To take a stock of situation, ClubHack did a wardrive again on 9th December 2009 and the findings are as below

Still 50% of the APs were Open. This includes lot a hotels in Pune. As a standard practice hotels offer Open wifi with captive portal but they fail to understand that anyone without accessing internet can still access lot of information of customers from the air.

Here’s a comparative study of both the years

The status of security for those who were already bit secured has increased.  Seems like some people have migrated from WEP to WPA.

WEP in 2008 was around 31% which has come down to 25% in 2009 & WPA2 which was mere 1% in 2008 has increased 5 times to 5% in 2009.

We are not surprised to see that many people have gone hiding their SSID which is advised by many “wireless experts’. But these “expert” fail to communicate to the world that hiding an SSID can make sophisticated attacks such as CafeLatte more easier. Interestingly hidden SSID were found in abundance near corporate areas.

Pune city need to get educated at the base level on how to move from unsecured wireless connectivity to basic security.

All it requires is a WIndows Mobile based handheld device wqith support of Wi-Fi and GPS.

The results can be saved in KML format which can be plotted on Google Earth/Map

AiroMap: Live in action

Features overview:
* Precise GPS Mapping algorithm (handles variable precision and loss of position data)
* Export to popular formats like OziExplorer, Google Earth and Garmin/Magellan/Navigon CSV
* Save/Load/Merge multiple sessions, using Airomap Log format
* Open/WEP/WPA detection
* Colors provide intuitive reading of encryption and strength
* No more hidden networks on map: slightly autoshift identical positions
* Audio signal if open networks are detected on your path
* Signal graph available for any network
* GPSID: no need to specifie COM port and you can use other GPSID applications simultaneously
* As small as 360KB. Operating System: Pocket PC / Windows Mobile.

Saving into other formats like CSV/Kismet have some issues but KML can do for most of the cases with some XML parsing.

airomap-screenshots

http://blogs.wefrag.com/divide/airosuite/