LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-14-2008, 08:05 PM   #1
halfpower
Member
 
Registered: Jul 2005
Distribution: Slackware
Posts: 241

Rep: Reputation: 31
Roommates use unencrypted wireless network


Let's say your roommates use an unencrypted wireless network. Is there any decent way to have secure internet? Is it practical for a novice to create an encrypted tunnle to a server 500 miles away, and then use that server as a sort of proxy? Would you just get new roommates instead?

Last edited by halfpower; 05-14-2008 at 08:06 PM. Reason: add roommate joke
 
Old 05-14-2008, 08:31 PM   #2
pljvaldez
LQ Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Wheezy (x86)
Posts: 6,094

Rep: Reputation: 281Reputation: 281Reputation: 281
You can try using Tor. It's not really encrypted, but has some anonymity to it.

It might be better to convince them to setup encryption. It's not that difficult, even for novices.
 
Old 05-14-2008, 08:45 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by pljvaldez View Post
It's not really encrypted
Could you elaborate the "not really encrypted" part please?
 
Old 05-14-2008, 10:14 PM   #4
networkr
LQ Newbie
 
Registered: Dec 2003
Location: Alpharetta, GA
Distribution: Debian
Posts: 12

Rep: Reputation: 1
Use a VPN for a secure internal network

I recommend you set up a VPN, something like OpenVPN or FreeSWAN and give the users the option to connect to the VPN in order to communicate securely both within the local network while also being able to access the internet.

The roomies could use this website to set up the freeswan client on a windows computer:
http://vpn.ebootis.de/

or not, they could just go insecure while you always connect to the VPN so your connection within your local network is secure. This is a very useful strategy to employ when contractors are brought into your corporate network, they can get out, but can't connect to anything on the inside network unless they connect to VPN.

networkr

three cups of Ubuntu
 
Old 05-15-2008, 12:48 AM   #5
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Using Tor for cases like this would be asking for trouble IMHO. Not only because it's the wrong tool for the job, but because it would slow you down to a crawl and would also leave you vulnerable to all sorts of attacks by rogue exit nodes when you aren't using HTTPS websites. Keep in mind I'm talking about an always-on solution. Using Tor once in a while to stop your room-mates from snooping on you at certain times is fine as long as you take precautions (to protect yourself against evil exit nodes). Using Tor all the time would be fine too, but only if you exclusively used HTTPS sites and didn't care about your performance taking a hit.

All traffic within the Tor network is encrypted, but that only gets as far as the exit node (from there on you're on your own). This is a key characteristic of Tor which many people seem to not understand and consequently they end-up using Tor for something it wasn't designed for (it wasn't designed to provide security, only anonymity - two totally different things). Remember that dude that obtained those hundreds and hundreds of government passwords and stuff a while back? He used Tor for that. He set up rouge exit nodes with password sniffers on them, and essentially exploited the government employees' notion that Tor was magically providing them with end-to-end encryption or whatever.

I second networkr's suggestion to set up a VPN for yourself. You've got all kinds of options (both from a software and a hardware perspective) so you are sure to find one that suits your needs/tastes. For example, depending on what kind of wireless router you have, you might be able to VPN right into it, without needing to set up a dedicated VPN box. And BTW, the VPN server wouldn't have to be 500 miles away, it could be in the same house as long as it is not in any danger of being physically compromised by your room-mates, and as long as you are only concerned about them snooping on you via radio and not via copper/fiber.

As a side note, some consumer-grade wireless routers can be made to provide more than one SSID. If yours is one of those, you can have an open wireless network for your room-mates, and a WPA2-protected one exclusively for you without having to buy another router.

Last edited by win32sux; 05-15-2008 at 01:03 PM.
 
Old 05-15-2008, 01:51 PM   #6
686plus
Member
 
Registered: Nov 2004
Location: Portland, Oregon
Distribution: Ubuntu
Posts: 114

Rep: Reputation: 17
Do you want to secure all traffic for you and your roommates? Or do you just need it for yourself? The best/first solution would be to just secure the wireless.

If you just want to secure your web traffic (http), you could tunnel that using ssh. But, of course, you would need a server to ssh into. If they, for some reason, refuse to secure the wireless, you could just host the server at your location. You can then ssh into it for wireless, and have the traffic leave by wire (not encrypted, just like most of your traffic).

I use that because I already mess around with a server I built, and that was already available to me. The most secure solution is VPN.

You wouldn't happen to be "borrowing" some bandwidth from your roommates (or them from the neighbors)? Hence the reason for off-site VPN/solution. If so, your traffic would be encrypted but the endpoint would still be known, therefore traceable. So just in case, that would not be recommended (because it is wrong, #1, and you could get caught, #2).
 
Old 05-15-2008, 07:38 PM   #7
jiml8
Senior Member
 
Registered: Sep 2003
Posts: 3,171

Rep: Reputation: 116Reputation: 116
Even if your roommates won't go with a secure connection, you can still set up a secure subnet on the house connection. While this won't prevent your traffic in and out from being snooped on by anybody who is piggybacking off of the house router, it will prevent any bad guys from cracking your machine using the insecure way in, and it will secure YOUR wireless traffic, even if your roommates is not secure.

The simplest way to do this is to just get another router, make sure it is set for a different address range than the house router, and plug it into the house router like it was a computer. Then plug your computer into your router (or set up a secure wireless connection to your router), and voila! you have subnetted. You then secure your subnet to suit you.

Last edited by jiml8; 05-15-2008 at 07:40 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
encrypted wireless on unencrypted network fisheromen1031 Linux - Wireless Networking 7 09-03-2008 11:09 PM
Getting no dhcpoffer from unencrypted network room101 Linux - Wireless Networking 5 02-18-2008 01:16 PM
Wireless network keeps disconnecting on Intel(R) Pro/wireless 2200bg network card gregh Linux - Wireless Networking 1 09-16-2006 06:57 PM
unencrypted transmissions youneedaclue Linux - Networking 1 06-27-2004 04:36 PM
network Unencrypted huno Linux - General 1 02-12-2003 07:13 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration