Tuesday, January 6, 2009

Hack your neighbor's WiFi in 7 minutes

UPDATE 11 January 2009 16:58: Boy, howdy, is this popular with Google search strings. Anyone who came here via a Google for "hack your neighbor's wifi" should go read this. No joke.

Go ahead - I'll wait.

/UPDATE

Not you, of course. Like me, you should only use your Powers for good.

But this guy shows you how easy it is for someone to hack your Linksys, and set it up so that you can't use it any more. It's a better video demonstration, but embedding is disabled, so you'll have to click through. Or you can watch this guy:



Both these guys use Linksys as an example, but it really doesn't matter which brand wireless router you have: Netgear and D-Link will be the same.

So how do you keep this from happening to you? It's actually pretty easy.

Step 1: Change the router's password. Both of these demos start by assuming that the router is a Linksys, and then using the password that ships from the Linksys factory. If you change this password, then the Bad Guys have to guess the new password, and you've made things enormously more difficult for them. Just choose a good password. On a Linksys, you do this via the Administration menu.


Step 2: Turn on Wireless Encyption. Once again, both of the demos relied on open (unsecured) wifi networks. Unsecured networks let any Tom, Dick, and Harry* connect to your network. If these guys couldn't connect, they couldn't change the password. Don't use WEP, since it's teh broken; WPA, while not great, should be OK for just about anyone who doesn't live next to evil H4X0r d00dz. On the Linksys, this is done by going to the Wireless menu, and then selecting the Wireless Security sub-menu. You'll need to enter a 10-digit numeric password (encryption key). I blanked mine out, not that you'd try to break into the secure facility that is the Borepatch Compound.

That's it. The YouTube videos won't work on you now. Well done, you.

Oh, and the most important part? Write down the router password and encryption key. There's a way to reset the router to the factory settings, but that defeats the whole purpose. While I may lose my Security Cred for saying this, I like to tape this information to the router itself. Look, anyone with physical access to your house doesn't need to hack your wifi, so the risk is pretty hard to see.

* Or Borepatch. While I was traveling last week, I had problems connecting to the (properly encrypted) network at my in-law's house. You might think that the neighbors had unsecured wifi; I couldn't possibly comment.

26 comments:

Anonymous said...

There's an even simpler way to protect your router from wireless hackers and leeches: Just don't use wireless. I found the wireless on my router so unreliable, dropping and reconnecting every few minutes, that I just turned it off and now stick with cable connections.

Anonymous said...

I just use MAC address filtering. Only MY computers are allowed to connect to my network. Plus I changed the password and am using encryption. My network is secure.

Divemedic said...

In the state where I live, it is a FELONY to access anyone's WiFi. There was a case where a man in the parking lot of a restaurant that had free WiFi for customers was using their connection. The cops caught him, and the court ruled that since he was not a customer, he was guilty.

A felony. Keep that in mind.

Anonymous said...
This comment has been removed by a blog administrator.
NoAuth said...

a network is never secure

Anonymous said...

cat is an idiot. when you share a network, all unencrypted traffic can be sniffed and inspected. just because you're too cheap to pay for an internet connection doesn't give you the right to go poking around in the business of others (even if they are foolish enough to leave their wifi wide open).

Anonymous said...

An alternative. Turn off the SSID broadcast function. When neighbors search for a wifi source, yours will not appear. Only users who know the name of your network and manually log into it will have access.

Not perfect, but doesn't suffer speed delays of encrypted network.

Anonymous said...

great bro

Anonymous said...

This video blowd You are calling this hacking when all you do is to access a wife with no key password protectinet? Tou are jucking. The lemest hacker ever!

Divemedic said...

So I finally see the anonymous poster's comments about me.

Pointing out that the LAW (no me) says that accessing WiFi without permission is a felony makes me an asshole? I am not calling it a felony, the law is. and to tell the truth, it should be. It is stealing to use WiFi without permission. Someone is paying for internet access, and they get to control who uses it.

You are correct that many businesses (like coffee shops, etc) create a wi-fi hotspot, but they often restrict their network to certain terms of usage, including:

Restricting the time of day or the locations where the public internet may be accessed.
Limiting the amount of network bandwidth that may be used by an individual person.
Prohibiting inappropriate online activity, such as viewing or downloading illicit content.
Requiring the user to remain within a designated area within the business premises (i.e., you cannot sit in your car in the parking lot and use the wi-fi, even if the signal reaches you).
Some businesses require a person to patronize their business first before they can log on to the wi-fi network.

Violating these terms is theft. Some people claim that not encrypting your WiFi entitles them to use it, because it it your own fault for not locking it up. That is analogous to saying that a burglary victim is the one at fault for locking his door, or the rape victim is at fault for dressing provocatively.

Stop stealing, and buy your own internet service.

Borepatch said...

Divemedic, the reason I posted this is to help people lock their home systems down. Whether or not it should be a felony, using someone else's wifi is creepy.

Anonymous said...

Typically, it is not illegal to "borrow" someone's wifi. It IS illegal, however, to read through their transmissions or to spy on what they are doing. In my state at least, it's perfectly legal to guess someone's password and go to check your school email for a few minutes. Plus, most of the providing companies prepare for leechers of wifi. So unless you're a snoop, you're fine.

WiFihacker said...

yeah...to stealing wifi signals of neighbours is so simple, but it falls in category of crime, i also write a detail post on ways to how to protect your wifi signals. u can check it on my website.

Anonymous said...

Divemedic, I agree with you. you shouldn't go and steal someone's wifi. you are practically stealing their money. I agree with you no matter what someone posts ( I don't think a******ishness is even a word).

Anonymous said...

That was some funny stuff man!

Anonymous said...

keep calm and continue worshipping your government bro.

Unknown said...

Lol for reals dude

Anonymous said...

Most uptight american people never like to share anything! But the guy above talking about felonies on Wifi is probably an outcast of society! For example, If I left my pen which is full of ink on my desk one night, and my Proffesor used it without my permission for an emergency. The next day, I wont accuse my professor of a felony for borrowing it without my permission. If I want to be an outcast of society because I don't like anyone touching my stuff; next time I'll secured my pen in a locker so noone will touch it!!! It's that easy! Loosen up a little so you can open up more to the world!!! I'm sorry, for being a little harsh, but It's makes me angry to hear someone be so excluded from the rest. Your issue has nothing to do with stealing Wifi, but it's an issue you have with society.

Anonymous said...

For realz yo....my best friend off many yrs locked his shit and now he thinks he's secure, it till someone gets in..then I will have last laugh!!! BWHAHAHA!!!

Unknown said...

If the restaurant had it for free y was he guilty

Anonymous said...

Lol

Anonymous said...

I highly disbelieve that! Its a felony to hack into a LOCKED wifi connection but not free, if its free its free, I work at a place that has free wifi people will walk up to a bench outside and not even come inside to purchase anything and use the wifi, and cops walk right by them. You my friend are either a liar or a complete idiot.

Borepatch said...

xXhAck34xX, I'm not telling people to do this, I'm telling people how to keep people from doing it to them.

I hope you clicked through to read the Unix Koan. Srlsy.

ASM826 said...

If my neighbor puts a bright security light on his garage and I use the light from it to walk around in my yard at night, am I stealing the light from him?

If he doesn't want me to use it, he could put a shroud or reflector to leave me in the dark. If I trespass and remove the shroud, then I have damaged his property and have committed a crime.

If you don't put a proper password on your wi-fi, you're not leaving the door open, you're putting your belongings on the curb with a "take me!" sign on them.

Weetabix said...

Awl u uptight american white privilege old doods makes me laff.

Wen i see a doods using someone's wifi wen there not invited, i go sit on there lap and use there computer too. "Hey dood let me check my email since ur computer isnt locked up you must be ok im usin it." I take drinks of there red bull. I sit in there car with them. They never complain cuz peoples usin other peoples wifi when there not invited don't mind me usin all there stuff too. im in there fridge eatn there sandwiches cuz they didnt try hard enoug to keep me out.

my prez says just cuz you bought it dont mean its urs.

/sarc

Borepatch said...

Wheetabix, LOL