- OpenWiFi: Open Source FPGA and SDR Based WiFi Implementation
- Is It Safe to Use an Open Wireless Network?
- In This Article
- What Is Open Wi-Fi?
- The Risks of Using Unsecured Wi-Fi Networks
- How Easy Is It to Hack a Wireless Network?
- Is It Legal to Use Someone Else’s Open Wireless Network?
- How to Safely Use Public Wi-Fi
- How to Use Open WiFi Hotspots Securely
- Problem With Open WiFi Hotspots
- How to Know a Network is Not Encrypted
- Always Use Http s
- Use Different Passwords
- Mobile Network is Safer Than Open WiFi Network
- Use VPN
OpenWiFi: Open Source FPGA and SDR Based WiFi Implementation
OpenWiFi is a Linux mac80211 compatible full-stack IEEE802.11/Wi-Fi design based on an FPGA and SDR (Software Defined Radio). It aims to be the first full open source implementation of the entire WiFi stack. While the current design does not provide any feature benefits over commercial closed source chips, it is beneficial from an education standpoint, and also from a security view as any open source FPGA code can be verified to not have backdoors. The SDRs used in the project are typically not ones seen on this blog as they mostly exist on research dev boards optimized for the 2.4 GHz band.
Recently the FOSDEM 2020 conference talks from February 2020 have been released on YouTube and a talk titled Opensource «Wi-Fi chip design» and Linux drivers by Xianjun Jiao was uploaded. The talk explains OpenWiFi in detail, and why or why not you might want to use it.
Individuals, SMEs, opensource communities and big companies have shown big interests on the openwifi project. They also asked many questions, such as MIMO support, CSI information support, roadmap and opensource license consideration. One new interesting message, which is not expected before, is that: People are willing to pay more for a WiFi chip not because the chip’s performance is better but just because they can check the chip silicon source code (Verilog/VHDL/C) on github if they have privacy/security concern. So far, not any commercial WiFi chip discloses their silicon source code. After the FOSDEM, the project has reached 545 stars on github.
Is It Safe to Use an Open Wireless Network?
Former Lifewire writer Melanie Uy has 5+ years’ experience writing about consumer-oriented technology and is an expert telecommuter.
Jonathan Fisher is a CompTIA certified technologist with more than 6 years’ experience writing for publications like TechNorms and Help Desk Geek.
In This Article
If your wireless service is down and you need an internet connection, you may be tempted to connect to any open, unsecured wireless network your wireless access point finds. Before you connect, however, you should know the risks of using open Wi-Fi networks.
What Is Open Wi-Fi?
It’s not safe to connect to an unknown open wireless network, particularly when transferring sensitive data, such as an online banking password. All information sent over an unsecured wireless network—one that doesn’t require a Wi-Fi Protected Access (WPA), WPA2 or WPA3 security code—is sent in plain text for anyone to intercept.
Connecting to an open network potentially opens your device to anyone else on that same wireless network.
The Risks of Using Unsecured Wi-Fi Networks
When signing in to a website or using an application that sends data in clear text over a network, anyone so inclined can capture that information. Your email address and password, for example, if not transferred securely, are all a malicious hacker needs to access your email account and any confidential or personal information in it without your knowledge. Similarly, hackers can capture any instant messaging or unencrypted website traffic.
If your computer isn’t behind a firewall or isn’t configured correctly and file sharing is enabled on it, a hacker can access the computer’s hard drive over the network to get at confidential or sensitive data or even launch spam and virus attacks.
How Easy Is It to Hack a Wireless Network?
The tools needed to learn about a wireless network, capture (sniff) the data transmitted over it, crack the Wired Equivalent Privacy (WEP) security key, and decrypt and view data on networked devices can be purchased for about $50.
Is It Legal to Use Someone Else’s Open Wireless Network?
In addition to the security issues for your devices and data, using a wireless network that someone else maintains and pays for may raise legal issues. In the past, several cases of unauthorized access to Wi-Fi computer networks have resulted in fines or felony charges.
Public Wi-Fi hotspots that are set up specifically for guests to use, such as at a coffee shop, are fine. Be sure to pay attention to security, however: Wi-Fi hotspots are typically open, unsecured wireless networks.
So, if you use your neighbor’s Wi-Fi connection, ask for permission first.
How to Safely Use Public Wi-Fi
There are a few things you can do to protect your privacy and data when using an open Wi-Fi network.
- Use a VPN. A virtual private network (VPN) creates a secure tunnel over a public network. If your company provides VPN access, use the VPN connection to access corporate resources and create secure browsing sessions.
- Don’t allow automatic connections to non-preferred networks. On your device, disable the setting to automatically connect to non-preferred networks. If this setting is enabled, your computer or mobile device automatically connects to any available network, including rogue or bogus Wi-Fi networks designed to lure unsuspecting data victims.
- Enable or install a firewall. A firewall is the first line of defense for your computer (or network, when the firewall is installed as a hardware device). Both Windows and macOS operating systems have built-in firewalls that prevent unauthorized access; you can also use a third-party program.
- Turn off file sharing. Before you connect to a public Wi-Fi hotspot, disable file and printer sharing so that other hotspot users don’t have access to your shared files.
- Only log on to secure websites. Make sure your browsing session is encrypted and secure. The address bar should show a URL that begins with HTTPS (encrypted) rather than HTTP (not encrypted). You may also see a padlock in the address bar.
- Don’t conduct financial transactions. Avoid using a public hotspot for banking, online shopping, or any scenario involving sensitive information.
Get the Latest Tech News Delivered Every Day
How to Use Open WiFi Hotspots Securely
It is not uncommon for people to end up with a hacked or hijacked email soon after using an Open WiFi Network at a Coffee shop or Hotel room. However, this does not mean that you should stop using free WiFi Hotspots, you just need to follow certain security practices while using Open WiFi Networks.
Problem With Open WiFi Hotspots
Open and free WiFi hotspots as available at Coffee shops, Airports and other public places are very convenient for staying in touch with others and also being productive.
However, the problem with open WiFi hotspots is that the wireless connection between your computer and the wireless access point is not encrypted.
This means that any data that you send and receive while using an open WiFi hostspot is transmitted in the open and can be seen by anyone within the network range.
How to Know a Network is Not Encrypted
When you are able to connect to a WiFi Network without entering a Password and Username it is an open WiFi Network and not encrypted.
Similarly, when you connect to a WiFi Network at your favorite Coffee shop and it takes you to a web page that says “Enter A Password” or requires you to “Accept Terms of Use”, it is also an open network and not encrypted.
What is happening in this case is that the provider of the open WiFi Network has created an interstitial page to route network traffic and to make sure that users accept its terms of use.
Always Use Http s
Accessing your Email using plain http connection makes it easy for hackers to see your Username, Password and whatever you do during your entire Email session.
Hence, always make sure that you are using Email service over a secure http s connection, both while logging in to your Email account and also during your entire Email session.
Watch out for the http s or the lock sign while you are signing in to your Email account and also while you are logged into your Email account.
While most well known Email services have moved entirely to http s standard, there are some who use http for login only or move to regular http network during the Email session without any warning or popup message.
The same precaution needs to be taken while logging into your Cloud Services accounts. Make sure that your Cloud Storage Service is using http s both while logging in and during your entire interaction with the web based service.
Use Different Passwords
A basic security principle that you need to strictly follow is to have different passwords for different accounts. This ensures that your other accounts are safe, even if one of your accounts is exposed or compromised.
Mobile Network is Safer Than Open WiFi Network
Compared to open WiFi Networks, it is safer to use your mobile service. For sensitive work, make sure that WiFi is turned OFF on your smartphone and use only your mobile network for logging into your Email and other Online Accounts.
In case you are trying to get some work done, you can consider turning your smartphone into a Mobile Hotspot and connect your Laptop Computer to this secure WiFi Hotspot. In this regard you can take a look at our following articles:
You can also consider using a dedicated Mobile Modem. These are USB like devices that can be attached to your computer via the USB port and act as Mobile Modems, providing your Laptop with a Mobile Broadband Internet connection.
Use VPN
Perhaps the most secure way to freely access open WiFi Networks is to use a VPN service. This service is strongly recommended for frequent travelers and people on the go who want to be productive and always remain connected.
A Virtual Private Network popularly known as VPN is an internet service that helps you connect to the internet over an Encrypted ‘tunnel’ or a pathway.
A VPN makes it safer for you to use open WiFi hotspots and connect to both Http and Https without worrying about anyone being able to see your internet activity.