Security risks at Starbucks
How easy is it for another user's laptop to access my laptop's data if we are both connected to the same WLAN at a Starbucks hot spot?

    Requires Free Membership to View

    SearchMobileComputing.com members gain immediate and unlimited access to expert guides for mobile deployment, management and security, industry trends, and more-- all at no cost. Join me on SearchMobileComputing.com today!

    Kate Gerwig, Editorial Director

    By submitting your registration information to SearchMobileComputing.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchMobileComputing.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

The last time I paid for a temporary WLAN session at Starbuck's, they weren't utilizing WEP encryption. I've never tested it -- and don't recommend that you do -- but assuming WEP is not in place, it's possible that anyone could capture your data with the right tools. In fact, they even admit to insecure WLAN transmissions in their security statement at www.starbucks.com/retail/wireless_security_statement.asp. You can load up NetStumbler or even try the demo version of WildPacket's AiroPeek on any unprotected WLAN and see what I'm talking about. This is why it's so critical to use a VPN for any wireless traffic that you don't want to share with that mischievous guy at the next table who's otherwise trying look innocent by sipping on his cold and refreshing mocha frapuccino.

This was first published in April 2004