Sunday, April 20, 2008

Nowadays security concern (part. 3)



Alright, y'all know what WiFi is and probably even using it to access the internet right now to read this blog with your RSS agregator app. But anyhow, are you simply a user or an advanced one that knew all the necessary WiFi security? I have met many WiFi users who only know on how to use it, but doesn't know anything else about its settings. If I may dissolve these people I've encountered so far, here are the percentage level based on their knowledge on WiFi settings & security:
Basic users (just know how to use): 46%
Advance users (know how to connect & make settings): 38%
Advance Plus users (know how change the settings & security): 14%
Super users (have deep knowledge of WiFi & how to modify it): 2%
(compiled from asking & helping friends, families, business colleagues, vendors and network internet forums)

I'm pretty surprised on how many people out there don't know that WiFi is very unsecure, they think just because it's airbone & unseen by normal human eyes thus it's invisible to hackers attack. These lament thought is going to jeopardize their whole network, and in business would means a halt of business process; not to mention classified data is being breached. I know this since I'm maintaning a small business retail WiFi network, where every data are time sensitive & every minutes count; a loss of WiFi network means a serious situation where there'll be no business that can be run properly.

I don't think I'll be able to cover some basic security measurements to secure your WiFi such as SSIDs, MAC filtering, range output, PA Rogue detection, encryptions, etc. There are too much details to cover, but what I need to discuss right now is the new imminent threats on even secured / encrypted WiFi networks.

Not long Gizmodo just spread a news on "Predator", the new uber-device that's meant for hacking WiFi networks. It's not an end-consumers product that manufactured from a factory, instead it's a self-made-yourself device. The source link in Gizmodo even provide a thorough step-by-step on how to build the Predator, materials can be found anywhere in nowadays modern market. Specially the DD-WRT router, where all you need is download a hacked firmware of the particular device and flash it up. Then with a modified simple hollow tube (sized like in the picture), you can power up the range output up to 200dB! That's very far, and you may consider to able to listen the whole WiFi networks available around a small city with it. The scariest is how the flashed router's firmware works, it'll automatically pick up the strongest signal that's currently connected to the Net; and then hack the system to assimilate it as its own.

Looks like Predator will become my next dream project, when I have the time & fund to do so. I can feel my "dark-side" is gaining control over my consciousness, got to "force" it back inside again... ;-D

An extreme step has been used by the Russian government; to bexact it's the Russian Mass Media, Communications & Cultural Protection Service (a.k.a. Rosvyazokhrenkultura, pheew...). Who declare a new regulation that force anyone who own any WiFi device to registered it first before start using it, where according to Engadget Mobile here that it takes 10 days to register a PDA or a mobile phone! Now, I don't really think this kind of regulation will work, people tend to 'bend' the law when it's too strict plus if you add the long procedure into the quotation. I know how it feels, because that's what happen here in Indonesia...

Above stories are felt like putting negative aura to WiFi technology, but the truth WiFi is the future tech where wireless will become a way on how we'll interact with our devices around us. You just need to know the available dangers & consequences of implementing the technology. So, do you still wish for that WiFi feature in your Treo?

[blogged with my Treo 750v]

No comments: