Wednesday, January 27, 2010

8 Tips for Improving Your WiFi Signal

If you've ever taken a look at the signal strength of the WiFi signal on a wireless device in your home or office, you probably noticed that the signal strength will vary even if the device is stationary. This is usually the result of Radio Frequency Interference (RFI), which will also cause slowdowns in transmission speeds.

There are lots of different sources of RFI, including:

  • Other wireless networks
  • Other radio devices, like cordless phones or cell phones
  • electrical equipment, including television sets, microwaves, radios, fan motors, or air conditioners

To get the best performance from your WiFi router, use these tips:

  1. Make sure you install the latest firmware on your router.
  2. Using the router's configuration tools, try different channels for your WiFi network, especially if there are other wi-fi networks in the neighborhood that are using the same channel as yours.
  3. Try putting your router in different rooms in your home or office.Place your router as high off the ground as possible.
  4. If you want your WiFi network to cover more than one floor, put the router on the uppermost floor.
  5. Leave a distance of at least 2 feet between the tips of the router antenna and the ceiling or walls. Also, some types of construction, such as metal studs or wire backed plaster lathe, may behave like giant antennas and also cause RFI issues.
  6. Place your router away from large metal objects, bodies of water (like fish tanks or bathrooms) or electrical equipment.

If none of these tips improve the performance of your network, you may also:

  • Attach a larger antenna to your router
  • Replace your router with a new model (be sure to keep the receipt, in case the new router doesn't improve things)

If you have any other tips or ideas about how to improve your router's performance, please post them here.

Thursday, January 21, 2010

How safe is that Wi-Fi hotspot?

If you are looking for a non-technical overview of the perils of using open WiFi hotspots, you can't do better than this local ABC affiliate's news clip.
Experts say there are dangers to web surfing in Wi-Fi hotspots because wireless technology has become fertile ground for hackers and thieves...hackers can use open networks to lift usernames and passwords even on sites that appear to block out password information.
The anchorman concludes with some good security tips at the end of the video, as well. Since it's not too technical, and the TV news can't seem to resist hyping up the fear factor, this isn't really a very comprehensive segment, but how much can you do in 4:36?

I think it's a good sign to see the MSM shining the light on some of the more common issues regarding WiFi security, especially considering how little the average user knows about the perils of open Wifi.

Tuesday, January 19, 2010

D-Link Wireless Router Vulnerabilities

On Jan 15th, D-Link reported that vulnerabilities had been found in its wireless routers, and it has updated its firmware. The vulnerabilities were in the implementation of the Home Network Administration Protocol (HNAP), which could allow an unauthorized person to change the router settings. If you have a DLink router that supports HNAP, you should check right away to see if there is updated firmware for it. The updated firmware can be found here. More details on the vulnerability can be found here.

Friday, July 31, 2009

Dark Days for the iPhone

Apple's new iPhone OS 3.0 has some great new features. You might think some, like cut & paste, should have been there a while ago, but whatever. Better late than never. But the new OS, and the new iPhone 3GS is vulnerable: Hacker Says iPhone 3GS Encryption Is ‘Useless’ for Businesses since Apple's implementation is so easily circumvented. Even worse, the iPhone's Vulnerable to SMS Hack:

...this could also be used to "infect" the iPhone with malicious code without any user intervention. This means, the user doesn't need to click on any malicious link to get his phone infected. In a worst case scenario, the infected iPhone would scourge the user's contacts list and send spam messages to everyone in the list, thereby infecting more phones in the process.

To Apple's credit, Apple Releases a Fix for the iPhone SMS Vulnerability today, within 24 hours of the original announcement of the exploit.

Too bad that at Black Hat, a Mac OS X Rootkit Debuts, as the Mac becomes a more tempting target for hackers as it gains more market share.

Wednesday, April 8, 2009

The GhostNet: cybersecurity = national security

Malware and cyber attacks are no longer the province of alienated hackers and international crime syndicates. National governments are using the same tools to spy on dissidents and rival nations. Recent research by the CitizenLab :: Version 4.0 has unmasked a far-reaching

suspected cyber espionage network of over 1,295 infected hosts in 103 countries. This finding comes at the close of a 10-month investigation of alleged Chinese cyber spying against Tibetan institutions that consisted of fieldwork, technical scouting, and laboratory analysis.

Using freely available Windows malware and some customized command and control software, the developers of GhostNet (who at the very least speak Chinese) have managed to penetrate an incredible number of sensitive governmental and political groups. Not surprisingly, China denies playing a role in 'GhostNet' cyberspy ring and of course, it is very difficult to prove the exact origin of these attacks. Listen to an interview with the researchers on the podcast Unmasking ‘GhostNet’ | WBUR and NPR - On Point with Tom Ashbrook.

Thursday, February 12, 2009

Free Anti-Virus Software

Although anti-virus programs won't protect you from many wireless network exploits, they will help detect malware after it's been installed, and are an important part of any security toolkit. Anti-virus programs are not perfect, however:
  • They don't detect all malware, and really only can detect viruses that have already been released in the wild. This means that you can still be infected even with an anti-virus program installed.
  • Many anti-virus programs add a huge amount of overhead to your system. Although there have been improvements recently, the Norton Anti-Virus suite was notorious for using tremendous amounts of system resources (processor cycles and RAM, mostly). Some benchmarks indicate that installing Norton cuts processor performance in half. This means that, if you have a 2 GHz CPU, installing Norton is like downgrading to a 1 GHz processor!
  • You must maintain your virus definitions regularly. Often, the update is a scheduled task that fires off when you boot up, slowing down performance and delaying the time until you can use your computer. Many people will cancel the updates out of frustration.
Having said all that, installing anti-virus software is a good idea for most Windows computers, and you should be able to scan files or your hard drives on a regular basis to be sure you haven't been infected. Here are some free programs that can do the job: In my Open Source & Linux Blog, I describe how you can Virus scan Windows using a Linux live CD using F-Prot.

Monday, September 29, 2008

Google's new Chrome browser is not secure

Google’s new open source browser, Chrome, made a big splash when it was introduced earlier this month: Meet Chrome, Google's shiny new browser - CNET News. Perhaps the bloom is off the rose now that we’ve had a chance to take a closer look at the security, or lack thereof, in the new browser: Early security issues tarnish Google's Chrome browser, note several publications, including PC World. Most alarmingly, Chrome is a security nightmare, indexes your bank accounts. Computerworld calls Chrome: Google's biggest threat to your privacy. Since the product is in beta, it’s too early to say that Chrome is a complete disaster, but it should certainly be avoided when you want to log in to your bank or any other site that requires a password that you like to protect. One of chrome’s most notable features is an impressive speed up in JavaScript performance. You can realize most of these benefits by using the The WebKit Open Source browser, which is based on the same HTML engine as Chrome: the Konqueror Web Browser from the K Desktop Environment, or KDE, project. Surf safe!