News location:

Canberra Today 15°/18° | Friday, March 29, 2024 | Digital Edition | Crossword & Sudoku

Griffiths / Danger lurks when the WiFi runs free

THERE’S good news and bad this week.

John Griffiths
John Griffiths.
The bad news is you probably need to get a VPN provider. And that’s going to be $10 a month from here until the end of time.

The reason for this is that public WiFi networks are sprouting like topsy with Chief Minister Katy Gallagher launching the first nodes in Civic last week.

It does everything your mobile data plan already does, only now the ratepayers are footing the bill to take business away from the telcos.

That and it’s monumentally insecure. Every other machine on a public WiFi network can see all the unencrypted traffic sent on it (and can, if so motivated, have a red hot crack at the encryption for good measure).

If you’ve got an app on your phone that is sending data back to the server unencrypted and the password you use is reused somewhere else (and who doesn’t reuse passwords to try and keep track of them?) you’re in big trouble.

How do you tell if your app is encrypting your data? You can’t tell.

In your phone or tablet’s web-browser you can look for an address of https rather than http, or a closed padlock icon, but for your apps (pretty much all of them) that also access the internet, and phone home periodically, it’s a mystery.

Even worse, if your phone automatically checks for WiFi networks (and I know mine does) then even without consciously logging on to these free networks there are hacking devices that can poll your phone for networks it’s been on recently (like your home WiFi) and then pretend to be that network. Your phone connects, sends the hacker the key to your home network, and then starts spewing data thinking it’s safe and at your quarters.

If you’re thinking this couldn’t happen to you bear in mind on October 21 the Minister for Justice had this to say:

“In 2011-12 more Australians reported being a victim of identity crime than victims of robbery, motor vehicle theft, household break-ins or assault.

“New figures in a Commonwealth Government report released today show that each year between 750,000 to 900,000 people fall victim to identity crime resulting in financial loss.”

You could tell your phone to not automatically connect to known networks (but who has time for that?) or you can shell out for the Virtual Private Network (VPN).

This puts all your network traffic, regardless of the app, in an encrypted tunnel to the country of your choice where a server belonging to your VPN provider conducts your business on the internet as if it were you.

Not only are your traffic and passwords secure (except your home WiFi key, that’s blown and waiting for a van with a high-gain antenna to park outside your house on the street to snoop in), but you’re no longer broadcasting your location to the internet via the frequently mapped topographies of wireless routers.

Android phones, for example, use in their navigation products the network addresses Google’s StreetView cars have discovered and associated with GPS data.

It will cost money (annoyingly) but there is an upside.

With a VPN you’ll be able to get access to Netflix in the US to watch “Game of Thrones” rather than getting gouged by Rupert Murdoch, and your metadata will be safe(r) from government snooping.

Until now I haven’t bothered. But I think now is the time we can’t afford to wait.

TorrentFreak (who have some considerable skin in the game) have a review of VPN providers at this address:

torrentfreak.com/which-vpn-services-take-your-anonymity-seriously-2014-edition-140315/

Who can be trusted?

In a world of spin and confusion, there’s never been a more important time to support independent journalism in Canberra.

If you trust our work online and want to enforce the power of independent voices, I invite you to make a small contribution.

Every dollar of support is invested back into our journalism to help keep citynews.com.au strong and free.

Become a supporter

Thank you,

Ian Meikle, editor

Share this

6 Responses to Griffiths / Danger lurks when the WiFi runs free

Alex Satrapa says: 4 November 2014 at 2:55 pm

Also note that you can run VPN software on your home computer, and many consumer NAS devices (Synology, QNAP, etc) provide VPN applications too.

So you can choose to spend $100 a year with a provider who specialises in VPN services, or about the same money* keeping your home network up and running 24/7 to provide a VPN endpoint which will secure your Public WiFi traffic.

* 60W consumption for ADSL modem, router and NAS, with electricity costing around $0.18/kWh.

Reply
John Griffiths says: 4 November 2014 at 3:30 pm

That won’t get you netflix though, or secure your devices on your home network (which is increasingly a point of vulnerability).

Reply
Alex Satrapa says: 4 November 2014 at 3:39 pm

It will provide you access to your documents all the time, without having to trust your financial and legal matters to Dropbox, Apple, or other servers outside of your control.

So pick which approach you want: access to your personal documents at all times (so you can open them up on your tablet or laptop when paying a bill, for example), or working around region-blocking by having a VPN end-point in a country that has the service you want.

I would shy away from a VPN provider hosted in the USA since they have already shown their willingness to raid data centres without warrant or explanation, they’ll tap networks without warrants, and they go so far as to build submarines whose sole purpose is to interfere with other countries’ optical fibre networks inside national waters.

We’re past the days of quelling concern by telling ourselves we’re not worth spying on. These days the spooks are after all the data they can get, so they can invent new crimes to charge you with. They are convinced that they can analyse email, web browsing and game playing habits and from that determine whether or not you are likely to commit a crime in the future.

Maybe I’m a tin-foil-hat wearing conspiracy theorist. But you have to consider that the USA has USS Johnny Carter, the Snowden documents agree with me, and I’m not actually wearing a tin foil hat.

Reply

Leave a Reply

Follow us on Instagram @canberracitynews