Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

A latte, a Wi-Fi link and a hacker

 

Sign up to receive Security Resource Alerts

November 25, 2003 (PC World) -- If you have ever connected to the Internet through a wireless hot spot at a Starbucks, McDonald's or other business, you know how convenient it can be. Unfortunately, the setup is convenient for other people, too -- hackers intent on stealing your log-in information for their own use.

At most businesses that offer wireless access, connecting is as simple as setting up an account and choosing how you'll be billed (either on a pay-as-you-go basis or at a flat rate for unlimited access). Then you sign in with the user name and password that you set up in advance.

But a group of clever independent security analysts has created a program that makes it easy for a hacker to slurp up your log-in information before you've even quaffed the foam on your cappuccino. The miscreant can then use the information to obtain free wireless Internet access and make you foot the bill.

The new tool, called Airsnarf, broadcasts a powerful signal that disconnects any nearby hot spot users from the Internet. Then it broadcasts a sign-in page that looks like the log-in site of the legitimate Wi-Fi provider. When users, figuring they were knocked off the Internet momentarily, log in again, their user name and password go to the hackers, not the ISP.

The Airsnarf program could be running on the laptop -- or even the PDA -- of the person sitting next to you. With the right antennas, crackers intent on stealing passwords wouldn't even need to get out of their cars. All they'd have to do is park in front of the cafe, sit for a while running Airsnarf and then move on.

The program was never intended to be used as a tool for theft, according to its creators, members of a loosely affiliated group of computer security experts who call themselves the Shmoo Group. "Airsnarf was developed and released to demonstrate an inherent vulnerability of public 802.11b hot spots," the group writes on its Web site.

Spokespeople for two of the largest wireless access providers, T-Mobile (the provider for Starbucks) and Wayport (which serves many airports across the U.S.), say they don't know of any subscribers whose log-in information was stolen this way and don't anticipate the problem being widespread enough to warrant major changes to the way they run their services. Both say that if you notice odd usage patterns in your account, you should report them to your provider's customer service department, which will issue credits for stolen service. But can a hacker use your log-in information to get at more sensitive personal data? Both companies say no. Though you may use the same user name and password to connect to the Internet and to manage your account online, the ISPs report that credit card numbers and other sensitive data are hidden from view when you log in to your account information.

If you use a wireless hot spot, the best defense against this kind of service theft is to change your password regularly -- at least once a month. And keep close tabs on your monthly bill, even if you're on a flat-rate plan; you may not be losing money, but you still shouldn't let crime pay for data thieves, who might be using your wireless account for other nefarious purposes.

Andrew Brandt is senior associate editor for PC World. E-mail him at privacywatch@pcworld.com. Click here to read more Privacy Watch columns.


Reprinted with permission from

For more PC news, visit PCWorld.com.
Story copyright 2006 PC World Communications. All rights reserved.


Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"Debian, the popular Linux distribution has just been shown to have made an all-time stupid security goof-up. They managed to..." Read more...
"Houston area overrun by ants -- no, not atomic mutants. Sorry. Maybe even worse. At least you could kill Them..." Read more...
Read more Security posts or See all Blogs
HP confirms XP SP3 endless reboot snafu, promises patch
Yahoo tells Icahn that its own board knows best
Tools circulate that crack Debian, Ubuntu keys
More top stories...
Former Microsoft manager offers free fix for XP SP3 'endless reboot'
Can Icahn take on the Yahoo board and win?
Elgan: Hyperconnectivity: Friend or foe?
Specialists have retrieved about 99% of the data on a disk drive on board the crashed space shuttle Columbia. Don't miss the photographs of the recovered drive.
These big ideas were supposed to revolutionize technology, but they never actually appeared. In a few cases, you'll be glad they didn't.
Nearly 20 years after the first Internet worm, Steven J. Vaughan-Nichols takes stock of the malware/anti-malware landscape and spotlights how the two sides are approaching the battle.
Though some thought it was released too soon, Mac OS X 10.5 has matured into a solid operating system, says reviewer Michael DeAgonia.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Long Tail Supplier Collaboration - What's In It For You?
Long Tail Supplier Collaboration - What's In It For You?
Download this webcast, free, compliments of Sterling Commerce
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Discover the Secret to Secure Remote Access: GoToMyPC Corporate Security White Paper
Spam Spikes: A Real Risk to Your Business
Six Support Issues That Keep Execs Awake at Night
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo