Extended WiFi range creates security risks

(06/06/2008)

A growing number of gadgets are now appearing on the market to offer WiFi users extended range when picking up "free" WiFi signals.

"These devices, which can be obtained for under 20.00 pounds or so, can easily extend the effective range of a WiFi access point or router up to two or three hundred yards. This means that companies that think their WiFi access point is limited to their company building, need to think again," said David Hobson, GSS' managing director.

According to Hobson, many companies do not secure their in-building WiFi access point or change their administrator password, because they think the range of the facility is limited to a few tens of feet within their offices.

"A couple of years ago, this may have been the case, but with an extended range antenna, often fashioned out of a used Pringles crisps tin, hackers can easily access company WiFi facilities a block or more away," he said.

"And if they know the router's default admin password, they can intercept traffic to their own infected dummy page - Google is a classic example - by changing the router's DNS lookups, and bingo! You have infected PCs under hacker control with the company. This can get nasty," he added.

Hobson's comments come after HD Communications has released a sub-200 pound 802.11g WiFi router with a claimed line-of-sight range of up to five miles - with a non-line-of-sight version due shortly.

"802.11g is rapidly becoming the mainstay of many WiFi networks, and company kit often supports the newer, if unratified, 802.11n technology, which extends ranges considerably," he said. Companies that have installed WiFi networks in their offices now need to re-examine the range of their systems and always used encryption passwords on their connections, even for guests in the building. And they should change their router admin passwords as well," he added.

Ideally, companies offering guest access to WiFi in their offices should install a second WiFi router, only connected to the public Internet, and not to any company resources. That way, they can ensure the security of their own company WiFi network, which still requires regular monitoring, updates and password changes.

Related topics:  Mobile and Wireless Security   Security management and policies 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources