Skip to main content

More Words of Caution on Open Wi-Fi

If you can use your company's "virtual private network," or VPN, you can feel fairly safe when using open Wi-Fi at a cafe. VPNs create secure "tunnels," in which all online communication is encrypted at both ends. But simply using a top security suite from Symantec, McAfee, Trend Micro or others won't protect you in a cafe situation.
For the modern nomadic worker, few things are more enjoyable than heading to a cafe, ordering a cappuccino and firing up the laptop to get some work done. As far as anyone you're e-mailing knows, you're at the office.
Unfortunately, few things expose your work to greater security risks than latching onto a public Wi-Fi service. Most people don't realize the risks, and even fewer have the ability to perform the geeky tasks that would fix it.
Computer criminals can "sniff" the traffic in a cafe, or set up a fake hot spot that you might innocently log into. When that happens, watch out: Everything you type goes directly to the host computer, known as an "evil twin." In that scenario, as soon as you get into your online bank account, the evil twin is ready to grab the password.
The best advice for avoiding those situations is to tap only into wireless connections that you trust. Be wary of connections with names such as "free public wifi." Ask at the cafe for the name of its network. Even then, be aware that someone sitting next to you could have set up a network with the same name, such as "Starbucks," that you could tap into unwittingly.
Most security-savvy travelers assume the worst and don't do anything that could cause trouble if it fell into the wrong hands.
"Every packet that goes out over the Internet is observable" by a tech-savvy hacker.

Popular posts from this blog

ALFA-­AWUS036H & ALFA-­AWUS050NH INSTALLING/UPDATING DRIVERS RTL8187, r8187, RT2800usb on UBUNTU

NOTE: For surfing Internet with ALFA-AWUS050NH on Ubuntu Jaunty with rt2870sta driver, you must use the Kernel "2.6.28-11-generic #42-Ubuntu", without change or updates the drivers modules. NOTE: The tutorial is not related to Ubuntu karmic. Driver RTL8187/Stacks-­mac80211 (ref. ALFA-­AWUS036h) ­- These drivers, for surfing Internet, are more stable than r8187, and fully compatible with Network-Manager 0.7 installed by default on Ubuntu 9.04. Network-Manager 0.7 installed by default on Ubuntu 9.04. ­- Supports all encryption without problems. (OPEN, WEP and WPA/WPA2) ­- With Compat-Wireless, the "injection" working, but for support “Fragmentation attack” (opt. -5) you need to install one patch. - The RX sensitivity and packets injection is less, related to drivers r8187. Driver r8187/Stacks-ieee80211 (ref. ALFA-AWUS036h) - This driver is recommended for use with the Suite of Aircrack-ng, but not particularly suitable for Internet connections, as less stable and disc...

Sniffing SSL traffic using MITM attack / ettercap, fragrouter, webmitm and dnsspoof.

Before reading on this guide is for educational purposes only. I take no responsibility from what people do with this info. First thing is to get fragrouter. I don't know if you can use other tools provided with the backtrack, there are 100 ways to skin a cat and this is just my way. http://packetstormsecurity.nl/UNIX/IDS/nidsbench/fragrouter.html There are lots of things that you can do with fragrouter but we are going to use fragrouter to setup IP forwarding. We do this with this command : Code: fragrouter -B1Squash that window and put it to one side. Now open another shell and we will start dnsspoof with this command Code: dnsspoof -i ath0 (or whatever network interface you are using)Again put that window to one side and lets load up webmitm. Webmitm will issue our ssl cert to the victim so we can decrypt the traffic we capture. Start webmitm by typing Code: webmitm -dNow we can start the arp spoof. To start ettercap type Code: ettercap -T -M arp:remote /router addy/ /victim a...

Test New ALFA-AWUS036H v.2 (1.000mW) VS ALFA-AWUS036H v.1 (500mW)

- Recently emerged the New ALFA-AWUS036H v.2 (1.000mW), and these are the tests. TEST WITH NETSTUMBLER 1) usb da 100mW chipset railink 2) usb da 200mW chipset railink rt73 3) intel 2200 b/g con connettore esterno rp-sma 4) Alfa-AWUS036H 500mW 5) New Alfa-AWUS036H V2 da 1.000mW