Feeds

Security exhibitors set up insecure WLANs

Cracked logic

  • alert
  • submit to reddit

Security for virtualized datacentres

InfoSecurity Europe Wireless networking insecurity was a key theme of this week's InfoSecurity show with a number of suppliers coming out with surveys on just how vulnerable world+dog is to drive by hackers.

However a quick scout around the show yesterday revealed the problem is closer to home than most vendors would like to admit - half of the show's wireless LANs were wide open to attack.

Using a Compaq iPAQ equipped with a 802.11b card, Rob Baskerville, a consultant at security services firm Vistorm, discovered that eight of the 15 networks he found were running WLANs without WEP (Wired Equivalent Privacy), often taken as a sign that networks are vulnerable.

Baskerville, who found his results "surprising", didn't perform any invasive attacks (illegal without permission), so it's unclear how much mischief could be wrought through the oversight.

The use of WEP, which is itself vulnerable to attacks using cracker tools such as AirSnort, is often taken as a benchmark for surveys on wireless networks security.

But Baskerville says the issue is more complex: some companies - knowing WEP provides only minimal protection - simply don't use it, opting for
security mechanisms, such as VPNs, to secure their networks.

But what about the wireless LANs in Olympia? Vistorm consultants reckon the networks were put up in a hurry and without much thought for security.

Oh dear. ®

Related stories

Drive-by hacking linked to cyberterror
802.1X can be toppled 'like set of dominoes'
Cisco and MS team on wireless security
RSA supplies answer to drive-by hacking?
Secure the Wireless Network firmware
Tool dumbs down wireless hacking
Rogue WLANS - the next security battlefield?
Wireless security is even flakier than we thought

Beginner's guide to SSL certificates

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.