Ask Elizabeth
by Elizabeth Blair York | June 15th, 2007Q. Seriously, is it really a risk to use the free WiFi at the coffee shop? Is anyone REALLY spying?
A. Seriously? Yes.
I was in Raleigh-Durham working on a WiFi-enabled client site a couple of years ago when the security director leaned against my desk and asked me who ‘TigerBear83′ was.
My blood ran cold - it was my GMail password.
His employees regularly run sniffer software to make sure that employees are following security protocols and clearly, I’d failed the test.
Sniffer software is easily found (freeware versions are all over the web) and there are legions of hackers who spend hours nursing lattes and data trolling at WiFi hotspots.
Bottom line, public WiFi has no built-in protection. The security of your data is a a do-it-yourself proposition. A fact too many users are blithely unaware.
Will this change? Yes. But at this moment in WiFi’s evolution, the technology is just not there yet.
The safest option you can take to send/receive sensitive information is to get thee a patch cable and plug in. A secure, hard-wired network connection is your best port in the storm.
But before you give up coffee altogether, let me say that there are some security measure you can take to minimize risk on a public WiFi. The effectiveness of these measures is equivalent to whispering your private information versus shouting it across the movie theater.
The best up-to-date instructions I found on protecting yourself were at About.com, written by Mary Landesman. I recommend her post here.
The soundest advice I can give youon the subject - assume that anything you send & receive on an open WiFi can be seen. So never type anything on an open WiFi connection that you wouldn’t tell a stranger on a bus.
Q. I took your seminar years ago and you said if I spilled something on my keyboard and disabled it, I could run it through the dishwasher. I thought you were nuts. But now the situation’s come up and I was wondering…
A. Am I nuts? Yes. But that’s besides the point.
Over 10 years ago, I spilled Diet Coke on my keyboard and killed it dead. No knowing any better (which is usually the preface to every great discovery) I borrowed my neighbor’s dishwasher and ran it through - figuring I had nothing to lose and a keyboard to gain.
It worked. And it’s worked several times since then.
A new keyboard is cheap and easy to get these days but if you want to attempt a last life-saving procedure then run it through the dishwasher on a cool, unheated, short cycle. Make sure the keys are facing DOWN and don’t use any soap or detergent.
Afterwards, let it dry on a towel or a rack for at least 48 hours - until it is truly bone dry through and through.
Unconvinced? Well, Nell Boyce at NPR did it recently heard about this and tried it out. Read about her experiment here.
Just promise me you won’t try this on your optical mouse.
————————————————————————————————
On Fridays, MoGo Mobility’s Elizabeth will seek to answer your MoGo (and non-MoGo) technical questions.
Elizabeth is a professional writer & geek with most of the last decade spent in senior management at a leading global IT provider. Thousands have attended her seminars in the US & Canada on subjects ranging from basic TCP/IP networking to high-end data storage solutions.
Got a question? Ask Elizabeth.
Tags:advice, ask elizabeth, computer, connectivity, dishwasher, dishwasher safe, identitiy theft, internet, IT, keyboard, Mary Landesman, Mobile, nell boyce, network, NPR, passwords, piggybacking, Road Warrior, tech advice, wifi wifi security Sphere: Related ContentRelated Posts:
June 23rd, 2007 at 8:53 pm
Of course, if you connect to a site using SSL encryption (https://etc…) then you’ve gone from whispering your private information to writing it down in a code that can only be read by one person, and passing the note across the movie theater to that person. Sure, the people along the way might see what’s on the paper, but it’d take them centuries to decode it.
Luckily, almost all of Google’s services (gmail, docs, reader, etc) allow you to use SSL connections just by altering where you go from http:// to https:// . So while you may not want to search for “girls with swords” on the yahoo.com search engine while on your neighborhood starbucks wifi, you can be assured that your email traffic (or login and password) at https://gmail.google.com is NOT being sniffed by your starbucks stalker…or at least, not successfully.
P.S. Please note that plugging in is not a sure-fire fix-all solution either. If the plug you’re using is a hub and not a router (as many hotels who still offer wired connections tend to provide), that same sniffing software will let anyone else plugged in still read your traffic (if it isn’t encrypted). If you can’t tell whether it’s a hub or a router, how can you be sure you’re safe? Encrypt, encrypt, encrypt. Or wait until you’re home to do your scandalous searches.
June 28th, 2007 at 12:49 pm
Ross,
You’re absolutely right about SSL encryptions. You pointed out a great tip I forgot to include - typing in the address with ‘https’ and then bookmarking THAT link so you would be sure to do it in the future.
Thank you for that line “Encrypt, encrypt, encrypt.” - It’s going to be our mantra around here for a while.
As for your ‘PS’, please note that I said “A secure, hard-wired network connection is your best port in the storm.” …. the rule we hammered out was that any corporate information ranked from ’sensitive’ and above (including ‘private/propreitary’) has to be transmitted over a Secure (approved, encrypted) hard-wired connection. Because, as you point out, the hard-wiring in and of itself promises nothing unless combined with other measures.
Thanks for your informed, interesting comment. I look forward to hearing from you again…
September 6th, 2008 at 9:42 am
hkvir ikthuf bendohgy orbklc erdslq owgstkuy jphevcf
September 6th, 2008 at 5:32 pm
rxfabli
September 6th, 2008 at 5:33 pm
bomzfpt cmbxf gfmdvnt
September 6th, 2008 at 5:33 pm
tvikz gfqk ditao afxvsq
September 6th, 2008 at 5:33 pm
ealfbd
September 6th, 2008 at 5:34 pm
vwbrsan
September 6th, 2008 at 5:34 pm
sthgk yuwcbdt xwetur hlipjxr
September 6th, 2008 at 5:34 pm
hgtq tskwbnj rfjbk bqdtmkg
September 6th, 2008 at 5:35 pm
pltc
September 6th, 2008 at 5:36 pm
amvnq rzijo dbnxwmi
September 6th, 2008 at 5:36 pm
zmco zwuitgy qjok trkzlcs
September 6th, 2008 at 5:36 pm
erdqtwv
September 6th, 2008 at 5:38 pm
qnfkj aejmzh
September 9th, 2008 at 5:03 am
ubqvnzm btau dzcp slxru