Geeks! Security help!

[emmline]

I'm a wee freaked.
I was trying to download the piccie I made in Caroluna's Bayeaux Tapestry thread, and in hunting around for a program on my HD I noticed a "shared" folder showing up on my MacBook.
It contains some stuff, under the sub-heading "Doug's Computer." I don't know Doug, but based on a resume I found on "Doug's Computer," he lives somewhere roughly across the street from me. There is also access to a whole batch of pictures, such as of someone named "Christy" recovering from surgery, going to a homecoming dance, etc.

I presume this means that either Doug or Christy have been sponging off my wireless internet connection, currently not password protected. (Because the password thing was giving us headaches.)

Do Doug and Christy have access to MY files? This is highly worrisome.
p.s. Doug's Computer is reachable under the "Shared" heading in my HD. Nothing of mine is under the "shared" heading.

[s1m0n]

If they can see you, you can see them. If you're using a PC, go to my computer, and right click on all the lettered drives you can see. If you have only one, it'll be C. From the menu, select 'sharing and security', and make sure you haven't got sharing enabled. You probably don't, but make sure.

~~

Without returning to passwording your wireless router, you can make it slightly more secure by logging in to your router (if you turned off passwords, you did this). Give your network a new name, which shouldn't be yours. You should see an option like "turn off SSID". SSID is the name you just gave your router. If you have SSID enabled, it broadcasts this name to the universe, just like station ID on radio. That's not neccessary. If you've already connected, your computers will know which signal to log in to, so you can shut off SSID.

Your neighbour will see the signal when he scans for networks, but without the proper name he can't just connect and leech. If he's savvy, he can packetsurf until he works it out, but from the ease with which you browsed his files, he's probably not that savvy.

[emmline]

I did log into my router settings just a few minutes ago, and re-added a password. I'm hoping that it will work for now. When we first set up this particular Linksys router, with password, we were having problems getting everyone logged on, when the girls and their laptops (we're all macs) were home. At the moment it's only me, and the kid (whose PC is directly ethernet corded to the router.)
I was able to log on, via password, without problem, so I hope that will suffice for now, and my network (under available networks,) is now showing a locked lock icon.)

I'm sort of wondering whether I should tell the people over there that their stuff was all exposed to me and that they might want to be more careful.

[peeplj]

Running unsecured wireless is dangerous. Not because of Doug-across-the-street, so much, but because of who and what else may be making use of your system without your knowledge. Of course, Doug is bad enough--anything illegal Doug does with your connection is something you could ultimately be held responsible for.

Adding a password really isn't enough, either, though it's certainly better than not having one. You really need to be running encryption...here's a good online guide to securing your network.

--James

[emmline]

There is a Mac thing called "filevault" which is currently not enabled by which I could encrypt/decrypt things in my home folder by password.
Would this be adequate?
(and I appear to have "sharing" off for everything.)

Also, there was some discussion online about WEP versus WPA, and while I have no real idea what these mean, it said WPA is better, which is what I selected when I just redid my password settings.
(Oh, and thanks James...I will read that page.)

[s1m0n]

...anything illegal Doug does with your connection is something you could ultimately be held responsible for.

Conversely, having a net connection that the Dougs of the universe can access gives you a very sound defense to any RIAA lawsuit.

Someone can try to hold you responsible for what happens with you connection, but I am aware of no precedent for a successful negligence suit. You are under no legal obligation to secure your connection. Any lawsuit or prosecution will have to prove it was you, not simply that it was your IP address.

[Lambchop]

I'm a wee freaked.
I was trying to download the piccie I made in Caroluna's Bayeaux Tapestry thread, and in hunting around for a program on my HD I noticed a "shared" folder showing up on my MacBook.
It contains some stuff, under the sub-heading "Doug's Computer." I don't know Doug, but based on a resume I found on "Doug's Computer," he lives somewhere roughly across the street from me. There is also access to a whole batch of pictures, such as of someone named "Christy" recovering from surgery, going to a homecoming dance, etc.

I presume this means that either Doug or Christy have been sponging off my wireless internet connection, currently not password protected. (Because the password thing was giving us headaches.)

Do Doug and Christy have access to MY files? This is highly worrisome.
p.s. Doug's Computer is reachable under the "Shared" heading in my HD. Nothing of mine is under the "shared" heading.

Oooooh! Does Doug need a new job? You could help him! I'm sure that resume would benefit from some fixing-up. And I bet he'll appreciate suggestions for employers, too, and would probably really like it if you just sent the resumes on for him.

I'm afraid the temptation to photoshop some charming additions onto those pix and deliver some printed copies to Doug might be more than I could withstand.

You could send a tasteful view of Christy to the paper with a press release to the effect that the family is happy to announce her impending departure for a convent.

Well, maybe not. Perhaps just deleting everything would be enough, especially if Doug rode a Harley or something. But, you have to admit, this has some possibilities.

[emmline]

I know Lamby, it so does.
And I'm kicking myself, ever so slightly, that I did not slip a "hi there!" note into the shared file before I cut them off. Because now, of course, they're not online and I can't see their stuff anymore.

But the possibilities abound, if only in my imagination.

[Daniel_Bingamon]

I agree, an unsecured wireless system is very dangerous. Spammers and pornographers could use your connection from vehicle outside to send out their trash and the IP address of the Wireless unit would send the authorities right to your house.

Get someone to help you secure it.

[emmline]

It was pretty easy, actually.
Now the router admin panel is accessible via changed password, and wired only, and
LAN wireless use is locked. But, dang...I wish I'd pulled a gotcha on those folks.

[BigDavy]

Hi emmline

Not being familiar with Macs I cannot say for certain that it works the same as for Windows, but if your router can handle it, change the encryption system to WPA2 - personal. If the Macs operate similarly to the Windows machines vis a vis wireless networking, your laptop will still access the network as is, and your network will be more secure.

David

[Lambchop]

It was pretty easy, actually.
Now the router admin panel is accessible via changed password, and wired only, and
LAN wireless use is locked. But, dang...I wish I'd pulled a gotcha on those folks.

Well, turn them back on long enough to do it! These opportunities don't come along all that often--it's a shame to waste it!

[avanutria]

You could always slip a note through the door...which might freak them more, as it'd show you knew exactly who it was.

Somebody named Jonathan lives in our area and has had an unsecured wireless signal transmitting for at least three and a half years now. We've used it occasionally in an emergency (such as when we need to access our broadband provider's help pages on their website, which is difficult to do if your broadband isn't working...)

I've no idea who it is, though.

[beowulf573]

This is how geeks with too much time on their hands (erm, like myself) handle bandwidth thieves.

http://www.ex-parrot.com/pete/upside-down-ternet.html

(ignore the techie part and skip to the photos)

[MusicalADD]

I'm still confused. (FWIW, I am generally very computer-savvy, but I'm not as savvy about security stuff as I should be....)

I can easily imagine why Doug would want to sponge off a neighbor's broadband account.

But, why on earth would Doug want to leave his files on Emmline's hard drive? That's just .... bizarre. It's broadcasting his mooching. I don't get it.