a question about wifi privacy/security

[z_squared]

if you are using the internet via wifi access, is it generally safe?

ie. in terms of passwords, and private information...

can the proprieter of the wi-fi service see the things you're writing...

i'm wondering because i've been accessing work documents from a Second Cup and at Internet Cafes.

thanks!

[gman]

if you are using the internet via wifi access, is it generally safe?

I would say no.

ie. in terms of passwords, and private information...
Make sure encryption is enable.

can the proprieter of the wi-fi service see the things you're writing...

Writing in your own laptop? Or, writing through internet?

i'm wondering because i've been accessing work documents from a Second Cup and at Internet Cafes.

thanks!

Do you mean accessing documents in your office machine through internet? Or, just a copy of the document in your laptop?

[z_squared]

I would say no.

Make sure encryption is enable.

Writing in your own laptop? Or, writing through internet?


Do you mean accessing documents in your office machine through internet? Or, just a copy of the document in your laptop?

using a laptop and palm pilot to access the internet.. i'll be sure to use encryption i suppose

i've always wondered too... if i "borrow" internet access from a neighbour, can they see the things i'm doing/accessing (e.g emails)?

[gman]

using a laptop and palm pilot to access the internet.. i'll be sure to use encryption i suppose

i've always wondered too... if i "borrow" internet access from a neighbour, can they see the things i'm doing/accessing (e.g emails)?

If your neighbour is good (it does not have to be very good), he can set up a honey pot and see everything which is not encrypted.

[gretzky99]

Make sure encryption is enable.

Errr, this might be a stupid question but how do you set it up to make encryption enabled? I'm using a PDA. Thanks.

[kingfencer]

turn on wpa > aes > enter password. But if your entering from a cafe, i don't think its too safe.

[gman]

turn on wpa > aes > enter password. But if your entering from a cafe, i don't think its too safe.

Since we are talking about public wifi, you have no control about wpa or whatever setting. Even if the wifi provider gives you such information, the encryption is between the router and your PC. The wifi router owner still can see everything with the right tool.

The encryption needs to be done from both end point. That is the PDA/PC and the machine it talks to. If it is a web application, the web server needs to provide encryption service. That is the 'lock' thing appears in your browser. If the machine you talk to does not provide encryption, there is nothing you can do to make that happens.

[Kasakato]

If its not your personal Wifi, don't trust it and assume the other person can see the data you are using. Always check email through a secure server.

[drk3p]

wifi is pretty safe if you are just poping by, you need alot of time for someone to decrypt

[Firestorm ZERO]

wifi is pretty safe if you are just poping by, you need alot of time for someone to decrypt

if it is not encrypted then no. Everything is read in plain text, all I need is a sniffer (like ethereal). Like at school, no one uses the VPN, so when I used the sniffer, I saw what websites people were browsing (of course no SSL sites).

There are also other methods, like how do you know you connected to a "real" access point. There could be a MITM (man in the middle) and so forth.

[aZnDeViLbOi]

ur not protected... unless u see the lock at the bottom of the browser ur neighbour can get all the pw that u type in and wat sites u go to...

[CdTriX]

if it is not encrypted then no. Everything is read in plain text, all I need is a sniffer (like ethereal). Like at school, no one uses the VPN, so when I used the sniffer, I saw what websites people were browsing (of course no SSL sites).

There are also other methods, like how do you know you connected to a "real" access point. There could be a MITM (man in the middle) and so forth.

+1

passwords are insanely easy to sniff out.. but it depends on how good you are... are you ip spoofing or MAC spoofing?

I've accidentally arp poisoned a really big wifi network once.... i got scared and turned it off.. since you can be traced if you weren't setup.

but yeah ethereal or even psniffer can take packets and view them as long as it isn't SSL