Whether you've heard of wardriving or not, your wireless network could be a port from which anyone can access the internet. Protect yourself and your network with a few simple steps.
Imagine sitting in your living room. You’re comfortably situated in your
favorite chair reading a book or enjoying a television program. At your side is
a refreshing drink and a bowl of chips or popcorn. You’re set—everything is
ready for you to enjoy this afternoon.
That is, until your neighbor walks in unannounced. With a jolly salutation,
he commences dragging in a long, orange extension cord. After jostling you
around a bit, he plugs in the cord, waves farewell, and leaves without closing
the door. Your curiosity aroused, you rise from your chair and follow to see
what’s the matter. Once on your porch, you notice that your neighbor’s power
cord connects to his house, providing him with free electricity.
Sounds audacious, but a similar activity could be happening right now. If
you have wireless networks in your home—or business—you could be providing free
internet access to anyone who can pick up your signal.
Wardriving
Wardriving is a term coined after the movie Wargames. The movie
revolves around a young computer expert who uses his computer to dial random
numbers, looking for a system to break into. Today, wardriving refers to people
using their computer’s wireless capacities—as well as other programs and
tools—to find wireless networks that they can identify and infiltrate.
And it’s not that hard. Wireless networks work very similarly to a radio
station, only on a much smaller scale. Computers with wireless capability share
information over radio waves. These waves are sent to a central device, called
an access point. The access point allows numerous computers to connect together
or to connect to the internet.
Enter wardriving. The access point emits radio frequencies that can be
captured by any wireless capable computer. But the wireless network only
functions within the confines of the building, right? Not necessarily. While
access points may not have the power of a radio station, sending out its
message over miles, many access point radio waves can be detected from up to
several hundred feet away. Wardrivers and even unsuspecting neighbors can
access and use your wireless network.
The Controversy
A recent radio program illustrated just how prevalent wardriving is. The DJs
asked local residents to call in and confess to “borrowing” someone else’s
wireless network. The show was inundated with calls ranging from those who
intentionally or accidentally accessed private or business wireless networks.
One caller confessed to occupying a restaurant bathroom stall as she accessed
her email, all the while keeping her date waiting.
The arguments over wardriving are just as prolific as the users themselves.
Many states are enacting laws against accessing computer networks without permission.
(In Utah, for instance, it is a
class B misdemeanor, while in Florida;
Benjamin Smith III was charged with a third-degree felony for unauthorized
accessing of computer networks.) Wardrivers and others have spoken out against
defining their activities as crimes. Though they technically are accessing a
service that they have not paid for, their arguments revolve around the
philosophy that because the owner of the service has not done anything to limit
access, then the owner is providing it as a free service to others.
Unfortunately, most wireless network owners are ignorant of this free service
that they are unwittingly providing.
Many wardrivers also state that by mapping out and posting locations of open
wireless networks, they are helping developers of such hard- and software to
provide an even better service. This Robin Hood mentality does little by way of
protecting those people who utilize wireless networks from the malicious
intentions of some wardrivers seeking access to open networks.
On the other side of the debate sit those who adamantly maintain that
accessing a network without permission is an invasion of privacy as well as
theft. Multiple computers accessing your wireless network can rob you of
bandwidth and slow down your connection, and, while most internet providers
have moved beyond the days of purchasing internet access in terms of prepaid
minutes, other people accessing the internet through your server uses up the
benefits you have paid for. Much like a neighbor plugging power cords into your
outlets.
The Dangers
Perhaps providing free internet access to your neighbors and passersby
doesn’t concern you. It is, after all, a very neighborly thing to do.
Regardless of your feelings, you should also be aware of the dangers.
Leaving your wireless network open for others to infiltrate not only grants
access to the internet, but also to any files stored on or shared over the
network. Anyone who accesses that network can open any file, download their
contents, and save it to their computer—all without you knowing it. That means
personal information such as bank accounts, credit card numbers, identification
records, or even customer data if your business uses unsecured wireless
networks are free game.
Open wireless networks also provide a playground for more nefarious
activities. Less than honest wardrivers could access your network to download
or upload any files. These files could contain anything from child pornography
to terrorist threats to hate literature. They could send out thousands of spam
messages and viruses, or access any website without fear of being caught. The
sky is the limit. And the icing on the cake—for the wardriver—is that the
activity cannot be tracked back to him or her. It will, however, be tracked
back to the network owner. If that’s not enough to raise an eyebrow in concern,
consider that if a message containing a threat against the president is traced
back to your access point, you could be fined and sentenced to a five year
prison term—whether you wrote that message or not.
Finally, malicious wardrivers might access your wireless network with the
sole purpose of infecting your computer and network with damaging viruses.
Protecting Your Wireless Network
Much to the shame of many computer users, protecting your wireless network
is a fairly easy thing to do. However, recent news stories show how little is
being done to protect wireless networks. A recent Associated Press article
reported on an 800-mile drive in San Jose, CA,
looking for wireless access points. Over 3,600 wireless access points were
discovered, a full 40% of which were completely unprotected. A CNN report also
found 3,000 connections—with 67% completely open—through “warflying” (flying
over a given area looking for wireless connection sites).
Taking a few simple actions can protect your network from other people
accessing them.
Encryption
Encrypting your data means that you turn it into a code that no one else can
understand. Fortunately, you don’t have to invent such a language; your
computer can do that for you. Once data has been encrypted, it cannot be
decrypted without the proper key. So even if someone accesses your
information—or steals your computer—they won’t be able to use the information
unless they know your password.
WEP (Web Equivalent Protection) is the most common encrypting tool on the
market today. While it is “hackable,” the time and energy needed to decrypt WEP
makes it a suitable choice for most networks. For businesses, and those who
really want to keep their information secure, check into WPA (Wireless
Protected Access). To date, WPA is “unhackable.” Many other encryption programs
are available, ranging in strength and efficacy.
SSID
Your wireless router broadcasts its Service Set Identifier (SSID) to let any
wireless connections know that it is available. Most routers use a generic
name—usually the manufacturer’s name—as their SSID. This makes it extremely
easy for wardrivers to access your network. As long as their computers
recognize the SSID, they can access your network.
You can change your SSID’s default name fairly simply. But that may not be
enough. Many wardrive programs can still detect the network and will display
the new SSID name. To turn your network invisible, you can set your router to
not broadcast its SSID. You can also turn off the broadcast option. Some
computers may have problems accessing networks that do not broadcast their
SSID, however.
Default Settings
Changing your default settings on your network offers only minimal actual
security. The upside to changing default settings, however, is the appearance.
Much like the security gates set up by the doors of stores, changing default
settings can be a visual deterrent to wardrivers—it gives the appearance of
knowing what you’re doing. While some wardrivers might not be scared off,
changing the default settings is worth the effort.
MAC Addresses
You can limit the computers that can access your network by using MAC (Media
Access Control) addresses. Every piece of networking hardware, including
wireless hardware, comes with its own individual MAC address. Many routers will
allow you to limit access to certain MAC addresses. If the router does not
recognize the MAC address, it will not allow that computer access. This will
foil all but the most accomplished hackers. Using MAC address filtration is
different for each router, so consult your instructions or call the
manufacturer for assistance.
Firewalls
Firewalls examine information coming from or going to the internet and
filter out any of the “bad” stuff. Software, hardware, and wireless firewalls
are available. Consider placing a firewall on every computer as well as your
wireless access point.
Additional Protective Measures
Here are a few additional suggestions that will add to the security of your
computer:
Avoid saving personal
information—such as passwords, credit card and social security numbers,
and financial records—on your computer or network.
Invest in antivirus and
antispyware programs.
Keep your programs,
especially security tools, current using Automatic Updates.
Place your wireless access
point away from windows. Putting it in a central location in your home or
business will help decrease signal strength outside of the intended
service area.
Safe Wireless Networks
Whatever your feelings on the matter, limiting access to your wireless
network is a smart idea. Your neighbors and others may appreciate the free
service that you are providing them, but you need to ask yourself how long can
you dodge the bullet? Sooner or later, the wrong person may discover your
wide-open network and abuse your hospitality.