Wi-Fi Security

[GREGORY]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Does anyone know what is stopping another user of a wi-fi hotspot accessing
files stored in the shared documents folder of a laptop?

I know that encrypted connections prevent a user from snatching the data on
the way to the access point, but shared folders are shared aren't they? If a
laptop was on MSHOME for example, and another user had the same default
workgroup name, wouldn't they be able to access the shared documents?

I have chosen a different workgroup name for my home network, but would like
to know if another wi-fi hotspot user would be able to find that workgroup
name and access the shared documents folder.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Changing the workgroup wouldn't slow anyone down. Whether wireless or
wired - just browse to Microsoft Windows Network and then all workgroups pop
up.

When using a public wifi hotspot, ensure that the firewall allows no
exceptions (particularly file and print sharing). If file and print sharing
isn't set up, other computers won't have access.
Shared documents only share documents to all users of that one computer.
They wouldn't be available to other computers on a wired or wireless
network.

Then, you should be OK.
"Gregory" <Gregory@discussions.microsoft.com> wrote in message
news:44B4EE18-BEC6-4A9B-A9F8-424683C41D5D@microsoft.com...
> Does anyone know what is stopping another user of a wi-fi hotspot
> accessing
> files stored in the shared documents folder of a laptop?
>
> I know that encrypted connections prevent a user from snatching the data
> on
> the way to the access point, but shared folders are shared aren't they? If
> a
> laptop was on MSHOME for example, and another user had the same default
> workgroup name, wouldn't they be able to access the shared documents?
>
> I have chosen a different workgroup name for my home network, but would
> like
> to know if another wi-fi hotspot user would be able to find that workgroup
> name and access the shared documents folder.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Gregory <Gregory@discussions.microsoft.com> wrote:

> Does anyone know what is stopping another user of a wi-fi hotspot
> accessing files stored in the shared documents folder of a laptop?

Nothing at all: you are wide open.

A wi-fi hotspot is a shared network medium: even though the wi-fi may be
encrypted, all users of the hotspot are using the same key, and can
communicate with each other as readily as they would if they were on the
same wired network.

You should therefore, before joining a public network such as a wi-fi
hotspot:
a. disable all File and Printer Sharing (and aany other network services
your PC might be offering);
b. configure a firewall to exclude all incoming traffic (e.g. "don't allow
exceptions" in Windows Firewall.

--
Robin Walker
rdhw@cam.ac.uk

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Especially the option to allow F&PS on the Local Subnet.. This must
be disabled on untrusted networks...
---
Jeffrey Randow (Windows Networking MVP)
jeffreyr-support@remotenetworktechnology.com

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows Network Technology Community -
http://www.microsoft.com/windowsserver2003/community/centers/networking/default.mspx
Windows Home Networking Community -
http://www.microsoft.com/windowsxp/expertzone/communities/wireless.mspx

On Thu, 2 Dec 2004 23:50:36 -0500, "Alan White"
<alanwhite@hotmail.com> wrote:

>Changing the workgroup wouldn't slow anyone down. Whether wireless or
>wired - just browse to Microsoft Windows Network and then all workgroups pop
>up.
>
>When using a public wifi hotspot, ensure that the firewall allows no
>exceptions (particularly file and print sharing). If file and print sharing
>isn't set up, other computers won't have access.
>Shared documents only share documents to all users of that one computer.
>They wouldn't be available to other computers on a wired or wireless
>network.
>
>Then, you should be OK.
>"Gregory" <Gregory@discussions.microsoft.com> wrote in message
>news:44B4EE18-BEC6-4A9B-A9F8-424683C41D5D@microsoft.com...
>> Does anyone know what is stopping another user of a wi-fi hotspot
>> accessing
>> files stored in the shared documents folder of a laptop?
>>
>> I know that encrypted connections prevent a user from snatching the data
>> on
>> the way to the access point, but shared folders are shared aren't they? If
>> a
>> laptop was on MSHOME for example, and another user had the same default
>> workgroup name, wouldn't they be able to access the shared documents?
>>
>> I have chosen a different workgroup name for my home network, but would
>> like
>> to know if another wi-fi hotspot user would be able to find that workgroup
>> name and access the shared documents folder.
>

 

[GREGORY]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Thanks for the info.

I thought as much. I think it is attrocious that so much is said about the
security risks associated with unsecured (unencrypted) wireless hotspots in
terms of data being intercepted to/from the access point and nothing (I
haven't read anything anyway - hence the question) is said about the need to
secure folders across the actual network.

"Robin Walker" wrote:

> Gregory <Gregory@discussions.microsoft.com> wrote:
>
> > Does anyone know what is stopping another user of a wi-fi hotspot
> > accessing files stored in the shared documents folder of a laptop?
>
> Nothing at all: you are wide open.
>
> A wi-fi hotspot is a shared network medium: even though the wi-fi may be
> encrypted, all users of the hotspot are using the same key, and can
> communicate with each other as readily as they would if they were on the
> same wired network.
>
> You should therefore, before joining a public network such as a wi-fi
> hotspot:
> a. disable all File and Printer Sharing (and aany other network services
> your PC might be offering);
> b. configure a firewall to exclude all incoming traffic (e.g. "don't allow
> exceptions" in Windows Firewall.
>
> --
> Robin Walker
> rdhw@cam.ac.uk
>
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

To expand on the discussion, F & P only needs to be disabled on the
appropriate wireless configuration. For example, I have it active for
the wireless connection in my home, but no where else.

Jeffrey Randow (MVP) wrote:

> Especially the option to allow F&PS on the Local Subnet.. This must
> be disabled on untrusted networks...
> ---
> Jeffrey Randow (Windows Networking MVP)
> jeffreyr-support@remotenetworktechnology.com
>
> Please post all responses to the newsgroups for the benefit
> of all USENET users. Messages sent via email may or may not
> be answered depending on time availability....
>
> Remote Networking Technology Support Site -
> http://www.remotenetworktechnology.com
> Windows Network Technology Community -
> http://www.microsoft.com/windowsserver2003/community/centers/networking/default.mspx
> Windows Home Networking Community -
> http://www.microsoft.com/windowsxp/expertzone/communities/wireless.mspx
>
> On Thu, 2 Dec 2004 23:50:36 -0500, "Alan White"
> <alanwhite@hotmail.com> wrote:
>
>
>>Changing the workgroup wouldn't slow anyone down. Whether wireless or
>>wired - just browse to Microsoft Windows Network and then all workgroups pop
>>up.
>>
>>When using a public wifi hotspot, ensure that the firewall allows no
>>exceptions (particularly file and print sharing). If file and print sharing
>>isn't set up, other computers won't have access.
>>Shared documents only share documents to all users of that one computer.
>>They wouldn't be available to other computers on a wired or wireless
>>network.
>>
>>Then, you should be OK.
>>"Gregory" <Gregory@discussions.microsoft.com> wrote in message
>>news:44B4EE18-BEC6-4A9B-A9F8-424683C41D5D@microsoft.com...
>>
>>>Does anyone know what is stopping another user of a wi-fi hotspot
>>>accessing
>>>files stored in the shared documents folder of a laptop?
>>>
>>>I know that encrypted connections prevent a user from snatching the data
>>>on
>>>the way to the access point, but shared folders are shared aren't they? If
>>>a
>>>laptop was on MSHOME for example, and another user had the same default
>>>workgroup name, wouldn't they be able to access the shared documents?
>>>
>>>I have chosen a different workgroup name for my home network, but would
>>>like
>>>to know if another wi-fi hotspot user would be able to find that workgroup
>>>name and access the shared documents folder.
>>
>