wifi

Yes, I admit it. I am an addict to myself. Or at least my blogs and sites linking to me. So when someone links to me, I usually get a notice (using Snarfer), and I usually take a look (unless I know the source to be one of the harvesting sites out there).

No change with that this morning, so I head out to the blogosphere enjoying the attention I get. Yes, I like attention. Had not noticed, had you?

And surely enough, a link back to my blog showed up. This time, the link comes from the Stepstone IT CEO Blog, which seems to be fairly new. Not only does Nauman Kuraishi link to my post on WIFI security in his first post - something I enjoy very much on its own.

He goes beyond. He mention my post in the same sentence as he links to Wired and BBC. And he says these sites offer some:


I am bewildered. I am honored. And I am very happy.

On a sidenote, this happens the same week as I am introduced as the Information Security GURU (!!!!!) at the Norwegian school of Management (BI). What a week!

The TJX case, one of the largest ID- and CC-theft cases so far, has finally gone to court.

The Feds rolled up a large, international circle of criminals who are charged for hacking their way to access a wide array of personal data. According to Attorney General Michael Mukasey, this is the single largest and most complex identity theft case that's ever been charged in the US.

Companies that got hacked include major brands like the OfficeMax, Barnes & Noble, Boston Market, Sports Authority, Forever 21, DSW, BJ's Wholesale Club and TJX Companies.

"They used sophisticated computer hacking techniques that would allow them to breach security systems and then install computer programs that gathered enormous quantities of personal financial data, which they then allegedly either sold to others or used themselves," Mukasey said. "They caused widespread losses by banks, retailers and customers."

The TJX Senior Vice President Sherry Lang ensures that TJX has gone a long way in order to assist the investigation:

"With our customers always being our primary focus, TJX has gone to great lengths to secure its customers' data," Lang said. "However, broader action beyond retailers alone is required to protect consumer data. Banks and the U.S. payment card industry must join retailers and work together, including installing the proven card security measures in the U.S. that are already in use throughout much of the rest of the world."

I like Lang's request - there is no doubt in my mind that the more we integrate and consolidate technology, solutions and tools - into what we consider efficient communication - the easier it is to exploit those tools. Remember - a few years back, you had to hack into each shop. A little later, you could reach the HQ, as the shops started to interconnect. Today, you can reach almost anything, anywhere - just using your brains and a computer.

Compliance is one thing that may help, better understanding of the technology and it's potential is equally important. From a business point of view, I think it is very important to consider the upside of adopting new (young) technology against the potential damage the new technology may inflict.

I am looking forward to following this case!

Other TJX related information

• TJX – you have done a great job!

• TJX gives CC advice to their customers!!!

• TJX update and "How it was done"
  

• TJX economics - the price it is easy to calculate
  

• TJX - the Wall Street Journal article
  

• All posts tagged: TJX

I enjoy the occasional fun of testing IT security devices and systems. Yes, I cannot hide that fact.

And as many of you know, I am always a bit surprised by the ignorance most people show when it comes to understanding even the most basic threats.

I came by this whitepaper made by a Mr. Antoniewicz, at Foundstone (part of McAfee). Most whitepapers tends to focus on how wonderful the manufacturers tools and solutions are, and quite frankly, I find most of the boring.

Not so this time.

Mr. Antoniewicz has authored a nice overview of some of the methods of hacking WIFI. He does not provide you a step-by-step how-to, but it is not far from it. Most of my readers may find it too technical - but I suggest you speed read it anyway - as it will help you realize just how vulnerable you are! 

Go on! Read it! 

To many of us, hacking WEP encryption is yesterdays news. However, to those not so technical out there, I would like to show you how easy and quick it is to hack a WEP-enabled wireless access point. 

Do not worry if you do not understand what is going on - just take notice of how quickly it is done, and how confident the hacker is. That is all you need to know and care about. 

And of course - I no longer need to beat this old dog, now, do I? You do realize it is time to review and audit your wireless security, right?

Thought so.