Here we go. Another example of keeping Information Security reactive instead of proactive.
An excerpt from the article: -
ET reported earlier this week that the government is examining the possibility of issuing new norms which will unsecured WiFi connections illegal. Sources also said the new norms may put the onus of educating consumers on telcos and ISPs. Besides, the ISPs will also be asked to ensure that customers access the internet over a WiFi connection only through a password. WiFi networking companies may also be asked to limit WiFi signal right down to a defined radius by installing access points around the signal. The department of telecom and the department of information technology will work with the home ministry and intelligence agencies on this issue. Sources said the Computer Emergency Response Team (CERTC-in) is also helping the government issue new norms on WiFi security. It is not clear if these agencies will await the recommendations of TRAI.
Now, either the guy who wrote the article has got it all wrong, or TRAI’s understanding of wi-fi networks is incorrect. Can someone please answer these questions for me?
How much more secure from terrorists are access points really going to be, even after you ’secure’ them? What stops a person from legitimately accessing a ’secure’ wi-fi network at say, a coffee shop, sending out something inappropriate using that network, and then slinking away quietly? How different would it then be from whats happening currently? What would then be the point of making open wi-fi networks illegal?
Another excerpt: -
“Internet service providers are taking steps on their own to secure WiFi connections. All ISPs are installing AAA servers and firewalls. But, if you look at the terror mails, they were sent from hacked or open WiFi accounts – there is nothing we can do about this. When people take a broadband connection and routers to make their homes and offices WiFi enabled and then leave it open when they are not in use, there is nothing ISPs can do about it,”
Of course there is nothing ISPs can do about it. No one can stop an individual from terminating his wi-fi connection at a router, instead of his computer. Can someone please explain to me how does using someone else’s open wi-fi network classify as hacking? We’ve got this term completely wrong. If that indeed is hacking, then I hack wi-fi networks every single day!
To conclude, we’re curing the symptom, not the disease. Its just not practically possible to figure out how many open wi-fi networks exist in the country, even if a MASSIVE wardriving operation was organized.
Maybe its just me, but then all they would prevent even if they achieved ‘complete wi-fi security’ is just someone from sending an email that they’re responsible for a blast. Now, who’d stop the blast itself from happening?
Oh and btw, my wi-fi network is WPA2 secured, thank you very much.