Comments on: Biz travelers beware: Airport ad-hoc hot spots could be dangerous

A new study suggests that travelers who connect to free, ad-hoc wireless networks risk allowing hackers access to confidential files.

[Galaxy5]

Not to mention the trollers....

...who set up computers in public places, set their WiFi to ad hoc
mode, and name themselves "Free Public WiFi" or somesuch.

I've seen this pretty often in the past few months.

[dargon19888]

They forget something...

That most "free" hotspots are unencrypted.

Airports should use WEP and WPA (WPA2) on different hotspot accesspoints with different passwords/passkeys. WEP for older laptops and WPA/WPA2 for newer ones. Then they can post signs about the hotspots and periodically change passwords. This way, airport travelers know which hotspots are legit and secure. (or rather securer...)

[rick.farina]

Airports should use WEP?

Seriously? WEP is a broken encryption since 2001 and at this point it takes less than 1 minute to crack (google can provide you videos of this I'm sure). Airports should certainly be using WPA if not WPA2 for there to be even perceived security.

As for public hotspots, most of them have software which you can freely download with provides mutual authentication with the Access Point (so you know it is not fake) and encryption (so people cannot sniff your data). If the hotspot provider doesn't provide such software (which basically performs WPA) then it is really the user's responsibility to either use their VPN or choose not to use the hotspot based on the security risk.

Rick Farina

Full Disclosure: As I mentioned previously, I do work for AirTight Networks as a Senior Wireless Security Researcher.

[fbnfbn]

John Wayne Airport

It is worth noting that John Wayne Airport does not provide ANY public wireless access. This would cause the numbers to be skewed and show an abnormally high percentage of rogue SSIDs. With the exception of the premier lounges of some airlines, the only public access wireless Internet is provided by unauthorized outside companies. For example, one company says on their sign up web page that you have to stand close to the windows. This is because they are using directional antennaes to beam the signal across the airfield from off-airport premises.

[rick.farina]

Windows Behavior

Well fbnfbn I think some explanation about Windows Wireless networking behavior may help out here. You see, because the team at Microsoft is so smart, even if you are connect to an Access Point your laptop will actually continue to look for other Access Points in your preferred network. This means that even if there is not public wireless access, or if there is, your Windows XP laptop will leak information either way. I thank you for the entertaining explanation of the hotspot company with the high gain antennas, I have to say that is pretty amusing, but I suppose it proofs the point that you never know where that potentially evil hacker is, they could even be off airport property hacking you at the gate!

Rick Farina

Full Disclosure: I do work for AirTight Networks, but I am a Senior Wireless Security Researcher not in the marketing department.