Friday, April 27, 2012

Cell Phone Security (Wifi and Web Browsing)

It is always nice to be able to get on a free Wifi so you are no using up all the data on your payed plan.  One very common place to get free Wifi is at a coffee shop like Starbucks.  The Wifi name is attwifi and it has a splash screen that makes you agree to some terms of service.  You browse the web and do your normal surfing or just check your email real quick while you stop in for a coffee or tea.  Many in the security field call this places like these a Target Rich Environment.  The number of people, inherent trust, people not paying attention, the various devices be it cell phones or laptops or tablets.  You don't wear only your underwear in public so don’t browse in the bare as well.  So lets take a look at some ways to be safe and protected.

I have previously written on free or open Wifi but I will go over a few important parts to remember.  Anyone can name any Wifi Access Point anything they want to.  They can name it something offensive and vile and horrible.  They can also name it attwifi.  Thats right, it can be the same name as the Starbucks offered Wifi.  No, there is no regulation on this or popup that comes up and says sorry this name already in use or please verify that you are a attwifi provider and insert vendor code or anything to that affect. They can set this Wifi access point up on the air and leave it open with no password just like at the coffee shop.  The bad guy can set up the internet so that he is a bridge between the access point and the internet.  Your phone, laptop, and tablets have a really nice feature that makes your life easier by remembering networks you have previously connected to and just reconnects for your convenience.  But wait, how do you know if it is the right one? 

You just have to keep in mind that open wifi is and always will be more risky then your home wifi.  You do not know who is on the open wifi and what they are doing.  Use your best judgment.  Dont do anything personal in the clear, use hhtps. Turn off your wifi if you are not using it.  I have started this practice since I noticed a few times that I had connected to wifi points I did not initiate myself.  Be vigilant and use best practices and you will have a greater level of security.

No comments:

Post a Comment