Comments on: Daily Debrief: Forty million card numbers compromised

In Wednesday's edition of the Daily Debrief, CNET's Kara Tsuboi and Dan Farber discuss the latest charges against 11 people accused of hacking into wireless networks to steal credit and debit card information.

[ccouvillion]

Do you not have spell checkers? It's spelled forty.

[humanssssss]

am i not seeing things ... it's forty. there's nothing wrong.

[skswave]

The real crime here is that for the last three years the PC industry has shipped Millions of PCs and motherboards with Trusted Platform modules. This device provides a very secure container in which to hold the secret keys that can be used to encrypt every wireless link. This technology is in every box, Industry Standard and Vendor neutral. However, The IT proffessionals are failing to implement best practices and turn on these devices to hold the keys. They have continue to not leverage the best solutions to protect our identities and assume we will waste our time fixing them when they get lost. I strongly suggest that dan cover this crime as well. Our PCs are available with and have body armor but body armor is only helpful if you wear it. It was over a year ago when this hack was originally broadly published. How are we doing?? Many organizations turned on WPA to secure the wireless but use keys held in software that can easily be stolen by a virus or a bad employee. If the keys are in a TPM then the keys are safe unless the PC is stolen and usually that gets noticed. Put a seagate FDE drive in the PC to prevent any type of boot and now we have a real security solution for the end point. If Industry doesn't apply the patch of moving keys to hardware then the goverment will force us to do it. We do not need regulation, we need action. If you have a VPN, Wireless, Any type of certificate based access move the Keys to the TPM and move them now. Your OEM has given you the tools to secure your brand, your Job, and your customers data, but like any patch you need to apply it.

Steven Sprague
Wave Systems Corp.

[Darkwend]

Poor and misleading description of wardriving. By definition it only refers to people who search for wireless networks using a portable device. Although it may lead to criminal activities actually wardriving isn't illegal. I know the term "wardriving" may sound like a horrible thing, but in many cases it isn't. Check out the wikipedia article for more info: http://en.wikipedia.org/wiki/Wardriving.