the face of common sense and what we've been told since the dawn of wireless: Protect your signal to protect yourself. Who wants interlopers hopping on their network?
For Schneier, it's an issue of "basic politeness." Visitors, he says, should have open access to the internet, just like they do to heat and electricity. And I totally agree with that: It's the unwanted visitors I'm not too thrilled about.
A big concern about open Wi-Fi is always that some creep sitting outside your house will use your network to commit a crime (they always say child porn) and then that crime will be pinned on you. But such crimes are largely theoretical, says Schneier: Who would really go to such an effort to do such a thing? And what better defense is there, asks Schneier, than to say he has an open network and that anyone could have done it?
I'd respond in two ways: One, that was Jammie Thomas's defense in her landmark file sharing trial. And though there were a lot of problems with her case (including the possibility that she didn't have a wireless network at all), the jury didn't buy her excuse. Second, it's not the casual interlopers that bother me, it's the neighbors. I imagine Schneier lives in a traditional suburban neighborhood with a little bit of distance between houses. I live in dense San Francisco. On a good day I can see 12 Wi-Fi networks from my living room; up to 100 people could probably hop on my signal right now if it was open. Do I trust all of them to do the right thing and not abuse my hospitality? No way.
Schneier has other arguments, but they mainly come down to a) it's polite to share and b) the risk of sharing is limited if you secure your PCs at the source. But Schneier is probably better at computer security than most people, and, you know, my rude neighbors can get their own dang internet service.
LINK: Steal This Wi-Fi
Join in the discussion. Here you'll see the comments in the order they were posted.
I use FON also, I signed up for a free router when Chris Blogged about it. It really is awesome. I have that and a regular Router.
michael_w_anderson... ROFL. Exactly.
Security is important, but being nice is also good. Security can always be broken so the idea might be to secure your data 'as if your network was open' and then don't worry about if it is actually open or not. Don't fall in to the false belief that if your network is closed that it can not be accessed.
I don't fall into the belief that if my network is closed, it can't be hacked. I believe more along the lines that rather than screw with my system, someone would most likely prefer to tap into one of the other three networks I can pick up from my house.
Hey Null -- I appreciate this column of yours for the primary reasons that I'm on board with everything you said AND now I can use it as a cut-and-save post to send to my parents. Although we live in the suburbs of San Francisco down the peninsula from you (less densely populated) I've been baffled at my folks indifference to having their network unsecured. We're talking a retired M.D. & college professor in their mid-70's who just shrug when I tell them to at least add a WEP password key! I'm off now to copy and paste this link, hopefully helping them to revisit this issue.
why should i pay for my service and just "be nice and polite"and let everyone piggyback off of me. i work to hardto do that.if you have a computer and want internet access. three words for you"GET A JOB" pay for your own.
For those of you that don't want to leave their networks open, in addition to adding encryption, take a look at the HomeNet Manager software. It has a nice "Intruder Blocking" feature that prevents just this kind of thing, with or without encryption: http://www.homenetmanager.com
I had our network passworded using WEP and simple key, well, It was easy enough for a lot of my neighbors to hop onto my connection and slow everything down. One computer logged onto the network was blatantly labeled as a machine to store porn. I then locked it everything up tight and used WPA2 and much longer password sentence. No one has since accessed my network that I don't want to and my speed has greatly increased. A great program to monitor who has been on your network is Network Magic.
I wouldn't dream of leaving my wireless network open. I've got locked up about as tight as I can get it (firewall, WEP encryption, MAC whitelist, and occasionally a VPN). I live 1 block from a state college and I'm more concerned with a man in the middle attack. Imagine someone collecting everything sent between your router and computer: websites, passwords, emails, chat messages, etc. It would be like a portable keylogger that you couldn't detect. Nope, high security for me, call me paranoid.
If i do not broadcast an SSID (closed network) and leave the security open, can it still be easily accessed?
My wireless has open access. How do I secure this linksys wireless G ?
Please enable your browser's cookies to activate the My Tech column.
| Computers | Home Office | Wi-Fi & Networking | Phones & PDAs | Cameras & Camcorders | TV & Home Theater | Portable Audio |
|---|---|---|---|---|---|---|
6 Posted by afxsloth on Thu Sep 3, 2009 2:46PM EDT Report Abuse
WPA encryption using a pre-shared key is not secure. Even if you white list connections allowed using MAC address filtering. MAC addresses can easily be spoofed with the click of a button. But there's tens of millions of MAC addresses right? The correct MAC address can be obtained because it is broadcasted whenever your computer authenticates with the router. That is not something you can hide. Using YOUR MAC address, a deauthenication packet is sent to the router which kicks YOU offline. When your computer automatically reconnects, the 4-way hand shake of the WPA is then captured. Then using a Playstation 3 it can be cracked in just a few days tops.