Simple Rogue WiFi Hotspot Captures High Profile Data

jones_supa writes Gustav Nipe, president of Sweden's Pirate Party's youth wing, was successful with somewhat trivial social engineering experiment in the area of the Sälen security conference. He set up a WiFi hotspot named "Öppen Gäst" ("Open Guest") without any kind of encryption. What do you know, a large amount of unsuspecting high profile guests associate with the network. Nipe says he was able to track which sites people visited as well as the emails and text messages of around 100 delegates, including politicians and journalists as well as security experts. He says that he won't be revealing which sites were visited by specific experts, as the point was just to draw attention to the issue of rogue network monitoring. The stunt has already sparked criticism in Swedish newspapers and on social media, with some angry comments saying that Nipe breached Sweden's Personal Data Act.

Comments

You want to protect your data?

[ArcadeMan]

If you want to protect your data, don't connect to an open WiFi hotspot.

Also, shame on the so-called "security experts" who used it.

Re:You want to protect your data?

[Cramer]

Are you 100% certain the cnn.com you think you asked for a page is actually cnn.com and not some i'm-gonna-fill-your-browser-full-of-malware spoof?

Re:You want to protect your data?

[TheRaven64]

I wonder how many people would actually notice if they got SSL errors for Google addresses and how many would just click 'accept' and move on.

Re:You want to protect your data?

[retroworks]

Agree with this AC.

What I'm more concerned about and don't know the answer to are the Smart Phone apps which may check for their own "updates" while I'm on a sinister wifi hotspot. Will a "Bank of App" program open an auto update query in the background, and disclose any details I don't intend it to? I never "save passwords" and rarely enter them in unknown wireless environments.

The Swedish guy probably did a public service, but the alarms seem aimed at people who don't know the risks. "Never use wifi, and never read CNN online" hyperbole just fatigues people and causes people to treat it as an acceptable risk rather than something they can cope with through caution. The "what if its a fake CNN site" question is a totally separate problem which could occur on a verified hotspot, or wired account... And so what if it's a fake CNN site? They get my lowest concern throwaway password, as I have no money at CNN. I too always am careful which sites I go to on public wifi hotspots.

Hackers Obey the Law!!

[muphin]

i like the quote:

with some angry comments saying that Nipe breached Sweden's Personal Data Act

like hackers really care about obeying laws?

Re:Hackers Obey the Law!!

[bunratty]

Most people who go to prison don't particularly care about obeying laws. That attitude doesn't seem to result in much leniency from the courts.