![]() | ||||
| Just the facts | ||
| Title | CASEScontact.org - Sensible precautions for securing your public hotspot experience - making your laptop 'hotspotworthy' | |
| Description | The complete guide to Wi-Fi security including free software tools, tips and tricks | |
| CyTRAP LABs ID | CT210020 | |
| Date | 2006-03-10 | |
| Systems affected |
|
|
| Select language |
|
|
| Version number | 1.0 | |
| ISSN | 1603-9866 | |
| Verify tip | http://casescontact.org/tips/210020 | |
| Risk assessment | High | |
| Impact/Severity | High | |
| Audio/Podcast files | CyTRAP PodCast show - Protecting your digital assets - Friday, March 10, 2006 | |
Why not get new tips and alerts by e-mail directly to your in-box? It's much more convenient: |
||
| What's up? | ||||
|
||||
| What is the threat or vulnerability? |
|
|||
| Problem & Solution | |||
| Admin |
| ||
| What does it mean to me? Am I vulnerable? |
|
||
| If I fix the problem - will it help me? How |
|
||
| How can one describe the solution? |
|
||
| Where can I get more help? |
|
||
| What is the solution to this problem ? | ||
| Tip 1 | The most important tip is to use a virtual private network (VPN) when connecting to the Internet via a hotspot. While your firm's laptop connecting to your employer's system via a public hotspot uses a VPN, the latter does not protect you if you connect to read your web-based email or news on a website.
In turn, you need a VPN to protect your information transfer from your notebook to the other party. You might ask why do I need VPN? Well, using WPA (WiFi Protected Access) encryption itself protects your data while they are "in the air." Unfortunately, it offers no protection at all if the hotspot itself is corrupted. A VPN solution makes it such that your data pass through the hotspot and remain encrypted, thereby making an 'evil twin' attack (see glossary section for definitions) less likely to succeed. You can get a freeware VPN program for Windows here that runs on the Windows XP, 2000 etc. operating systems. |
|
| Tip 2 | So how can one reduce the risk for becoming a victim of an attack through a rogue hotspot, or a hacker sitting in the same hotel lobby where you two are sharing the hotel's hotspot?
This free tool allows monitoring your laptop's wireless connection for potential security risks, while being connected to a hotspot. Hence, using this tool enables you to close the wireless connection if a security threat is discovered by the program. |
|
| Tip 3 | But how can one check one's email securely even whilst using the public hotspot at a coffee shop. Whilst still at home, you have to decide how you prefer to read and send your e-mail whilst being connected to a public hotspot, namely:
|
|
| Take another 2 minutes - More tricks to safeguard your information better | ||
| Tidbit 1 | Are you an Instant Messaging (IM) user? If the answer is yes and you intend using IM, while accessing a public hotspot, you are exposing yourself to some risks. However, you can reduce the chance for a disaster remarkably by following the two steps outlined below by:
GAIM as well as the two plug-ins above interface with all the popular programs (e.g., Aim, MS Instant Messenger and Yahoo! without a hidge. This also means that your friends do not have to install GAIM to be able to chat with you. |
|
| Tidbit 2 | If you try to connect to a public hotspot at a Starbucks or using the Fon network (free or 2 Euro a day only) you must be aware that using VPN as well as other technology (see Tips 1 & 2 above) can cause some problems to log onto the public hotspot-supported network. Thus you should do as follows:
|
|
| Tidbit 3 | Pay Attention to Dialog Boxes: Pop-up warnings are there for a reason--to protect you. If you are lucky enough to have not clicked the "never show this again" option, make sure you read these warnings carefully before agreeing to send information. Conduct Private Business in Private: Restrict your public surfing to Web pages you don't mind a stranger reading along with you, there is little an evil twin attacker can do to harm you. Hence, online stock trading or banking should be done from home only and not a public hotspot. |
|
| Watch out | Remember, not having your firewall up and running. The Windows XP firewall will not do - get a free one as recommended by experts here with CT210001: Update 4 - Martina Hingis: Princess of the WTA & Angelina Jolie ==> they are already inside - best ways for using a firewall to protect your PC 2006-02-10 If you are using dial-up and VPN together, your overall connection speed will be almost halved. |
|
| CYTRAP resources - check it out - because it will help you better protect yourself | ||
| Related tips | ||
| Glossary | Please either sign in by clicking on 'Login as a guest' to get the definition, no registration required or else get a free registration to get access, its worth it. | |
| Additional risk minimization | Make sure that you:
If the public network is acting unusual, assume it’s compromised. Get off the network and disable your wireless connection. |
|
| Del.icio.us | Was this tip helpful to you? If yes, why not bookmark it at Del.icio.us |
|
| Technorati tags | Technorati tags: AntiVirus, Apple, CASEScontact.org, computers and Internet, CyTRAP labs, CyTRAP labs RiskIT, CyTRAP labs StratMedia, hacking, information-security, Internet, intrusion detection, law, legal, Linux, malware, Microsoft, privacy, rootkit, security, software, spyware, tech, Windows, worm, hotspot, Wi-Fi | |
| Administrative | ||
| Author | Urs E. Gattiker - CyTRAP Labs | |
| Revisions | ||
| Contact details | Web: http://CASEScontact.org E-mail: support01@CASEScontact.org Tel: +41(0)76-200-7778 or + 44(0)70-9237-6036 Fax: +44(0)70-9237-6036, dial 3 send fax |
|
|
--END of ADVISORY - Important Info Below-- | |
| We recommend that you VERIFY ALL ADVISORIES you receive IMMEDIATELY, by clicking on the link provided at the top of this alert. |
|
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
Ride the rollercoaster successfully by subscribing to our alerts, tips, tools and skills training receiving them either via: 1) e-mail
| |
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
CASES writers & sponsors do not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement. Full DISCLAIMER notice at: http://www.casescontact.org/terms.php |
|
UNSUBSCRIBE If you no longer wish to receive this TIP ADVISORY, please Unsubscribe at: http://www.casescontact.org/unsubscribe.php QUESTIONS, comments, ideas? Cheer us up at:Tips-Comments at CASEScontact.org CASEScontact.org -- Threat Alerts and Security Notices --clear and precise, no compromise - |
|
-- END of TIP & Tricks ADVISORY-- Copyright (c) 2007 by CyTRAP labs - Urs E. Gattiker. All rights reserved. | |