News
[PSUs]| Friday 8th March 2002 |
The 'hackers' were armed with only the most rudimentary tools - a Pentium II laptop (£400), some free software, a wireless network card (£69) and a directional antenna (made from an empty Pringles carton, worth less than £1.50.)
Within 25 minutes the laptop's screen had registered more than 50 wireless networks. Less than 30 per cent had WEP encryption enabled, and most were still using the manufacturer's default SSID code,
ADVERTISEMENT |
|
Security company I-SEC, who coordinated the war-driving episode, warned that unsecured networks were at risk from eavesdropping and abuse of e-mail servers as spam relays.
It has published a security checklist, as not everyone is covering even the basic points on their internal LANs!
1. Disable the broadcast probe facility on the wireless access point - this makes them invisible to war-driving software.
2. Don't use default settings for passwords, SSIDs or encryption keys.
3. Don't use an SSID that describes your department.
4. Don't place an access point near external walls, or walls adjacent to other offices in a shared building.
5. Use 128-bit WEP - ultimately it's crackable.
Submit to: Digg | Slashdot | Del.icio.us | Technorati
|
Read comments: 0
|


