Slashdot Mirror
Some 12% of Consumers 'Borrow' Unsecured Wi-Fi
alphadogg writes "Despite the fact that it's often considered an illegal act, a sizeable percentage of the UK/US internet-using population 'borrows' unsecured Wi-Fi access. This is according to a study conducted by the group Accenture. 'The Accenture study found that computer users are still engaging in some unsafe computing practices. Nearly half of all respondents said that they used the same password for all of their online accounts, and only a quarter of them have ever encrypted files on their computers.'" My guess is the actual figure is higher than that.
This just in:
People on the internet 'steal' stuff they should pay for.
A learning experience is one of those things that say, 'You know that thing you just did? Don't do that.' - D. Adams
I am trying to connect to "Free Public Internet" but its not letting me.
Do I need a password?
liqbase
Had a lady bring her laptop into our computer repair shop. "I can't get the Internet any more."
.. that it was a godz-given fact that, anywhere she went, she'd have internet access.
.. more explanations.
After extensive questioning (using very small words), I determined:
Her expensive laptop worked fine.
Her TCP/IP settings, web browser, etc. all worked just fine.
The wireless components and setup worked just fine.
What was NOT working fine was her neighbor's wireless access point. Apparently that fine fellow had either turned it off, lost his own internet connection, encrypted his WAP, or whatever.
She never knew she was using his connection, connecting to his WAP. She thought that, since the stick-on on her laptop said it had wireless and could reach the internet
"But it works on campus."
Sigh
Half an hour of my life, gone. And I don't even want to think about the brain damage.
When you set up your wireless network you can choose whether to allow open access or not. If the network's owner has specified that anyone can use it, why is it bad to do so? I have my wireless router at home set up for open access and it does me no harm if others use it for occasional web browsing. The only flaw is that many routers don't have a way to prioritize or cap usage so that my work isn't slowed down by other people's Bittorrenting.
Yes, it's sent unencrypted - just like network traffic over those old-fashioned things called wires. We all know to use https and ssh for secure connections anyway.
-- Ed Avis ed@membled.com
This is a pretty inane study- there is a huge difference between occasionally looking for an open wireless when away from home to browse and using a neighbor's open wireless as your main pipe. And the comments about identity theft are ridiculous, as most sensible people adjust their browsing/net use when using unknown networks to reflect their uncertainty in its security.
It's psychosomatic. You need a lobotomy. I'll get a saw.
Where exactly is this "considered an illegal act"?
How the hell do you "consider" something to be illegal? It either is, or isn't.
How the hell is 12% a "sizeable percentage"?
Someone's really trying hard to make an article out of nothing.
sic transit gloria mundi
I have a Speedstream 6-series-something (6200?) router, and it has this problem where if you disable the wireless, you have to do a hard reset to enable it again. Long story short I was running an open wireless network for a while, and there was never less than two leechers on the network, in a well-spaced neighborhood full of old people in a third world country. I'd hate to see what would happen to an open wireless network in a crowded metropolis.
Other interesting fact: Me and a friend were wardriving with just a regular laptop, no special antennae, speeding down the highway, and we picked up a LOT of networks, often with a good signal. Some of these were in places with no buildings in sight. When I get a working laptop again I plan to implement a setup that leeches off open networks as I drive (mainly for a Google Earth-based navigation system, anything sensitive will either have to be encrypted or left out), and I have no doubt it will work nicely.
"When information is power, privacy is freedom" - Jah-Wren Ryel
"Nearly half of all respondents said that they used the same password for all of their online accounts..." I have statistical evidence (sample size of a little over 5000) that proves that says that the percentage is MUCH higher...more like 80-85%. We talk all the time about privacy, net security, identity theft, etc., but this something that is VERY often overlooked. There are many LAMP projects out there (mostly put together by high schoolers or ambitious university freshmen) that collect an email and a password for their own user authentication and then don't encrypt their users' passwords in database. Dishonest 15 year-old admin + one select query on his own database and then approx 80% of the time you have access to the users' email account. From there, the sky's the limit. Online banking, university login accounts, etc. Troubling to say the least. We need a LOT more education of stupid kids that don't know how to encrypt passwords safely in their DB. Furthermore, we need to remember good old fashion ethics in this stuff.
It always seemed odd to me that this was illegal, when in reality you are asking for and getting permission. That is, as everyone here would know, your laptop (for example) has to ask the wireless router for permission to connect. The router then grants permission and allocates an IP, all within its normal operating process (i.e., no trickery or hacking involved). It is not a passive process, like, say, entering an unlocked home, in which the house is passively exploited.
I came across an unsecured network with strong signal a while ago. Turned out to be someone across the street. They had 4 Windows systems attached, with C: drives shared, unprotected. I also found a shared printer on their network.
I warned them by printing a page on that shared printer, identifying myself and describing the problem. Next day the access point was secure..
To Terminate, or not to Terminate, that's the question - SCSIROB
I'm guilty of using the same password on a lot things online. Several forums, throwaway email addresses, "register to read the rest of this article" news sites, etc. Basically, the stuff I don't really care about, and I don't give two hoots if it gets h4x0r3d.
I don't particularly see that as an "unsafe" practice, since none of it really matters.
Things I actually care about (personal email, anything work related, etc) get real passwords, and things that can really cause problems (banking, etc) don't get done via the internet at all.
Living in an apartment, I was actually surprised with the opposite. It appears that there are 20 or so wireless networks with good signal strength in range, and I am in a corner of the building. However, there is not a single network that isn't using some form of encryption. I don't know if this is typical, but all the supposed luddites living in this building (a combination of college/university age couples and 50+ year old singles) have obviously figured their wireless routers out.
The other premise upon which people base a lot of paranoia regarding network and personal computer security is the assumption that they possess something worth stealing. There are many effective credit card fraud methods in use that don't require any sort of computer exploitation, but rather involve "social engineering." What other information does the average person have on his PC that is of value? Of course I would be disturbed if somebody managed to obtain my entire photograph library, but that is of so little value to somebody else, I doubt very much that any significant effort would be put towards obtaining it.
Comment removed based on user account deletion
Nearly half of all respondents said that they used the same password for all of their online accounts
Like newspaper registrations? Rather than bother with bugmenot, I just register using bogus data. My password is 111111. Because I really don't give a shit about a newspaper registration. It has nothing whatever to do with security. The Chicago Tribune has no CC#s, SS#s or any other real, personally identifiable information about me; I don't even know why they bother.
Yet this is somehow deemed a "Security risk." And I don't send encrypted data; if it's sensitive information I'll send it snail mail.
mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
...in the area.
I set my parents house up with secured wifi 3 years ago... Last year my parents got a new laptop, and went about using wifi. 6 months pass. They get a new printer... I tell them that they can print from their laptop, over the network, and try to talk my dad through setting it up... After much confusion, I realize they are not on the wifi network that I set up for them, but one of their neigbhors...
My parents are smart, they just didn't grow up using computers, and don't think about the kind of things that most slashdot users think about... typical boomers... I bet 12% (or more) of laptop users steal wifi, without even knowing it...
"I'll have a Guinness, no wait, make that a Coors Light" -Grad student I work with, who shall remain anonymous...
And when the government subpoenas me because someone on my account was browsing child porn sites?
And when the RIAA files suit against me for 'making available' copyrighted material (off of your laptop, of course)?
But if those moral blinders are working for you, hey... who am I to disagree?
- Despite popular opinion, I am not perfect.