Wi-Fi Security Alert | Travel + Leisure

Wi-Fi Security Alert

Nigel Cox

Wireless networks have made it possible for travelers to leave the cables at home and stay connected, but hot spots aren’t always a boon. Here, five simple ways to protect your computer and your privacy.

From April 2007

By Wing Sze Tang

In the past two years, the number of Wi-Fi hot spots at hotels and resorts around the globe has jumped 120 percent, from 16,675 to 36,626, according to one estimate. But technology experts warn that these public-access points can be hazardous to your computer, and your privacy.

"People underestimate how insecure Wi-Fi really is," says Kevin McKenzie, founder and CEO of JiWire Inc., which maintains a global hot-spot directory at www.jiwire.com. Essentially, your e-mail messages are being broadcast like radio waves—and others can easily "eavesdrop." Hackers can spy on your activities and even steal passwords, files, and other valuable information. In an experiment reported in InfoWorld magazine, one computer expert was able to collect 118 passwords in a single overnight hotel stay.

Despite the risks, it’s still possible to log on safely by following these precautions.

1. Lock Up

Your first line of defense is your firewall. Turning it on takes just seconds, and it will slam the door on uninvited guests by filtering Wi-Fi messages. Many systems come with built-in firewalls (in Windows XP, check the Control Panel for your Security Center, and on a Mac, view your Sharing options under System Preferences). You can also buy and install more sophisticated versions, such as Norton Personal Firewall, for extra protection.

2. Disable File Sharing

If your system is set to share files, not only can other users see what’s on your laptop, but they can also tamper with information. "That’s the first thing a hacker is going to look for: ’Is there an open file that I can get to?’" explains McKenzie. To check your sharing status in Windows XP, right-click on your main folders (Documents and Settings, for example), view Properties, and look for the Sharing tab. Mac users can adjust options under System Preferences.

3. Speak in Code

Ask your office’s IT department if you have access to a virtual private network (VPN), or sign up for your own with services such as HotSpotVPN (www.hotspotvpn.com; from $9 a month) or JiWire’s Hotspot Helper (www.jiwire.com; $25 per year). VPN’s encode all your messages, so they’ll be indecipherable to any snoops (though they’re then decoded for the intended recipients).

4. Picking Your Networks Carefully

Make sure your computer isn’t set to automatically join any open network and that you know which ones you do log on to. "Too many times, people open their laptops, find a signal, and connect," says McKenzie. But they run the risk of connecting to a hot spot that’s not secure or, worse, to an "evil twin"—a hot spot that seems legitimate but is broadcast by a hacker for the purpose of attracting unsuspecting users.

5. Choose Secure Sites

If you’re making a purchase or e-mailing private information, make sure the site is secure. "Typically, this would be represented with a padlock in your browser or a URL that begins with ’https.’ Assume that on sites without the ’s’ after ’http,’ you put your information at risk," advises Christopher J. Rouland, chief technology officer at IBM Internet Security Systems.