PDA

View Full Version : How secure is a wireless internet connection?



GreyHippo
2006-07-25, 12:51 AM
I have a wireless router and I use TKIP encryption and a password with over 15 characters. Could someone be able to steal my username and password for my banking website?

pauljordan
2006-07-25, 01:03 AM
I'd have to say not by simply guessing. A determined hacker might be able to but, they'd really have to want to get to your money, and I mean REALLY.

That being said, any password can be hacked. If it's in an electronic format, it can be hacked. PGP while being extremely hard would be about the highest level I know of and it's 128 bit I believe.

The problem lies in the way your bank handles the passwords and user ID's. If it's like the recent problems with the VA, you can have any password you want, if the bad guys steal the computer, they'll get to your information.

My brother-in-law used to be a big security kinda techie and someone asked him "What's the best security you can have from someone trying to get into your system thru a modem?" He said "Pick up the phone and say 'Hello'. "

I'd say you're in pretty good shape. I don't care to have internet access to my bank accounts or credit cards but, if you feel secure enough, that's up to you.

Hey, what's your dogs name?? heheheh.. Just kidding..

Opie
2006-07-25, 02:11 AM
Spot.................

Railrose
2006-07-25, 02:29 AM
I have a wireless router and I use TKIP encryption and a password with over 15 characters. Could someone be able to steal my username and password for my banking website?
I've not had trouble with mine, other than if I turn off the system as I go out of town, someone pings the system & sends out junk mail with my name on it. Financially, I've had no problems with using it. From what I've been told, the wireless router works as an extra firewall. I now don't turn the system off for much of anything.

Hope this helps.

Wanderer
2006-07-25, 02:35 AM
I have a wireless router and I use TKIP encryption and a password with over 15 characters. Could someone be able to steal my username and password for my banking website?Hi there, this is a really great topic... I'm going to move it from the CWC forum to this one, as I believe it will be better served here. Thanks! :)

tc3dcad60731
2006-07-25, 03:35 AM
I have a wireless router and I use TKIP encryption and a password with over 15 characters. Could someone be able to steal my username and password for my banking website?

It sounds like you are all set there. However, this is what I generally tell my friends that are not so technically inclined.

1. Never use someone elses cpu for critical information access (work, hotel, etc)
2. Never use less than the full amount of characters allowed
3. Always make it Alphanumeric
4. Never make it something that anyone that knows you or knows of you can easily figure it out.

Case in point - I knew someone that prided himself on being very smart and belonged to a smart person org. His card was stolen to his main bank account and he had to change everything from his accounts, his wifes accounts, retirement accounts, ebay, etc. because they all shared the same password, identifier, etc. He was swiped of $,$$$'s of dollars in two days!

blads
2006-07-25, 06:22 AM
<snip>
3. Always make it Alphanumeric
<snip>Curious... over here for a highly secure network they recommend that you should make it NON-alphanumeric (ie no letters or numbers)

Glenn Pope
2006-07-25, 06:33 AM
I have a wireless router and I use TKIP encryption and a password with over 15 characters. Could someone be able to steal my username and password for my banking website?
You really don't have to worry about your wireless connection for accessing your bank website as long as the bank is using a good system. When you access their site you should see the little lock somewhere in your browser. Usually down in the bottom left or right corner. Also in the address you should see "https://" (note the "s" after the http). That means that your connection is encrypted all the way from your browser to the bank server. Even over your wireless connection. So even if someone gained access to your network and could see all your traffic, they wouldn't be able to see your bank info. All other sites you visit that are not encrypted they would be able to see.

Using TKIP, also know as WPA-PSK, is good as so far that hasn't been cracked. WEP, which is an older security method, as been cracked and can be done very easily. There is a higher version that is even better called WPA2-PSK or AES. This is a newer standard and my not be supported by your router or the wireless cards in your systems. TKIP combined with a good passkey will provide a very good measure of protection.

Others have posted good tips on how to come up with a passkey. One thing to add would be to make sure its not something that could be found in a dictionary. There are cracking software that will run through the whole list of words in just a matter of hours if not minutes. Adding numbers and uppercase and lowercase letters will make it nearly impossible to crack.

jaberwok
2006-07-25, 07:07 AM
Bear in mind that the vast majority of thefts from banking systems are from people working INSIDE the system.

paddymackey
2006-07-25, 11:54 AM
You could also get onto your bank and ask them what their policy is if someone steals your password for your internet banking and uses it to steal your money. If they will cover your losses I wouldn't worry about it.

tc3dcad60731
2006-07-25, 08:40 PM
Curious... over here for a highly secure network they recommend that you should make it NON-alphanumeric (ie no letters or numbers)

That is interesting Blads since number and letter combos have always been harder to crack!

Wanderer
2006-07-25, 08:46 PM
NON-alphanumeric (ie no letters or numbers)erm... you mean... just symbols? like '$(*@#&^'??? how's a person supposed to remember that!

robert.1.hall72202
2006-07-25, 08:50 PM
and to think there are people that do not even realize that it is beneficial to
turn on the encryption!

If you want free internet service, then come visit my neighborhood.
I can pick up at least 3, unprotected, wireless routers.

Railrose
2006-07-25, 09:05 PM
and to think there are people that do not even realize that it is beneficial to
turn on the encryption!

If you want free internet service, then come visit my neighborhood.
I can pick up at least 3, unprotected, wireless routers.
I did that at my MIL's house last week. Was nice to check e-mail while at her house.

Ogre
2006-07-25, 09:18 PM
and to think there are people that do not even realize that it is beneficial to
turn on the encryption!

If you want free internet service, then come visit my neighborhood.
I can pick up at least 3, unprotected, wireless routers.
Forgive me for being so naive, but how can someone not realize that the router has a firewall that needs to be activated???If they follow the instructions given, the firewall will be activated...Or if they are lazy and feel like paying someone a few hundred $ to come and install it, the installer should have it turned on...That is like being on the internet without a virus software...Even my grandma knows to ask questions about that and all she does online is check e-mail...She has this killer machine at home and all she does on it is check e-mail...And my grandpa runs CADKey on it...The one that cme on 3.5" floppies...3 Floppies...

Glenn Pope
2006-07-25, 09:53 PM
Forgive me for being so naive, but how can someone not realize that the router has a firewall that needs to be activated???If they follow the instructions given, the firewall will be activated...Or if they are lazy and feel like paying someone a few hundred $ to come and install it, the installer should have it turned on...That is like being on the internet without a virus software...Even my grandma knows to ask questions about that and all she does online is check e-mail...She has this killer machine at home and all she does on it is check e-mail...And my grandpa runs CADKey on it...The one that cme on 3.5" floppies...3 Floppies...
There are a few reasons why a wireless network might be open. If they are using an older wireless router chances are they just went thought the quick start guide that said nothing about turning encryption on. Now a days newer routers have a wizard you first go through when you first set it up, and that will run you through the encryption options. Some people my not want to deal with a passcode when they want to get on their network. Not thinking about any security concerns. There are fewer of them around but there use to be a lot. Some people just want to share. I know a few people that want to do this. Luckily they keep there computers behind firewalls. Then there are those ones that keep theirs open so you will use it. While you are on it, they try to access your system. Hopefully if you are going on an unknown network you have a good firewall on you computer.

robert.1.hall72202
2006-07-26, 12:51 PM
Forgive me for being so naive, but how can someone not realize that the router has a firewall that needs to be activated???


For all I know, maybe they leave the network open for house guests.
Everytime someone visits my house I have to hunt around for the acess code.
Non computer geeks might find this a pain.