USG WiFi Nets "Wide Open"

[David Farber <dave () farber net>]

Begin forwarded message:

From: Dewayne Hendricks <dewayne () warpspeed com>
Date: May 19, 2005 8:51:31 PM EDT
To: Dewayne-Net Technology List <dewayne-net () warpspeed com>
Subject: [Dewayne-Net] USG WiFi Nets "Wide Open"
Reply-To: dewayne () warpspeed com


[Note:  This item comes from reader Randall.  DLH]


> From: Randall <rvh40 () insightbb com>
> Date: May 19, 2005 7:06:07 AM PDT
> To: Dewayne Hendricks <dewayne () warpspeed com>
> Subject: USG WiFi Nets "Wide Open"
>
>
> <http://tinyurl.com/agn5z>
>
> US government wi-fi networks wide open
>
> Beware hackers on park benches report warns
>
>
> By: Nick Farrell Wednesday 18 May 2005, 06:56
>
> MANY US government networks could be hacked by a wi-fi user sitting  
> on a
> park bench, according to a congressional report released by the
> Government Accountability Office.
>
> We are unsure why the park bench is such an important hacker tool, but
> the report implies that too few government agencies can ensure that
> their wireless networks are protected from unauthorised access.
>
> The report said that the government was daft to set up "Wi-Fi"  
> networks
> until they had figured out a way to secure them.
>
> Apparently nine of the 24 major agencies haven't got any
> wireless-security plans, while many others haven’t got proper  
> guidelines
> in place.
>
> The report says that 13 agencies don't require their Wi-Fi networks to
> be set up in a secure manner, and most don't monitor their wireless
> activity.
>
> GAO investigators sat on park benches all around government facilities
> and were able to pick up Wi-Fi signals from outside all of the six
> agencies they tested.
>
> One agency had 90 laptop computers configured to search for a wireless
> connection while they were plugged in to a wireless network
> easy way in for snoops and hackers.
>
> The report did not specify which agencies were examined.
>
> Wi-Fi allows office workers and home users to surf the Internet  
> from the
> cafeteria or back yard.
>
> But if they are not secured properly, eavesdroppers can monitor the
> online activity of others, or impersonate an authorized user to gain
> access.
>
> The Office of Management and Budget should make sure that government
> agencies use encryption, virtual private networks and other security
> tools, the report said. Agencies should also monitor their systems for
> improper use and make sure employees know how to use them properly,  
> the
> GAO said.
>
>
> _______________________________________________
> Cuckoosnest mailing list

Weblog at: <http://weblog.warpspeed.com>



-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/