"mimi" <(E-Mail Removed)> hath wroth:
>After I attached a USB wirless adaptor on my 2nd desktop kept in the
>hall way - the modem and rotuter is in a room not far with the door
>opened - and tested wirless internet connection, I was automatically
>connected to my neighor's network which has no encryption even though
>the signal level is a little bit lower than mine.
>
>Q1: Is that because that network has no encryption?
No. It's because your neighbors wireless router has encryption
disabled.
>Q2: Let's say, my visiting relative doesn't know about all this and
>when vsiiting me with her/his got a laptop (that has wirless card) and
>tried to get online, if the same were to happen, i.e the laptop gets
>internet connection via my neighbor's network instead of mine, what are
>the secuirty compromise on my relative's laptop sinee my beighbors
>network has no proetection? As long as my the laptop doesn't have file
>sharing capabilty enabled, the laptop is safe, right?
As long as the Windoze Firewall, or other software firewall is
properly configured, your relatives are safe. Having print and file
sharing enabled is a potential problem. Worms look for open shares
and will drop files named "dir.com" or "setup.com" into the open share
directories. They can't be run by the remote attacker, but your
relatives can be tricked into running them by accident. I suggest
disabling write permission on open shares. If your "My Documents"
directory is shared (as it is by default in XP), then all the juicy
incriminating evidence that most people save in "My Documents" can be
downloaded by the neighbor for use as later blackmail and such.
Downloaded bank and credit card statements are also lots of fun to
read.
Turning off the file sharing exception in the Windoze Firewall is good
enough to block any incoming attempts at sharing. Turning off Windoze
file sharing is a bit extreme and un-necessary. Setting share
permissions to read-only is marginal. Setting a password on a shared
directory is good. Encrypting files will also help, but again might
be overkill.
--
Jeff Liebermann
(E-Mail Removed)
150 Felker St #D
http://www.LearnByDestroying.com
Santa Cruz CA 95060
http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558