Welcome to NetStumbler.com, the home of the award-winning wireless networking tool and the best source for your daily Wi-Fi, WiMAX, 3G and VoIP news.

Download NetStumbler v0.4.0

Tag Archive for 'security'

My Wonderful Trip To South Africa That Didn’t Happen Thanks To The TSA And Delta Airlines

I don’t normally post personal items, but I think that everyone should know about some of the horrible things happening at San Diego International Airport and with Delta Airlines. I wrote this immediately after the events that transpired so that I would have an accurate log.

Summers are the busiest travel time of the year. Each year more than 750 million passengers move through our country’s airports raking up more than 800 billion miles of travel. (Source) Along with the increase in demand, air travel complaints are up as well. (Source PDF)

Now, we all know this year has been a special one for the airlines and air travel as a whole. From the JetBlue hostage crisis, the terrorist “dry runs” on airport security around the country, and the most recent debacle on Southwest Airlines where they asked a woman to cover up because of her lewd attire.

Also, after learning about Xeni’s experiences, reading Bruce’s article, I decided to post this. Here we go!

Recently, I had to travel to Johannesburg, South Africa for business. I had an important meeting for a big bid that was scheduled for Monday. I was scheduled to arrive on Sunday. The thing that was going to make the 25+ hour trip worth while was the opportunity to spend some time with my relatives that I have not seen in many years, so I had planned to have an extended stay.

Any way you slice it, it’s pretty crappy flight, mine was supposed to be the best of the worst according to friends that had made the same flight previously. It was certainly the least painful of all the previous routes that I have taken to Johannesburg in the past. My flight was from San Diego (SAN) to Atlanta (ATL) and then on to Johannesburg (JNB) via Dakar for some fuel. All flights on Delta. Flying coach.

I was scheduled to depart Saturday morning at 6:30 AM. I arrived at the airport on time, checked in at the Delta desk in Terminal 2 (PDF). I checked in at the First Class counter, they let me because no one else was waiting in that line.

That is when the fun began.

At the time that I place my bag on the scale I look over my left shoulder to scope out the security screening line.

Side note: Delta only lets you take 50 lbs. per bag, but they let you take two bags. I got charged $25 in overage. So much for the 70 lbs. of other international carriers.

“Jesus”, I thought to my self.

The security line was the longest I had ever seen it, dozens of switch-backs, and even extending onto the sky-bridge! Memories of the lines I endured at London Heathrow during the ‘liquid bomb’ scare flash through my mind.

I ask the Delta agent if I had a fighting chance, she said that I should have “no problem, it moves fast”.

As I get in line, I look out over the sky-bridge just in time to see the sun beginning to rise.

The line shows no sign of life for minutes. Suddenly, some action - three steps forward…

The mother in front of me with her two little girls lets out a sigh. I tell her “just when you think there is no hope.. it moves”. She laughs and asks where I’m from, I tell her that I’m a San Diego native and ask her the same question. We chat about San Diego, and where we are traveling and things of that sort. I then ask her “What time is your flight?”, “7:30″ she replies. “What about yours?”, “6:30″. She tells me that she will gladly hold my spot in line while I go to the front. I told her that I’ve got 45 minutes and there is no point getting nervous.

After fifteen minutes finally I make it inside the terminal, clock on the Blackberry reads 6:00 AM at this point. I see another nervous guy jump out of line and go up to the TSA staff and “First Class” security line. A minute passes and he returns discouraged and starts speculating about his flight leaving at 6:30, I asked him what they said. He was told to get back in line and that he would be fine. I was unimpressed with this, but figured it was just to early to start escorting passengers. I decide to wait.

The entire security line is snapped to attention when a rather large TSA employee decides that 6:05 AM is the perfect time to make an announcement at the top of his lungs. He requested that everyone make sure that all water bottles were out of the bags and that if you had anything larger than 3 oz. to come and get a zip lock bag from him. He also said that “If you have any questions, I am at the TSA desk and will be happy to help.”

It is now 6:12 AM on the Blackberry, the sign on the turnstile reads 25 minutes to go (the previous one read 15 minutes), I tell the woman and her husband, who had just arrived, that hopefully I won’t see them later (because I’ll be on my plane), but I would appreciate it if they could hold my spot. “No problem, good luck!”.

So I quickly walk up to the area where the loud TSA employee is standing and approach a woman wearing a maroon “Supervisor” polo-shirt. I tell her that I have a 6:30 flight. “Get back in line”, she tell me. With no eye contact.

I then hold out my ticket and say “Ma’am I’ve a 6:30 flight to Atlanta, I think I am going to miss my flight.”

“Get back in line”, louder this time, still no eye contact. (Think nightclub door man/bouncer.)

“Ma’am, please, I have an international connection in Atlanta I cannot afford to miss my flight.”

“I told you, GET BACK IN LINE” (Even louder, still no eye contact)

I then realize that this is going no where with this woman, and say to the TSA employee who made the announcement; “Sir, I beg you, please may I go through, I am going to miss my flight to South Africa.” He was standing right behind this “supervisor.”

This entire time, first class passengers are being allowed through their VIP entrance to their own x-ray and metal detector. No lines for VIPs. Just like a night club.

This lovely “supervisor” then snaps to him “Don’t get involved! Don’t make me call Frankie.”

Thinking that maybe this “Frankie” might have more intelligence and compassion I say, “Who’s Frankie? Lets call Frankie!”

“You don’t tell me who to call, sir!”, snaps the “supervisor” (Very loud and aggressive).

At this point, there were no more first class passengers going through this entrance.

I decide to hang around and wait, perhaps this “supervisor”, Jackie, would have a change of heart and let me through to make my flight. Given that there were no first class customers waiting, no sweat off her back. There is also no point in going back to the line, if I do that I am guaranteed to miss my flight.

At this point, I turn around and am confronted by two Harbor Police Officers. Officer Columbus Offord (Badge #3306) and Officer Walter Tucker (No badge number on his card?)

“This guy refuses to move!” Jackie pipes in from over my shoulder.

“Whats the problem?” the officers ask me.

At this point, we are in the middle of the terminal. Before I respond, the officers and I walk off to the side near the check-in counters.

“There is no problem officers. I am going to miss my flight, I have an international connection to make and she will not let me go through. I have been here with plenty of time to make it through security, but the line is not moving.”

“Well, we cannot just put you to the front of the line, you have to speak to Delta”

“Ok, I’ll go speak to Delta”

The Delta check-in desk is the closest to where I am now.

I walk over there, the officers stay put. I ask the First Class Delta employee - “Will they be holding the 6:30 flight for people that are waiting to get through security?”

“No, and if your not at the front already you wont make it”, she responds.

“Thanks” (Read: SHIT!)

So I walk back towards toward the line.

The officers then ask me, “What did they tell you?”

“That I’m not going to make it” I say.

“Let me have your passport”, demands one officer.

“What do you need it for?” (I’ve seen this movie before, I’ve done nothing wrong, but you know… abuse of power, police state, post 9/11 age, etc etc etc etc etc etc etc etc)

“So that I can know who I am talking to”, he says.

“Ok, here you go”, as I hand him my passport.

The officer then proceeds to radio my details in, and his partner just stands with me.

He then must have gotten word back from dispatch that I am NOT a terrorist, or he just wanted to log it in for their records.

He then gives me back my passport, waves his hand, and says “Go through.”

I then hand my tickets and passport to another first class “document checker”, and then Jackie says “What do you think your doing?”

“The officers said that I could come through!”, I plead.

“Oh no they didn’t, you get back in line where you were!”

Now, remember back now to the family holding my place in line? They had been watching this entire thing and were now at the front of the line, literally next in line. They waved to get my attention and say “We are here! We’re up here!”.

“I’m with those people, thats where I was”, I tell Jackie.

“Oh hell no, he’s not up there with those people, he’s got to get at the back of the line where he was.”, Jackie says.

“No, I was standing with them”, I plead again.

“They’re on Continental, they don’t know him!” (How could she know this?)

“I do know them, they are here from Florida on holiday, they were here for a week. Their flight connects in Houston!”, I say.

At this point the husband of the family, my hero - got love New Yorkers (living in Florida). Screams at the top of his lungs “He’s with us, you let him up here right now!” directly into the face of the TSA bouncer that made the announcement earlier.

The TSA officer says to the husband, “Sir, lower your voice.”

“Fine go through”, Jackie says knowing she could no longer deny me and had lost.

At the same moment I walk through the First class line behind the TSA officer. I hear the husband ask, “Why are you guys doing this to this guy, he just wanted to get on his flight?”

As I walk by, I hear the TSA officer respond - “Sir, that gentleman made a death threat on my life”. AN OBVIOUS LIE! I ignore it, as at this point I am shaking from the stress of the situation and I am nervous that I am not going to make my flight.

“Oh, I didn’t know anything about that”, the husband says.

The family and I are now parallel in the lines. I say thank you to both the husband and wife for their help and they try to calm me down, I was visibly shaking. I give the husband my business card and say please get in touch so that I can thank you. I hope he reads this and does.

I did not think a thing about the TSA officer’s “death threat” statement and went to the x-ray machine.

I take out my Powerbook and put it in a bin with the case, and toss my sandals and backpack in another.

No x-ray or metal detector alarms, and I get re-dressed.

I then run to Gate 40, basically the farthest gate in the terminal (check map linked above). I though the adrenaline would have got me there faster, but by Gate 38 my legs were running at half speed. Note: It must have been the sandals :)

I get to the gate counter nearly dying and say to a Delta clerk, named Ana, “Did I make it for the 6:30?”

“Nope, its already gone.”, she says.

“How long did I miss it by?”, catching my breath.

“Technically you missed it by 5 minutes, but actually you missed it by 2″, she says. (Read: SHIT!)

“Let me see you ticket”, she says.

So I hand her my ticket, tell her I’m catching a connection to Johannesburg.

She then puts me on the 8:00 AM flight to Atlanta, and tells me that I will need to run, “No Starbucks”, and puts me as far forward on the plane as she could. Seat 12C.
I ask her about my bag.

She says that it left on the plane without me, but assures me that it will be on the plane to Johannesburg.

I thank her and then go to the bathroom for a little moment. “This sucks, is it still worth going?” I think to my self.

I gather my composure and start walking back to the security screening area to find out the names of the people I had just dealt with so pleasantly at the security screening.

I spot a “security guard” on break and ask him if he knows who the woman (Jackie) at the front was and who the guy (TSA) was. He explains that TSA wear all white, and that some are private employees but still employed by the government.

He then says that he wants to see who these people were also and starts walking back with me.

On the way I see the two officers, Walter Tucker and Columbus Offord, sitting on coffee break and I approach them.

I say “Hi officers, I just wanted to let you know that I did not make my flight.” I continue, “I know you were just doing your job, but I would like to get your names and badge numbers.”

“What do you need that for?”, one says.

“You don’t need that!”, the other proclaims.

“What do you need it for?”, they both say obviously feeling defensive and threatened.

I respond, “I need it for the same reason that you needed to see my passport, so I know who I talked to. I want to be able to remember everything accurately.”

They then begin to pull out their business cards.

As the first officer, sitting on the right, hands me his business card, he says “You know you don’t come to the airport and make death threats.”

I respond by saying, “That is a ridiculous lie! You and I both know, you better than me, that if I had made a death threat to a federal officer that I wouldn’t be here right now, I would be arrested. You probably would have been the ones to do it. Its very easy for that TSA employee to make false accusations, I am just a regular citizen and I have no recourse, and he has no repercussions for making these false accusations.”

“Ok”, they say as they stare at me blankly.

After that, I walk towards the TSA kiosk, on the “secured” part of passenger screening.

I walk up to, a senior looking officer. Scott Stanfield.

I tell him, that I had a problem with some employees and I would like to know who they are so that I can file a complaint.

He says OK, but wants to make sure that he knows who I am talking about. So I tell him the woman in the front, with a maroon polo shirt, and the larger gentleman with a white TSA shirt at the desk in front. He walks me over to a more direct line of site, and points at them. I confirm that those are the people, even though I could not see the woman at the time.

He begins to tell me that the woman, Jackie, is not a federal employee, but is employed by a private firm GAT Security. I tell him thats fine, give me GAT Security’s number and the manager’s contact information and I will file a complaint with them.

Then I say I want to know who the TSA employee is, he says that he cannot give me his name because he is a federal employee. At this point I look at his badge and say “Scott Stanfield, are you kidding me? I can just go walk up and read his name off his badge, but you can’t tell me?”

“No, Sir I can’t. If you tell me what your complaint is, I will file the complaint for you”, he responds in a serious manner.

“Ok then”, I say.

At this point, several other TSA employees start to crowd around like school children trying to eavesdrop on a secret.

I tell him, that I don’t feel comfortable where we are standing and move over to the side a few feet.

I then explain to him, that as I walked behind the TSA officer he told another passenger that I had made a “death threat on his life.”

I tell Scott that this is a blatantly false accusation, and that his employees should not joke about these types of things. I also tell him, what everyone knows, that if it were true. I would be in custody.

I can see that this is not going anywhere, as he hardly agrees that this was a problem.

“This type of behavior must be encouraged”, I think to my self.

Before I go, they give me a piece of paper with - “G.A.T Security - Kyle 619-491-2864″, written on it. They say that Kyle is the Jackie’s manager. I thank them and go on my way.

When I return to Gate 40 I speak with Ana, the Delta clerk again. She says that I should go over and speak with the Delta manager, she points him out for me.

I walk up and ask the Delta Gate Manager about GAT Security and tell him my story.

He then says he will call a GAT manager to come speak with me.

I wait about 10 minutes and a guy shows up with a reflective safety vest, the GAT “manager”. He has been out on the runway, with his vest and ear plugs. This guy looks like a baggage handler, not the manager of airport security.

I explain to him what happened, and he tells me this in not the first time they have had problem with Jackie.

He then gives me the office number 619-491-2864 and Kyle’s name. I decide to give the number a call, it goes straight to voicemail on a cell phone, its Kyle’s cell phone. I start to wonder why is this number for the office going to Kyle’s cell phone?

I then go back up to Ana, she asks for my tickets again, and says if the plane doesn’t board in the next twenty minutes that I won’t make it. She wants to put on me on the same flights for tomorrow. I tell her “Ok, thank you”, and wait like the rest of the passengers.

At about 7:45 AM the plane has not boarded yet, and I get approached by another Delta manager who asks if the GAT supervisor was helpful. I tell him no. He then says, “come over here I want to lookup your flights.” He confirms that Ana had put me on for next day and says, “see you tomorrow.” It turns out that the bolt that they use to attach the plane to the vehicle for towing into the gate had broken and the plane was stuck on the runway.

I go up to Ana and thank her for being “the nicest person that I had dealt with today.” She said she was actually in a bad mood, but liked me. She asks for my tickets again, and at this point I figured I would ask about bulk-head seats for tomorrow. She said that they are only assigned the day of the flight. She then said, but don’t worry I have upgraded you to Business class. Don’t tell anybody.

I thanked her graciously and left the airport.

On my way out I see the TSA’s Scott Stanfield coming up the escalators near where this morning’s events began. I tell him that the second flight had mechanical problems and thanked him.

I spent several hours after I got home trying to find GAT Security in the White Pages and online, I could find nothing. I then decide to call the San Diego International Airport and ask for a manager… there is none. The only person to speak with is the directory assistance person.

I then try call the Harbor Police, I finally manage to get hold of a Sergeant Micksel. I explain to him what had happened with his two officers, that they initially refused to provide their badge numbers and names. I then spend nearly an hour and twenty minutes explaining to him why it was NOT appropriate behavior for them to tell me “You know you don’t come to the airport and make death threats.” He could not see why this was a problem. I tell try to walk him through the logic that it was a lie and a false accusation, and they knew it was false because if it were true they would have had to act.

Finally I tell him, “If you are not going to take my complaint seriously I will find someone who will.”

That gets his attention and he says he wants to get the dispatch logs and call me back. I wait for his call, and twenty minutes later he does call back.

He says that I dealt with “one African American officer and one Asian American officer.” I tell him, “No, actually they were both African American.” I don’t know why this was relevant?

He then tells me that all the dispatch logs said was that someone, called in “a disturbance”. I tell him that I had not created a disturbance, and the tells me that all the Harbor Police do is respond when they are called.

I then ask him how I can go about filing my complaint. He tells me to contact Internal Affairs and speak with John Reilly at 619-686-6590.

I thank him and hang up the phone.

The next morning I then decided that a trip of that length, when I have already missed my meeting is not worth taking.

My next mission is to get my ticket refunded.

I call Delta and ask for a refund, they tell me that I can’t get one even though it was a mechanical failure that prevented me from making my flight and even though I no longer need to make the trip.

I then ask how I can go about getting my bag back to San Diego… Remember? It flew WITHOUT me!

They tell me that they cannot get it, I have to go to the baggage desk at the airport.

So I go back to sleep and when I wake up I go to the airport to request my bag.

The baggage desk requests for the bag to be sent back to San Diego and delivered to my home.

My girlfriend, then says “Lets go to the Delta desk and ask for a refund.”

I oblige.

I tell the Delta clerk what happened, and that I no longer need to make the trip and would like a refund.

Interestingly, she does not offer me another ticket for another travel date. At the time I did not know that was the typical response. To be honest, I have never missed a flight before. Let’s hope this is not a new trend for me.

She then proceeds to do a TRR (Ticket Refund Request).

The manager comes over and explains that because I didn’t buy my ticket directly from Delta the amount that I purchased the ticket for does not show up in the system. Therefor, he cannot refund me today.

I tell him that I understand. The clerk then gives me a print out and tells me to call 1-800-847-0578 on the 23rd of August. They will take about two weeks to find out how much I paid and then be able to process the refund.

I thank her, and ask her about the $25.00 in over-baggage that I had to pay.

She says that they will be able to refund me when I call.

I thank her again, and go home.

Two weeks later, on Monday the 27th I call the refund center and give them my TRR number.

I am told that they can see my name in the system, but they have not yet received the actual request from the airport for a refund.

“What? I don’t understand, you have my name and the TRR number? What else do you need?”, I ask.

“We need the actual paper receipt from the airport, it can take up to 40 days”, the customer service representative replies as if this was normal.

“I have a paper copy”, I tell him.

“Ok, you can fax it to us at this number: 404-715-9256″, he explains.

So I fax it through immediately.

I wait until Wednesday and call back. I give the representative my TRR number and they tell me again that they have not received anything from the airport.

I tell them that I faxed it through already.

“When did you do that?”, she asks.

“On Monday”, I reply.

“What time?”, she says.

“Around 11:30 AM”, I tell her.

“Ohhhh I see that here, it will take at least seven business days to before anyone can get to that”, she explains.

“Ok, thanks”, I say and hang up.

Several days later I call back and ask for an update.

They tell me that they have refunded me $1943.71

I ask why the amount is $1943.71 and not $2143.71, which is what I was billed.

She tells me that there was a $200 penalty.

I tell her that I missed the flight because of Delta, and should not have to pay ANY penalty.

She says that its the policy.

I ask her about the $25.00 over baggage fee.

She says that it was not included with the refund request and cannot do anything.

I tell her that the Delta desk told me that the refund department would be able to process that at the time that my ticket will be refunded.

She tells me to go back to the airport and ask them.

And that is where we are today… So my friends, I pose the following questions:

What recourse do passengers that encounter things like this with the TSA have? This is obviously a case where the TSA officer felt that it would be easier to lie to justify his actions, rather than do the right thing and help someone.

How can Delta let my bag fly without me? I thought that airlines are supposed to remove passengers that do not board? Isn’t this a HUGE security risk? I mean, you could read my story and find a massive loop-hole in the security system at airports. Especially given that in recent “dry-runs” bags with simulated bombs made it onto planes. I know I don’t feel safe now, knowing that the baggage belonging to the guy being detained at security is on the plane even if he is not. Does keeping him off the plane make us safer?

Why should coach passengers be discriminated against? Why do first class passengers receive special security treatment? Are they paying more taxes to support the TSA? No! They should be in line with every other tax payer in coach.

Seriously, what if I end up on a “no-fly” list? What recourse does one have in a situation like this? Like this guy?

Who is GAT Security? How did a company with two employees, Jackie and Kyle, with only a cell phone get into a position where they can over rule the TSA and dictate what passengers get on to their flights and which get delayed?

Why did the TSA’s Scott Stanfield refuse to provide me the name of the other TSA employee? His excuse was bogus, if the employee wears a badge… his name is not a government secret!

Why does it take Delta? Two weeks/40 Days/Seven days to process a refund? The kicker here is that my credit card was billed by “DELTA AIR LINES ALEXANDRIA VA” and not by the website that I purchased the tickets from - Cheapoair.com? Is this just an excuse to keep our money and make it difficult to get refunds for things that they did not provide?

Thanks for reading!

So much for the friendly skies.

If you are looking for some other interesting reading check out these articles:

http://www.msnbc.msn.com/id/20298840/site/newsweek/
http://www.schneier.com/blog/archives/2007/07/airport_securit_7.html
http://www.schneier.com/blog/archives/2006/08/behavioral_prof.html
http://blog.wired.com/27bstroke6/2007/08/court-says-trav.html
http://consumerist.com/consumer/travel/flight-delays-will-only-get-worse-say-experts-296266.php
http://consumerist.com/consumer/travel/united-airlines-hires-customer-service-specialist-from-disney-296134.php


Continue reading ‘My Wonderful Trip To South Africa That Didn’t Happen Thanks To The TSA And Delta Airlines’

New Tools Found For Wi-Fi Hacking

Wi-Fi hackers have gotten more advanced and your private information is even more at risk. The recent Black Hat conference in Las Vegas featured a demonstration by Errata Security that detailed how a hacker can use new tools to steal your encrypted cookies and passwords and then control your online sessions.

Errata has combated this new hack threat with their own tools, Hamster and Ferret, which prevent attacks. It appears that the good guys are following closely behind the bad guys but they’re still slightly behind and all Wi-Fi users need to be careful.
Via [securecomputing.net.au]
Continue reading ‘New Tools Found For Wi-Fi Hacking’

iPhones Flooding Wireless LAN At Duke University

Duke University is facing a wireless LAN crisis which seems to be related to the recent release of Apple’s iPhone.

Up to 30 wireless access points can be knocked out at a time as the built-in 802.11b/g adapter on the newly released phone flood the area with MAC address requests. The requests are for an invalid router address, since the iPhone making the request doesn’t get an answer it keeps asking, tying up the system for ten to 15 minutes at a time.

Right now this isn’t a huge problem but school officials are worried that the end of August will bring a huge influx of new iPhone users and more headaches than Duke can handle.
Via [networkworld.com]
Continue reading ‘iPhones Flooding Wireless LAN At Duke University’

Wireless Network Admins Wising Up

RSA Security Inc. conducted its annual survey of New York, London and Paris and found that more wireless hot spots are working to secure their networks but a fifth of corporate access points remain open.

In all three cities the percentage of hot spots protected by some form of encryption increased; London went from 76 to 81%, New York only grew from 75 to 76%, while Paris jumped from 78 to 80%. They also found that Wired Equivalent Privacy (WEP) is being replaced by Wi-Fi Protected Access (WPA), a much more secure method.

The number of businesses without adequate protection is a bit surprising considering what could possibly be at risk for these companies. London and Paris both had about 18% of their companies unprotected and New Yorkers topped the list with a full 21% of their businesses tempting fate.
Via [computerworld.com]
Continue reading ‘Wireless Network Admins Wising Up’

More Wireless, Not Enough Security

RSA, the security division of EMC, has found that larger cities have more Wi-Fi than ever and more security but the security is woefully outdated.

Using New York, London and Paris as their target cities, they have found the number of Wi-Fi access points have risen 49%, 44% and 160% respectively. Encryption was found to be up but only by 6% in London and less than 2% in both New York and Paris.

The analysis of the data has shown an improvement in security over previous years but an unbelievable one fifth to one quarter of all businesses have no encryption security at all.
Via [wi-fiplanet.com]
Continue reading ‘More Wireless, Not Enough Security’

Schools Want Urgent Wi-Fi Advice

Debate over the safety of Wi-Fi radiation levels in Britain continues. Britain has adopted municipal Wi-Fi fairly well and has added millions of users and several wireless cities to its roster, but they’re now finding the debate over health and safety is spreading. Stirring the pot of contention is the BBC program Panorama, which is questioning the level of control over Wi-Fi in the classroom. Britain’s Health Protection Agency acknowledges the concerns of citizens and vows to continue research into the topic, but at the same time reassures communities by saying that the networks produce very low power which does not represent a health risk. This ambiguity has served to alarm more than placate the public and watchdog groups have been set up to demand evidence of safety.
Via [news.bbc.co.uk]
Continue reading ‘Schools Want Urgent Wi-Fi Advice’

How To Keep Your Wi-Fi Network Safe

With the ease in cracking the Wireless Equivalent Protection (WEP) code, many experts have recommended the use of Wi-fi Protected Access (WPA) to secure home wireless Internet networks. Unlike WEP, which hackers can breach in as little as 60 seconds, WPA appears to be a formidable protocol. “We have had a very close look at WPA and we can’t find anything to exploit,” said Erik Tews, one of the researchers at the Darmstadt Technical University in Germany who discovered a method to break into a WEP-equipped network much more quickly. A brute force dictionary attack may defeat WPA and its later variant, WPA2, but this would entail the hacker to use millions of different words or combinations of words to obtain the correct password. As such, AirDefense wireless security expert Amit Sinha is endorsing the use of a non-dictionary password with WPA. “If you use one which is long enough - at least 20 characters - then it becomes unfeasible for a hacker to mount a brute force attack, because finding your password would take longer than the entire history of the universe.”
Via [bbc.co.uk]
Continue reading ‘How To Keep Your Wi-Fi Network Safe’

Child Porn Case Shows That An Open WiFi Network Is No Defense

Leaving a wireless access point (WAP) open is generally considered a bad idea. Experts suggest you could be opening yourself to criminals by not password protecting your WiFi Network. But if you are a criminal then keeping and open WAP may become your defense. A growing number of file sharers believe they can throw reasonable doubt into any lawsuit by demonstrating that anyone could have been accessing their computer through an open WAP. But this may not be the case. Recently a Texas man, convicted of possessing child pornography, tried to use this defense stating that the original evidence used to get the search warrant was based upon an email that could have been sent by his roommate over the man’s open WAP. In this case the District Court and the US Court of Appeals disagreed and the man was convicted. So, file sharers beware, an open WAP may not provide any protection from criminal prosecution.
Continue reading ‘Child Porn Case Shows That An Open WiFi Network Is No Defense’

WiFi Thieves Busted In The UK

The city of Redditch in the UK has two unlikely criminals. The pair were recently arrested for using other people’s WiFi broadband internet connections without permission. Neighbors had become frustrated at the man parked in front of their home on his laptop and called the police. The police arrested the man and cautioned him for dishonestly obtaining electronic communications services with intent to avoid payment.
Via [techworld.com]
Continue reading ‘WiFi Thieves Busted In The UK’

Don’t Use WEP For Wi-Fi Security, Researchers Say

If you’re relying on Wired Equivalent Privacy (WEP) protocol for Wi-Fi security you may be at risk. Three German security researchers have found a way to tap into WEP protected data within a minute. Previosly, WEP had been criticized for flaws in the basic algorithm structure but cracking into the system took several minutes. Now, with the help of a 1.7 GHz Pentium M processor, WEP is rendered useless in a few seconds. Switching to WPA encryption can take up to a few hours but the switch could protect your private and sensitive data.
Via [computerworld.com]
Continue reading ‘Don’t Use WEP For Wi-Fi Security, Researchers Say’

New Attack Cracks WEP In Record Time

Researchers at the Technische Universitat Darmstadt have found a way to crack 104-bit WEP, a typical security tool for 802.11b/g/n networks. The team used a 1.7GHz Pentium-M machine to compute the success rate of grabbing the key. The attack needs sufficient traffic, so the researchers made the protected network generate packets. At 40,000 packets, the probability of extracting the key is at 50 percent. This could go up to 80 percent with an additional 20,000 packets, and rise to 95 percent when traffic involves 95,000 packets. Hitting 95 percent, based on the experiment, would only take 1 minute and 51 seconds.

Because of WEP’s vulnerabilities, it is recommended that wireless network owners opt for WPA2, which is yet to be cracked by any known cryptographic attacks. The mechanism also provides support for infrastructure and ad-hoc networks, and includes pre-authentication and CCMP encryption features.
Via [arstechnica.com]
Continue reading ‘New Attack Cracks WEP In Record Time’

Is Skype Secure Enough For Businesses?

Some security experts doubt that Skype is the best way to go for businesses. According to Gartner research director Lawrence Orans, Skype’s reliance on a proprietary signaling protocol makes it vulnerable, as standard firewall products cannot be used to secure it. The code, he said, has problems and Skype “has not shown enterprise-level capabilities in timely development and distribution of patches, workarounds and guidance.” A 2005 independent study by cryptographer and security expert Tom Berson would dispute Oran’s opinion: the analysis showed Skype’s protocol is difficult to crack.

Mark Osborne, chief information security officer at carrier Interoute, said Skype can be used to spread viruses and be exploited by keyword loggers in malware. Antivirus company F-Secure warned Skype users to be careful of chat messages telling them to click a link, which would cause downloading of the Warezov worm.

Vishing is another risk. The March 2007 Symantec Internet Security Report showed a survey of information stolen through identity theft, including Skype passwords available from “underground economy” servers. Passwords go for $12 each, while the price of stolen credit card details with card verification values ranges from $1 to $6. A full identity information including US bank account, credit card, date of birth and government issued identification number is sold for $14 to $18.
Via [silicon.com]
Continue reading ‘Is Skype Secure Enough For Businesses?’

Thank You Superhacker, You Saved My Computer

You can actually be setting yourself up for identity theft. A recent report entitled Internet Safety: The State of the Nation found that one in five, or 21%, of British households that use wireless broadband connections do not have password protection. These open portals leave users open to fraud, identity theft or worse. To combat this, in comes the ethical hackers. They’re a roving band of virtual vigilantes who are cruising neighborhoods and telling individuals that they are vulnerable. Some of them are even fixing the problem and showing people how to better protect their assets. But don’t wait for a hacker to hit your house, update your internet security immediately and protect yourself from identity theft.
Via [technology.timesonline.co.uk]
Continue reading ‘Thank You Superhacker, You Saved My Computer’

Paint Your Way To Wi-Fi Freedom

EM-SEC Technologies plans to sell a wall paint that can bar or hold in WiFi radio signals. The EM-SEC Coating System provides an “electromagnetic barrier for the containment of wireless networks” that, according to Robert Boyd, vice president and director of technology at the Hampton, Virginia-based company, “reduces the threat from electronic eavesdropping and blocks out electromagnetic interference for the protection of electronic data.” The water-based paint was intended for use by the U.S. government and military and is certified by the National Security Agency as a Telecommunications Electronics Material Protected from Emanating Spurious Transmissions or TEMPEST countermeasure. The company has yet to announce how much it would charge for its product. Other similar products that are out in the market include Force Field Wireless’s DefendAir Radio Shield, an interior paint that can limit transmission of 5GHz signals, and BAE Systems’ FSS (Frequency Selective Surface) wallpaper.
Via [wi-fiplanet.com]
Continue reading ‘Paint Your Way To Wi-Fi Freedom’

How Skype Is Collecting Private User Data

Kurt Sauer, Skype’s Chief Security Officer, has issued a statement clarifying the company’s process for collecting private user data. According to Sauer, Skype has a license for an EasyBits plug-in manager software framework, which manages the Extras Gallery of Skype for Windows. The EasyBits software houses digital rights management functionality that allows for protection of commercial software like plug-ins from illegal redistribution or unlicensed use. It strives to identify the computer that runs the plug-in by reading the mother board’s serial number, which can normally be obtained via a public query to the BIOS. Sauer assured that Skype, because of its privacy agreement, does not extract the information but it is collected by the EasyBits software only to guarantee compliance of the plug-in that is in use, with the appropriate license token or key.
Via [networkworld.com]
Continue reading ‘How Skype Is Collecting Private User Data’