Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Monday, March 1, 2010

Gogo Inflight Wifi is using unsecure clear text passwords?

In the process of researching a paper on the legality of wiresniffing (clif notes version: it's not legal, stop trying to pretend it's not), I found out a really horrifying fact:

Gogo, the inflight wireless company that I researched last semester (here's my paper that I wrote about inflight wifi), transmits their logon passwords as clear text.

No, seriously.

To even use their service, you have to log onto their page, accept their terms, pay for your service, and then mosey around the net.  My guess is that they use a nice secure page for their credit card intake form (can't check on that now since I'm not on a plane), but as far as logging into an existing account, it's giving your username and password out to everyone that's listening in.  People can do this using free software like Wireshark, and it's not hard to do.  I wish I knew if it was a switched network or not...anyone know?  I can't find any info on their site, and I'll probably fire off an inquiry to their customer service without a response.

Well, I guess that discount coupon I had for service this month will go unused, because there's no way on earth I'm logging on now.

Tuesday, January 19, 2010

The new semester is going to have me pretty busy

Between my grad assistantship work for 2 different profs, my duties as MSIS rep for the Graduate Business Association, and my classes, I'll be pretty darned busy until May.  My courses are:

Information Systems Analysis and Design
Cyber Security Tech Factors
Java Development
Text Analytics

I'm most interested in the text analytics class, since I'll finally get hands on experience with SPSS, and the whole topic is a favorite of mine.  Should be a fun few months.