October 12, 2010

Running Win XP? Beware “Free Public Wi-Fi.”

Part of Wright's job is to hack into a company's wireless network in order to expose vulnerabilities. When he sees Free Public WiFi, he says, "we break out the champagne."

Dave McClure

I’ve written so often about the dangers of Wi-Fi I’m starting to bore even myself.

But the fact remains that any accountant who uses public Wi-Fi sources in airports, hotels, coffee shops or other venues should be tarred and feathered, if not de-certified.  If that seems harsh, take a gander at this information from National Public Radio in its report on “Free Public Wi-Fi.”

Author Travis Larchuck chronicles the story of wireless security consultant Joshua Wright, who discovered a curious phenomenon in an airport one day.  When he fired up his laptop and went searching for a Wi-Fi connection, an option popped up for “Free Public Wi-Fi.”  Only it turns out, this is not an Internet connection.  Exploiting a fault in the Windows XP operating system, this is an ad-hoc network that gives another computer access to your drives.  Click on “Free Public Access,” and in the time it takes you to figure out that you are not connecting to the Internet, a hacker can download most of your document files.  Including personal files, your Outlook PST file, your client files…well, you get the drift.

Microsoft has patched the fault, but there are still a lot of accountants running Windows XP on their laptops who have not applied the patch.  Larchuck sums it up this way:

No one knows for sure where Free Public WiFi began. One theory, Wright says, is that someone may have set it up as a joke. It might have been created to trick a friend into connecting “so he would get a Web page with some kind of a gross image or childish prank.”

Unintentionally creating or connecting to the ad hoc network isn’t inherently harmful, despite its virus-like spread. It does, however, provide an access point for hackers to come in and check out the user’s files.

Part of Wright’s job is to hack into a company’s wireless network in order to expose vulnerabilities. When he sees Free Public WiFi, he says, “we break out the champagne.  Because I know at that point I will be able to get unlimited access to internal resources just from that one starting point.”

The solution is simple.  Stop using any form of public Wi-Fi.  Period.  Use a cellular connection, or a wired ethernet solution, for any accounting work you do on the road.  Or risk the loss of your firm’s data and that of your clients.

Sigh!

Thanks for reading CPA Practice Advisor!

Subscribe for free to get personalized daily content, newsletters, continuing education, podcasts, whitepapers and more…

Leave a Reply

mcclure_10268610

Dave McClure

Contributing Writer/Columnist

Dave McClure is a U.S. Air Force veteran who flew a B-52 bomber during the Cold War, then became an Air Force Information Officer to hone his skills as a writer, editor and communications manager. He has since been a consultant in business and technology for more than three decades, with degrees in applied science and Organizational Development, with an MBA in Executive Management. He has consulted with companies ranging from Microsoft to General Electric, and has held positions as an accounting software marketing director, media editor, network engineer and professional beta tester for computer hardware and software . His career includes eight years with the NASA Space Shuttle program for BFGoodrich, more than 20 years writing for business and accounting publications, and his tenure as founder and president of the US Internet Industry Association. He is a global expert on IT, Internet and management issues, and currently serves as the co-chair of the International Internet Industry Alliance.