Build your professional network on facebook via our app Go to app
 
<< Prev  4 of 6 in Topic  Next >>
Topic : securing wifi technology
  Rate : 
Posted in Community :

Be Quality minded |

.Net Tech Guru

 
Industry : Internet Functional Area : India
Activity:  19 comments  343 views  last activity : 05 02 2011 07:09:05 +0000
 Refer 1007
Share
 
 
 

7 steps to secure your WiFi

 

Terror groups have hacked unsecured WiFi connections to send emails, putting the life of the user in grave danger. Here's how you can avoid a team of cops at your doorstep

If you are jolted by the number of blasts that rock the country, a police team knocking at your doors soon after could be even more shocking. Indeed, an embarrassing and dreary experience in these uncertain times.

With terror outfit Indian Mujahideen raising its ugly head time and again, using its signature style of hacking a WiFi connection to send out an e-mail claiming credit for a terror attack, don't be surprised if you are the unfortunate one.

Terror outfits using hacked connections are becoming increasingly rampant and there is an urgent need to secure your Internet connection.
 
Otherwise, be prepared for some uncomfortable questions and long grilling sessions by the police should the terror email be traced to your connection.

Despite repeated requests by the Mumbai police and cyber experts, several connections in the city continue to remain unsecured, increasing their vulnerability of being misused by anti-social elements.

A recent survey by Mumbai Police along with leading cyber experts revealed that a startling 35,000 WiFi networks in Mumbai are unsecured.

According to the findings, of the two lakh Wireless Fidelity (WiFi) networks in the city, a little over 17 per cent were found to be unprotected.

IM members earlier used cyber cafes to send the terror emails but after the police crackdown on cyber cafes, the group abandoned the modus operandi.

Also, as a security measure, cyber cafes in the city were directed to install CCTV cameras and also jot down the details of users, who have to carry photo identity cards for verification purposes.
 
"After these strict orders were passed, the terror group, which has recruited qualified engineers, decided to hack into connections and send the email. 

Often investigations in such cases meet a dead end," said a senior police official from the Maharashtra Anti Terrorism Squad (ATS).

MiD DAY Reckoner
MiD DAY offers you a weekly guide to everyday stuff that you did not know who to ask. 

From solutions to problems and worries that the big bad city throws up, from lodging a police complaint to ducking deadly computer viruses, to being a more informed and alert citizen, we will help and guide you in all of it. 

Every week, we will give a hand-out, complete with an easy-to-follow guide. Watch out for this space every Monday

Expert says
"With anti-social elements hacking into Internet connections to carry out their activities, there is an urgent need to create awareness about securing the connections," said Vijay Mukhi, cyber expert

35,000
The number of WiFi connections in Mumbai that are still unsecured 

2 lakh
Total number of WiFi connections in Mumbai 

How can you keep the hackers away? 
The best option is to call a computer expert or engineer and instruct them 
to secure your connection. 

Here's how to do it:

Enable firewalls on each computer and router: Modern network routers contain built-in firewall capability, but the option also exists to disable them. Ensure that your router's firewall is turned on. 

Position the router or access point safely: While installing WiFi, ensure that the position of the access point or router prevents its reach to the exterior as much as possible. Try to position the device as far away from the windows as possible. 

Turn off network during extended periods of non-use: Avoid leaving your network available when you are not using it. Shutting down your network will most certainly prevent outside hackers from breaking in. 

Avoid using default usernames and passwords: Use a login/password on your router that is different than the default settings. Most routers are made available with a default combination that can be hacked

Enable MAC Address filtering: Each wireless device has a unique identifier called the MAC address. Access points and routers keep track of the MACs for all devices that connect to them. It ensures that rogues cannot connect to it

Avoid auto-connect to open wireless networks: Your connection allows you to connect to an open wireless network such as a free wireless hotspot or your neighbour's router. This exposes your PC to security risks and attacks. 

Limit the no of people who can see your network by disabling the SSID broadcast: The wireless access point or router typically broadcasts the SSID over the air at regular intervals. Home users can avoid this facility.

Blast from the past

Dec 2010
Disc jockey Akhil Talreja's unsecured WiFi connection in Sector 17 at Vashi in Navi Mumbai was hacked into to send the terror email to media houses after 
the Varanasi blast.

Sep 2010
After a firing outside Delhi's Jama Masjid, the email claiming responsibility was traced to Borivli. It was sent using a Tata mobile phone procured using fake documents.

Sep 2008
After the Delhi blasts, an email was sent and the IP address was traced 
to Chembur. The unsecured WiFi 
of a firm Kamran 
Power Control Pvt Ltd had been used.

Aug 2008
IM shot off an email to various media houses ridiculing security agencies. The IP address was traced to the WiFi network of Khalsa college in Matunga

July 2008
An unprotected WiFi network of Kenneth Haywood, an American, was used to send a similar email to news organisations after the Ahmedabad explosions.

 

source:http://www.mid-day.com/news/2010/dec/131210-secure-WiFi-connections-hacked-blasts-Indian-Mujahideen.htm

 Top Comment : S. Muralidharan   | 12 13 2010 07:54:38 +0000
It reminds us of an idiom "stitch in time saves nine"! Excellent and timely information. Our Mother Earth is not safe - human beings are threatened from all sorts - beasts are safe in dense cover than mankind!
 
19 comments on "7 steps to secure your WiFi"
  Commented by  V. Srinivas, Freelancer, Information Technology    | 02 07 2011 13:31:23 +0000
Rating : +1 
1. Lock your WiFi with a password: - both login name and login password.
2. Configure your device for MAC recognition and authentication. Once it is MAC trained, no one else can log in
3. Keep a log of all wifi accesses and inspect the log regularly
  Commented by  SHRIKANT MANOHAR DANKE, Consultant, Project Management Consultancy Firm    | 02 07 2011 09:48:56 +0000
Thanks for posting it on Toostep, Sharad.
  Commented by  Sharad Gupta, Software Developer, Tripura Technologies, Hyderabad    | 02 07 2011 08:38:08 +0000
Thanks Mr. Nohar for adding some more useful things..
  Commented by  Nohar Singh Dhruv, Assistant Engineer, PMGSY    | 02 07 2011 07:29:58 +0000
Rating : +1 
Sharad I am adding some more useful steps for securing WiFi network :

There are people that drive around neighborhood residents and commercial buildings looking for “open” WiFi access points (they call this “wardriving”). With programs like NetStumbler & Kismet, it’s easier than you probably may think.
But there's also a potential legal liablity if someone uses your wireless network for illegal porn or some other "bad" activity. 
Thieves pass-by locked cars in favor of an unlocked door. Wardrivers will pass-by a secured wireless network in favor of the many selections of open wireless networks!  True, a good hacker (given time) can still penetrate your "secure" wireless network; but by following these SEVEN steps, you can better protect your wireless network! 
Connect to your wireless router/access point. Most people have not changed the default settings. So click on these links and see if you connect! (If not, check your manaual (and email ME the other IP Addresses!))

D-Link/Linksys Routers: http://192.168.0.1 or http://192.168.1.1

D-Link/Linksys Access Points: http://192.168.0.30 or http://192.168.1.245 

Netgear: http://www.routerlogin.net

Don’t broadcast your SSID (Service Set Identifier). By default, most routers & access points send a short message repeating the network's name. Anybody who lives (or drives) nearby can detect you wireless network’s name and connect! 

To ease the initial setup, leave the SSID Broadcast turned ON until the wireless network is working. Then later disable the SSID broadcast within your router/access point software. You will no longer be “announcing” that you have a wireless network.

Rename the SSID. Don't simply use your personal or company’s name; it’s easier for a person or program to “guess”. To make this a harder value to “guess”, make this a very long (complex) value!

Pick a secure password for your router and/or access points. Most people already know the default username and passwords! :-) 

D-Link: Username = "admin", Password is blank
Linksys: Username is blank, Password = "admin"
Netgear: Username = "admin", Password = "password"


Turn-on the router and access points’ encryption. I don’t really care if it slows down your wireless network; this is for your protection! Besides maybe it’s time to upgrade to faster equipment anyways.

There are two standards of encryption - WEP & WPA: 

WEP: The older Wired Equivalent Privacy is the least secure method of the two. Although the 128bit key is stronger then the 64bit, they’re both still better than nothing. You set the WEP key manually – so please don’t pick a simple key like “11111111”, “10101010”  or “12345678”  

NOTE: There's even a fricken' screen saver program that will crack a 40bit (aka 64bit) encryption while your computer "rests"  


WPA: The other method is called WiFi Protected Access which uses a 256-bit key that constantly changes, so it’s a bit harder to hack – it’s also trickier to configure.


If possible, first select WAP, followed by 128WEP then lastly 64WEP -- in all cases, enable the best type of encryption you have available to you!

Turn-on the router or access point’s firewall – yes, I’ve seen this (mistakenly) turned-off!

Enable Media Access Control (MAC) Filtering. Media Access Control is a unique number assigned to every network hardware (your comptuers, router, network printer). This "MAC Address" number is usually printed directly on your wireless card or computer.

To determine your computer's MAC Address: 
Start --> Settings --> Control Panel --> Network Connections --> Double=click on Local Area Connection --> Click on the Support Tab --> Press the Details button to view your Phyiscal Address


MAC Filtering is simply a list of MAC Address typed into your router determining which computers are allowed to connect to your wireless network!

You should also lock-down the computers connected to your Wireless Network!
If possible, turn-off  or limit File & Print sharing.

Securely password protect your shared files.

Securely password protect your programs (i.e. Quicken, Outlook PST files)

Securely password protect all users – especially the Administrator account.

Turn-on the computer’s firewall as well.

Ensure that ALL SOFTWARE is up to date.
  Commented by  Nohar Singh Dhruv, Assistant Engineer, PMGSY    | 02 07 2011 06:56:07 +0000
Thanks for sharing this info sharad... I had already secured my wifi network.... 
  Commented by  Jaygopal Raghavan, Marketing Manager, Landmark Group    | 12 26 2010 15:57:41 +0000
A lot more simpler step would be to change in your log-in id and password especially if your Wifi connection is situated near public areas. But anyway which way, one has to be aware at all times because the hackers are always one step ahead of the security experts. Simple things like switching of your router when not in use and using different password / log-in id's could help mitigate the problem to an extent.
  Commented by  rakeshbhatnagar, GM Projects., wig brothers india pvt.ltd.    | 12 18 2010 15:57:53 +0000
THANKS SHARAD IT'S A USEFULL INFORMATION .
  Commented by  Rathin Deb, Resident Manager, Tower Infotech Ltd.    | 12 16 2010 14:13:41 +0000
Thanks Dr. Ali fro referral. An useful information.
  Commented by  Pooja Joshi, HW, HW    | 12 15 2010 06:10:27 +0000
Rating : +1 
Thanks for sharing Good information....Keep it up Sharad Ji..
  Commented by  Mohammad Bakhsh, Project Leader/Managing Consultant, Freelancer    | 12 15 2010 05:31:33 +0000
Thanks,Mr Sharad and Mr Natteraja for sharing a very critical information.i think with season of Hackers on rampage and pouncing on sites, breaching one's pass word is not so difficult task for them.
  Commented by  NATTERAJA R. ARIKRISHNAN, AREA SALES MANGER, UNIFLEX CABLES LTD    | 12 13 2010 17:03:48 +0000
Rating : +1 
Thanks Dr.Ali Ahmad for sharing the valuable information.
 
  Commented by  Murali Krishna Nakkella, Software Developer, Tripura technologies    | 12 13 2010 12:19:51 +0000
Rating : +1 
Thanks Sharad, great information..
  Commented by  Dr Ali Ahmad, Medical Superintendent/Director, Surbhi Hospital    | 12 13 2010 10:18:15 +0000
Thanks for sharing Mr Sharad.
  Commented by  Atul Kumar, Project Leader    | 12 13 2010 08:27:21 +0000
Rating : +1 
Good information. Thanks for sharing.
  Commented by  S. Muralidharan, Head, Project Planning/Strategy, Knowledge Foundation    | 12 13 2010 07:54:38 +0000
Rating : +1 
It reminds us of an idiom "stitch in time saves nine"!  Excellent and timely information.  Our Mother Earth is not safe - human beings are threatened from all sorts - beasts are safe in dense cover than mankind!
  Commented by  Rathin Deb, Resident Manager, Tower Infotech Ltd.    | 12 13 2010 07:50:25 +0000
Rating : +1 
Thanks Sharad for this useful information.
  Commented by  Badri N Srinivasan, Head - Quality, Valtech India Systems Pvt. Ltd.    | 12 13 2010 06:51:35 +0000
Rating : +1 
Very useful information, Sharad....!
Oh..Lots of useful information.. Good work Sharad.. keep it up !!
  Commented by  Manoj Kumar, Sr: Manager - QA, ARCHETYPE GROUP, INDIA    | 12 13 2010 05:59:57 +0000
Rating : +1 
Thanks Sharad for a good information. 
Add your comment on "7 steps to secure your WiFi"

Rate:
Submit
 
Viewers also viewed
Yes, passing the lokpal bill is an effective step vs No, much more will be required than the...
 
902 referals 46 arguments, 814 views
Please delete too step account vs Please delete too step account
 
0 referals 5 arguments, 275 views
in my view the aviation security,particularly airport security,should be funded from from the...
 
28 referals 4 comments, 31 views
more...  
Recent Knowledge (77)
India-Iran Drama Continues If Iran really was behind the February 13 attack  on an Israeli...
 
98 referals 4 comments, 72 views
Isn't it amazing, that Indian Government has miserably failed to handle a major issue like this,...
 
0 referals 2 comments, 153 views
No 1: India Since 1991, when economic liberalization unshackled India from the slow rate of...
 
202 referals 5 comments, 104 views
more...  
More From Author
I also support miss tine,
Well said, This is answer to the people who keep on shouting about reservation..
I am agree with you Ravali, Kalamadi is not the root of the scam.
more...