I’ve recently used the wi-fi that comes with the TR3. It took me a while to get around using the wireless internet connection because I was paranoid about security—I’ve heard that it’s entire unsecure.

Any thoughts about programs that may provide EXTRA security from people trying to hack into my comptur while I’m on the net at a local cafe with wireless internet access?

very paranoid…
:ph34r:  :ph34r:

[quote author=“GoatCamel”]I’ve recently used the wi-fi that comes with the TR3. It took me a while to get around using the wireless internet connection because I was paranoid about security—I’ve heard that it’s entire unsecure.

Any thoughts about programs that may provide EXTRA security from people trying to hack into my comptur while I’m on the net at a local cafe with wireless internet access?

very paranoid…
:ph34r:  :ph34r:

Zonealarm

And there is a free version.

Erik

i use zonealarm pro.

“Security” is pretty broad.

If you are concerned about somebody getting on to your PC through your wireless link, then a firewall like Zone Alarm is a good idea. It only protects one computer against people trying to get in to that computer. If you have more than one PC, you need to run the firewall on every PC.

If you are concerned about somebody getting in to yor PC through the internet, then you are more secure with wireless - assuming your access point uses NAT to change your IP address. This is because hackers can’t see the IP address of your PC. But a fire wall is still a very good idea. To check your PC for security on this point, google Shields Up.

If you are concerned about somebody using your wireless access to get free internet, then configure your wireless access point:

* Do not broadcast your SSID
* Limit who can use the wireless by MAC address
*** Your wireless access point has and admiinistrator password. Change it ***

If you are concerned about somebody seeing what you do on the internet and stealing personal information, use the encryption. With encryption, you have to use whatever your laptop and access point make available.  Until quite recently, the only encryption available was WEP. WEP isn’t very secure because the key is transmitted. A sophisticated hacker sitting on the street with a high gain antenna and some very slick software can get the key then listen in. Do you see any strange cars on your street? Do you have hacker neighbors? I think this threat is overrated.
[/url]

Can someone using the same wireless network hack into your laptop? That is, can someone also in the same hotspot hack into your laptop somehow?

RE: Zone Alarm
Windows XP SP(2)‘s security center seems strangely reminiscent of Zone Alarm’s style of application blocking. If I just use Win XP SP(2), is this just as good as Zone Alarm?

Isn’t there WPA as well?

Are these programs shareware?
Any links?

[quote author=“GoatCamel”]Are these programs shareware?
Any links?

ZoneAlarm comes in two flavors, Free and Pro.
http://www.zonelabs.com/

ZoneAlarm is a firewall just like any other (Norton Internet Security, McAfee Internet Security Suite just to name a few)

WPA is newer and better. I’m not sure if it’s available on the TR3. Encryption is not a big deal for me. My neighbors are 300 feet away, and they certainly are not hackers.

Yes, somebody else at a hot spot can hack into your computer. You need a firewall. But the chances of they guy at the next table being that interested aren’t that great. You have a better chance of getting hacked just by being on the web.

wpa is lets say 15% harder to crack than WEP. I use wep for the ease of it, and the compatibility.

http://www.thincomputing.net/newsitem68.html

here are several MAJOR steps to take in order to “secure” your WiFi

1) Subnet your subnet

if you have 2 pc’s total, there is no point to use a whole class C network, i.e. 192.168.x.x with netmask 255.255.255.0 use one with 2 ip’s only, 4 max with netmask 255.255.255.252 or 248 for example. there are plenty of subnet calculators on the net, that you can use to calculate your subnet if you want it to be something wierd. For example 10.12.14.16/30

2) use static IP’s with profiles on your pc. That way no DHCP will be dished out…. nobody will know right off the bat ... they have to guess….

3) use mac filters, on your router (probably best addition to the security issue)

4) Run IDS on your subnet to see what is going on with all the pc’s and if others are showing up.

5) Disable the SSID broadcasting

6) use very long SSID ,  which is non descriptive, for example: “iwenttothestoreandboughtasony”. That confuses the hell out of most people

7) Use wep/WPA with the strongest encrytion and DO NOT distribute the keys automatically, let the users type them. Also use the Second, third, forth etc. key instead the first (0) key.

With all those, a well educated hacker will be able to get onto your network after one to several hours ... if he/she doesnt get tired.

So I consider that “some” security

looks like you’ve spent “some time” thinking about this.
Great great advice!!

That’s the type of ultra paranoia security that I’m thinking about!

nah ... that’s my job. Computer Security Consultant ... Cisco PIX, VPN Concentrators, Wireless 802.11, CDMA networks, whatever comes across. Just got my CISSP on the 4th…

This is far away then paranoia .

The paranoia comes withe the iris readers, smartcards, thumb readers, random number generators and a commercial grade IDS….

p.s. Just so you know. If someone gets on your network

they can

1) steal your data from your computers

2) intercept whatever travels around, since it is not a wire, i.e. credit cards, ssn’s everything

3) the worst is make you liable for whatever they do ... for example use stolen credit cards, submit fradulent orders, etc… All ISP’s have a clause in the terms and conditions, that it is your burden to prove that you are innocent, if something happens… Think about security ... I take it seriously.

That was my former job…we needed to pass:

1. License plate verrification in the parking lot
2. Facial recognition at checkpoint 1
3. ID scan at checkpoint 2
4. Fingerprint at each workstation. My TR was required to have fingerprint.
5. iris to get into server/demo/secure areas.

It was cool, but it also sucked, I couldn’t bring any of my friends inside the building without clearance from the CEO or the CSO.

Also, its kinda annoying having every room video/audio all day long (sans bathroom).

Erik

yeah it sux ... I dont do clearance jobs. it’s too annoying to fillup the forms… If they want me, they go on my terms, if not ... they need to go shop for someone with similar expertise…. and eventually end up paying more + waste of time

For me it was perfect, 9 minutes from my house, huge salary, plenty of people answering to me, I set my own hours, etc…

It was just a PITA with the security and the fact that they expected unreasonable time frames to complete our programs…well, sort of unreasonable…my boss knew about it for 3 months, tells us about it the week it was to be delivered.

Working in the Corp. environment was something i was not used to, having my own companies since I was 14, but it’s something that I wanted to try at least once…and I couldn’t say no to the pay and the benefits

After several months I knew it wasn’t for me, thats why I went to Law School.

Erik

i hear ya..

I had my first company at the age of 14 as well. At 22 I decided that I will never hold a job in my life from then on.

Too much politics, too much B*lls*it.

Right now I set my rate, my schedule, what I do and where I do it ...

I grilled myself with 11 certs in 2001, so I can make myself more presentable I took all my certs in 3 months and 1 day. A lot of reading ... a lot…