As a follow-up to Kevin’s previous article on Wi-Fi Protected Setup (WPS) Vulnerability, I wanted to quickly provide an update as to how you can protect yourself and, if you just want someone to take care of it for you, that’s what our business is all about, and we’re here for you, of course (you may call us or request a call/service on-line).

Kevin’s article pointed out that disabling WPS is essential. However, it appears that in most cases that either there is no ability to turn it off, or the switch has no effect (in Linksys, for example). So if you want to secure yourself, here is a guideline of what you may be able to do to mitigate the problem:

• Locate the make and model of your wireless access point or router (whichever device provides your wireless services) and jot it down.
• Locate your router or wireless access point in this list of devices and review the status of vulnerability and vendor patch
• If you find yourself vulnerable and are able to successfully turn it off, that’s the best-case scenario.
• If you find yourself not having an option to turn off WPS, but you want to protect your network from potential intruder access, you have two options:
1. Turn off your router or access point (and therefore have no wireless usage at all)
2. Replace your router with a non-vulnerable unit

Apple Airport not vulnerable

Although Apple is so far been strangely silent on this, our own testing and that of others shows that WPS pin-based is only on if the light is Blue, which in turn is turned on using the Airport Utility. This is good security by design and is the reason why our recommendation for home and SOHO routers/access points should be replaced with Apple Airport devices. This recommendation is limited to areas that are typically served by one or two access points and do not require enterprise management functions.

Meraki not vulnerable

Nerds On Site has been a proud partner of Meraki, wireless network equipment provider of choice for SME and Corporate clients that require a little more than a SOHO wireless infrastructure. Fortunately Meraki products do not have WPS functions at all and therefore are not vulnerable to this WPS concern.

Why do I care if someone intrudes on my network?

I actually personally met a successful business person this week (let’s call him Bill) who admittedly didn’t care if his network was breached, until I pointed out the dangers (and I’m sure there are more):

• His network and Internet access could be used by a criminal to carry out criminal activities while Bill will carry responsibility as his Internet connection was used
• Casual sniffing of his activities online can be captured and in a short while enough data can be gathered to steal his identity or anyone’s identity using his network
• Any equipment that hosts data of any sort is much more vulnerable to attacks “from the inside” when your network is widely accessible

How have you secured your wireless network? Any other comments/questions?

Is not everyone together this Christmas? Do you have broadband at both locations? One of these three ways of video-chatting may just bring you a little closer these holidays.

1. Skype. Skype is available for free and requires you to download a program and install it on your computer that is equipped with a webcam. Skype has a distinct advantage over the other two options listed here as it allows for a video conference to include up to four (4) people. There is a free trial for multi-user video and mobile phone version of skype work with audio only. However, you can video-skype one-on-one from an iPhone4 or later or many Android smartphones as well. Skype works on Wifi and 3G.

• FaceTime. FaceTime works only on Apple devices calling other Apple devices. iPhone to iPod Touch, Apple computer to iPad2, iPad2 to iPhone4, etc. The setup is not the most intuitive, but once you’ve navigated through that process, it really is the best video conference experience from person to person. FaceTime works on WiFi only (not 3G).

• Facebook video calling. Facebook is probably the easiest way to get started if you have never video-called before. Even though the Skype engine is used behind the scenes, the setup and installation is much simpler. So, if you and the person you want to call are both on Facebook and you’re both available on computers, it’s probably your best choice. Facebook video calling is not available on smartphone apps.

Update: BONUS method: Arthur’s comment below is absolutely right – we should have included this one as well: Google+Hangout. The only “excuse” I have, Arthur, is that perhaps it is more of a nerdy tool than that of our clients.

Whether you’ve used video calling for years or about to enjoy this technology for the first time, the Nerds wish you the best experience technology can offer, especially where it can bring family and friends closer together.

We are thrilled to be working with the folks over at London LAWN (@londonlawn) to bring free WiFi to downtown London, Ontario. Local businesses are working together to make downtown London a WiFi enabled area, and here is an article from their perspective.

Here is a page showing real-time usage of the London LAWN WiFi network. In the past week along, 544 clients transferred 68.14 GB!

“Launched in September  2011, LAWN (The London Area Wireless Network) currently covers three blocks of Dundas Street, from Talbot to Wellington Streets,” mentions the article. “It is an open and publicly accessible WiFi network that provides free access to the core’s growing population of smartphone, tablet, and laptop users. Whether you work, live, or shop in the city’s core, or just welcome an extra incentive to make the downtown experience better, LAWN is providing a viable and valuable service.”

We helped with a similar project in Lethbridge, Alberta.

If this sounds like something your city or town would be interested in, please let us know!

Chester’s hockey rink (and Curling Club), which is located in Chester, Nova Scotia, now has free wireless internet access as part of an advertising deal for a 3 year term.

Our Nova Scotia team has installed the proper equipment, and will support and maintain the Meraki wireless network with repeaters in exchange for 3 Years of sponsorship of the local Junior C hockey team, and get prominent display on the “splash page” of the guest wireless network.

The “splash page” will be seen by every user of the free Wifi (no password) BEFORE they can start using the internet. If you are using a Smartphone, you will need to load your web browser to view the splash page before any apps will be allowed to access the internet. This is not unlike many other free WiFi networks.

Those wishing to use the free wireless network can log on to the “Rink WiFi by Nerds On Site” network.

Nerds On Site spend the weekend (July 8-10) the Vancouver Island MusicFest! We sponsored the event and provided FREE wireless internet to those in attendance! We had over 821 devices connected overall, transferring over 60 GB of data. In addition, there were 8,500 attendees this year walking past 2 Nerdmobiles parked at the entrance. So, plenty of people saw us! While there, Tim and Dian also worked with CKUA radio and gave them a better connection then they usually have when broadcasting remotely in their home city.

VIMF is a quintessential “west coast fest” featuring roots and world music performers from across Canada and around the globe! It’s 3 days and 6 stages FULL of music, interactive workshops, roving performers, funky crafts and delicious food, on site camping, major eco-initiatives, participatory art projects and more….

The event is held each July on the banks of the Tsolum River in the beautiful Comox Valley on Vancouver Island, Vancouver Island MusicFest welcomes over 1000 volunteers and over 7000 audience members for a magical celebration of music and culture!

Please check out http://www.facebook.com/vimusicfest for more of updates and information, and please “like” it to show your support!

Dian Smit just sent this to us from The Big Time Out event in Cumberland, B.C., Canada. More information on the event can be be found here.

Nerds On Site and Shaw Cable are providing free Wireless internet to attendees at the event! If you’re there, email us at socialmedia@nerdsonsite.com, comment on our Facebook fan page, or send us a tweet (@nerdsonsite)!

This article is the first in a four-part series about safe computing on public networks.

This first article lists some basic precautions you can take. Parts two and three are about using SSL and VPNs to secure your communications, and part four will list some computer settings that you should change when using public networks.

When using a laptop on an insecure network, such as a public hot spot or a hotel network, others may be able to eavesdrop on your communications, especially when you connect wirelessly. You need to take some precautions to guard against attacks such as “shoulder surfing”, wireless “traffic sniffing”, and rogue access points.

Here are some basic precautions:

1) First and foremost, don’t use public networks for secure communications if you can avoid it. Do you really need to do your banking, trade stocks, or check your credit card balances from a public network? If you really do, you should use a VPN to connect to a secure network and access the internet from there.

2) Don’t store ANY sensitive data on your laptop that does not ABSOLUTELY need to be there. Instead, store it on a computer that is more secure and protected at home or at the office and access it through a VPN. Think about it – most of the sensitive data that is on laptops does not need to be there!

3) If you do not need to connect wirelessly to access the internet, TURN THE WIRELESS OFF. Almost all laptops have an easy way to do this – know how to do it on your laptop.

4) Pay attention to your physical surroundings, your position, and who is (or could be) watching. Don’t overlook the low-tech approach to stealing passwords – shoulder-surfing. A small concealed camera with a zoom lens can record keystrokes just as efficiently as a key-logger. Position yourself so that others do not have a clear view of your keyboard or screen. Use your body to shield the keyboard from view in public areas.
Dennis H – August 19, 2008