Wifi hotspot security

[Flcruiser2]

My son is the internet security person for a major fortune 500 company, we just had a conversation about how vulnerable public wifi networks are. He talked about "packet sniffers" (open source software that records network traffic) and about how a part of his job has him looking at worst case scenarios regarding internet security.  Bottom line, any public wifi system is vulnerable to a dedicated identity theft hacker no matter how good your firewall is. His suggestion was to use an air card or tethered cell phone for any financial transactions because verizson's or att's security would be less vulnerable to hackers.
I'm no expert at this, just passing on a recommendation I got from my son

[kkro]

My son is the internet security person for a major fortune 500 company, we just had a conversation about how vulnerable public wifi networks are. He talked about "packet sniffers" (open source software that records network traffic) and about how a part of his job has him looking at worst case scenarios regarding internet security.  Bottom line, any public wifi system is vulnerable to a dedicated identity theft hacker no matter how good your firewall is. His suggestion was to use an air card or tethered cell phone for any financial transactions because verizson's or att's security would be less vulnerable to hackers.
I'm no expert at this, just passing on a recommendation I got from my son

I don't doubt what your son says. A good recommendation.

[southpaws]

Thanks for the recommendation. We have that decision to make by the end of May when Donna retires and we go to the part-timers class.

Craig

[Mallo]

Or if  you have a VPN network you can access that will encrypt everything leaving your system as it crosses the public net use that.

Mallo

[Jeff Collingwood]

What is VPN?
...Jeff....

Or if  you have a VPN network you can access that will encrypt everything leaving your system as it crosses the public net use that.

Mallo

[Mrseas]

What is VPN?
...Jeff....

Or if  you have a VPN network you can access that will encrypt everything leaving your system as it crosses the public net use that.

Mallo

A VPN is a "Virtual Private Network"....it is a security enhanced "pathway" using a public network.  Here is a pretty good article giving you a better
description.....VPN.

Scott

[Jeff Collingwood]

My head started hurting ready that stuff.  I take it that it is only for the big boys.
...Jeff....

[kkro]

My head started hurting ready that stuff.  I take it that it is only for the big boys.
...Jeff....

We used a VPN for accessing our company from outside using a public system. It was set up so that only pre-authorized computers with a security code, plus the user entering another rolling security code that changed each minute, could access the system. We weren't allowed to use our personal home computer to access the company's network.

[HHDreamer]

What is VPN?
...Jeff....

jeff, you have been with me when I VPN into work to work on the servers...  Rich's son gives excellent advice...   

Wes

[HaroldG]

So, I shouldn't configure my VPN on my VZAccess Manager? Or should I?
Harold

[Mallo]

So, I shouldn't configure my VPN on my VZAccess Manager? Or should I?
Harold

I do use my VPN over VZAccess depending on what I am accessing.

As for VPN being only for big boys not so much there are so called SOHO (Small office / Home office) setups out there that can provide more security but it will be more expensive then running a single laptop you hook up to wifi to do email.

I had at one time two VPN setups one for one job and one for my mothers tax office.  

All a VPN means is an encrypted connection to another computer creating a private network.  

Mallo

[HHDreamer]

Generally with big business, VPN is between an external desktop and a network appliance such as a VPN Concentrator and a Radius server on the back end for authentication...  Some do desktop to server, using a network appliance is more secure...  The idea with security is to remember that it can be virtually impossible to keep a hacker from breaking into a network...  This is why you have to create multiple hurdles or layers to increase the difficulty and the time to break in, hence increasing the ability to be detected...   

The importance that Rich's son is pointing out is to be aware of your environment and never take anything for granted... 

Wes

[HaroldG]

Thanks Mallo & Wes for the info. For me and my one computer, guess I don't need VPN.
Harold

[Mallo]

Thanks Mallo & Wes for the info. For me and my one computer, guess I don't need VPN.
Harold

For a single system your correct.  I tend to be on the over kill side when it comes to wifi up too not using it at all and using the aircard instead if I'm in an area with a lot of collage students.

Mallo

[HHDreamer]

For a single system your correct.  I tend to be on the over kill side when it comes to wifi up too not using it at all and using the aircard instead if I'm in an area with a lot of collage students.

Mallo

Especially in the area of MIT!!!      They actually have posters all over campus about "Ethical Hacking"!!!   

Wes

[kkro]

For a single system your correct.  I tend to be on the over kill side when it comes to wifi up too not using it at all and using the aircard instead if I'm in an area with a lot of collage students.

Mallo

Especially in the area of MIT!!!      They actually have posters all over campus about "Ethical Hacking"!!!   

Wes

Isn't that an oxymoron?  It's like saying, "if you're going to cheat, cheat fair." 

[Mallo]

For a single system your correct.  I tend to be on the over kill side when it comes to wifi up too not using it at all and using the aircard instead if I'm in an area with a lot of collage students.

Mallo

Especially in the area of MIT!!!      They actually have posters all over campus about "Ethical Hacking"!!!   

Wes

Isn't that an oxymoron?  It's like saying, "if you're going to cheat, cheat fair." 

One of the ways to get a good job in Information technology security (Say that three times fast) is to do "Ethical Hacking" where you breach one or more companies security document how it was done and how to prevent it (The key) and "sell" the solution to the here to for unknown problem to the company or companies involved.

True story I worked with a man who served time for "mail fraud" the actual crime many hackers go to jail for who was hired in part because of his time in prison.  The thinking being set a crook to catch a crook.  Now once the statue of limitations for this and that and his probation ended I did lose track of him.

Mallo