From: Randall <rvh40@xxxxxxxxxxxxx>
Date: May 19, 2005 7:06:07 AM PDT
To: Dewayne Hendricks <dewayne@xxxxxxxxxxxxx>
Subject: USG WiFi Nets "Wide Open"
<http://tinyurl.com/agn5z>
US government wi-fi networks wide open
Beware hackers on park benches report warns
By: Nick Farrell Wednesday 18 May 2005, 06:56
MANY US government networks could be hacked by a wi-fi user sitting
on a
park bench, according to a congressional report released by the
Government Accountability Office.
We are unsure why the park bench is such an important hacker tool, but
the report implies that too few government agencies can ensure that
their wireless networks are protected from unauthorised access.
The report said that the government was daft to set up "Wi-Fi"
networks
until they had figured out a way to secure them.
Apparently nine of the 24 major agencies haven't got any
wireless-security plans, while many others haven’t got proper
guidelines
in place.
The report says that 13 agencies don't require their Wi-Fi networks to
be set up in a secure manner, and most don't monitor their wireless
activity.
GAO investigators sat on park benches all around government facilities
and were able to pick up Wi-Fi signals from outside all of the six
agencies they tested.
One agency had 90 laptop computers configured to search for a wireless
connection while they were plugged in to a wireless network
easy way in for snoops and hackers.
The report did not specify which agencies were examined.
Wi-Fi allows office workers and home users to surf the Internet
from the
cafeteria or back yard.
But if they are not secured properly, eavesdroppers can monitor the
online activity of others, or impersonate an authorized user to gain
access.
The Office of Management and Budget should make sure that government
agencies use encryption, virtual private networks and other security
tools, the report said. Agencies should also monitor their systems for
improper use and make sure employees know how to use them properly,
the
GAO said.
_______________________________________________
Cuckoosnest mailing list