In year 2008 on 10th Nov ClubHack conducted a wardrive in Pune city. The report can be found at http://www.wardrive.in/2008/11/wardriving-pune/
To take a stock of situation, ClubHack did a wardrive again on 9th December 2009 and the findings are as below
Still 50% of the APs were Open. This includes lot a hotels in Pune. As a standard practice hotels offer Open wifi with captive portal but they fail to understand that anyone without accessing internet can still access lot of information of customers from the air.
Here’s a comparative study of both the years
|
2008 |
2009 |
||
| Attribute | Count | Attribute | Count |
| Total Access Point |
2490 |
Total Access Point |
2649 |
| Open |
1253 |
Open |
1341 |
| WEP |
760 |
WEP |
659 |
| WPA |
449 |
WPA |
520 |
| WPA2 |
28 |
WPA2 |
129 |
| Default SSID |
517 |
Default SSID |
286 |
| Hidden SSID |
119 |
Hidden SSID |
719 |
The status of security for those who were already bit secured has increased. Seems like some people have migrated from WEP to WPA.
WEP in 2008 was around 31% which has come down to 25% in 2009 & WPA2 which was mere 1% in 2008 has increased 5 times to 5% in 2009.
We are not surprised to see that many people have gone hiding their SSID which is advised by many “wireless experts’. But these “expert” fail to communicate to the world that hiding an SSID can make sophisticated attacks such as CafeLatte more easier. Interestingly hidden SSID were found in abundance near corporate areas.
Pune city need to get educated at the base level on how to move from unsecured wireless connectivity to basic security.