Tech Powered Computers

WarDriving with Jarko

I contemplated whether or not I should write this article. The following is based on the premise that knowledge is power and ignorance cannot protect you from those with misguided knowledge or power. My intention is not to stir up trouble. I didn't invent the problem, knowledge is the solution; the following info is found spread across the web. Your data and personal information are at risk. So, Here comes the scary stuff.

Yes, 'Jarko' an alias. He is a multitalented hobbyist that enjoys technology and has taken a liking to WarDriving. With a different set of values and motivation, he could easily create a lot of problems for businesses and individuals. WarDriving Defined - The act of driving around in your car with a laptop, scanning for secure and unsecured wireless access points and routers. If you scan and find a connection, a subsequent connection is trivial.

Where there is a lock, there is a key; where there is a key, there is a pick. There is no such thing as unpickable lock or uncrackable safe, especially in the consumer world. 'Jarko' says, "...that with the right tools, patience and research, any wireless access point can be accessed. Why spend time cracking a network to check your email when you can just use an unprotected network." When asked how many connections are available in Glendora, Jarko said, "...rough estimate... there are about 2000 places in Glendora to access the internet wirelessly... about 50% are not encrypted. Colleges, hospitals, hotels, residential areas, office districts, banks, the Pomona Fairplex, McDonalds, car dealerships, Starbucks.... high density areas like apartment complexes. While driving on Route 66 from Glendora Ave. to Citrus Ave, I found about 250 devices, 100 access points... 50 were not secure. This was while driving at 30 mph."

The Hardware: Just about any wireless card will work but the ones build into laptops are relatively weak. The best bet is to purchase an Orinoco card with a external antenna; most utilities are written with the Orinoco card in mind. Jarko said, "Proximity plays a big role in signal strength... an external antenna helps eliminate signal scattering off your car and can extend the range considerably."

The software: The software is free and readily available. NetStumbler for Windows, MacStumbler for Macintosh, and Kismet for Linux; the list goes on. (I don’t want to give you ALL the good info, think google.)

Jarko said, "Once connected, use a sniffer to get all kinds of interesting data" Sniffer defined - A 'Sniffer' is a readily available software program that easily reads plain text data that travels on wireless or wired connections. Email, text messages and passwords are transmitted unencrypted over most networks and are displayed on screen or saved to memory/storage. From experience, I can say, that it's actually really simple stuff.

'Warchalking' is the practice of making marks, usually in chalk, on or buildings or trees, with symbols identifying that let wardrivers know if a network is open, secure or the passwords are easily crackable. The term is based on depression era hobos that would make marks in front of a building or home that was hospitable or inhospitable to drifters.

As a side note, if you are on a wireless network, or don't have a firewall, you might want to have a password set for every account on your computer... yes, they are inconvenient when you reboot, but, Jarko's evil counterpart can easily get into your system. This is trivial if you share folders. Think KaZaa (File Sharing Program), which sets up shared accounts for you. Seriously, you are sharing data on a P2P network like Kazaa and have a wireless connection... your files are our files, or their files... much faster than actually using the P2P network. If you share your c: drive... we own your computer. It’s simple to print to your printer from a wireless laptop outside of your house, I know a few people with wireless connections that print on their neighbors computer.

Remember, if a hacker / cracker uses your internet connection, the furthest the connection can be traced to is to YOU... the only identifying info on a clean computer connected to your network is the MAC (An almost unique number assigned to your network device) address of the wireless card. If your wireless router is not plugged in, nobody can access it. You are responsible for maintaining your connection. The hardware only does what it's programmed to do. It is, usually by default, unsecure.

Here's a rich one for you: WASHINGTON (CNN) -- Although charged with making the nation more secure, the Department of Homeland Security has not taken the steps needed to secure its own wireless communications, according to a report from the department's Inspector General. - From Jeanne Meserve CNN Washington Bureau - Thursday, July 1, 2004 Posted: 7:47 AM EDT (1147 GMT)

"Use a laptop with a small screen to save battery life... the internal cards are crumby... use an Orinoco... There's something about War Driving... it' just... Fun... I was in front of a friend’s house sending text messages to him on his own connection and telling him what he was wearing... he was creeped out. When he asked how I knew, I drove down the street and told him." -Jarko

Prevention: Use Good passwords. Don’t leave important files in shared folders. Use WEP (Wired Equivalent Privacy.) If you go on vacation or not using your wireless connection, unplug. Check your wireless device manufactures website to see if there are updates that can be applied to your devices of software. Change your password about 1 time per month.

Please don’t be a wireless weasel… let your neighbors know if they have an open connection, hope that they or Jarko will let you know if yours is open too. (Computer Karma is in effect.)

Garret Baquet is the resident geek and promoter of digital security at Tech-Powered Computers, Glendora. 200 N. Glendora Ave. Ste. B 626-650-0130 garretbaquet@yahoo.com

Your OS and You

Windows XP – Quick Tips

Free up some disk space, run a bit quicker: Disable system restore