up vote 3 down vote favorite
2
share [g+] share [fb]

This is my security problem.

So, I'm connecting to the internet through a WLAN network, shared by another person, we both are admins over the network and know the password, but he is a computer guru and is into hacking, and I'm a computer illiterate.

The thing is, he gave remarks about "sniffing" my data (Aka Web browsing for the most part) and I think he is serious, I'm trying to protect my privacy here, I asked in a lot of places but the answer always was "get a VPN" and I can't afford that. :(

I want to protect my data but he is on the same network (and an admin nonetheless).

What should I do?

link|improve this question
feedback

3 Answers

up vote 3 down vote

If he sniffs your data, he can be arrested over the computer misuse act. This is a UK law, but America have even tighter rules about this sort of thing.

Externally, if your WLAN is using a WPA2/PSK encryption, then you should be fine from most people. Obviously this isn't foolproof (nothing is) and could be cracked, but it would take forever to do so.

Internally, well you don't say if this is at work or at home. If it's at work, leave all your "private" surfing at home. What can he get from you if your just reading about sports? As I said, if he does sniff your data this is a criminal offence. Threaten him with that and see how many times he makes remarks about sniffing your data in future.

Also, regarding VPN's, there are free alternatives to the paid for VPN. A quick search on google gave me this: http://www.avinashtech.com/internet/15-best-free-vpn-for-secure-anonymous-surfing/. But as I said, the best way to protect your personal information is to leave your personal web use at home. Use your work internet for work purposes, not for Facebook! :)

link|improve this answer
They both are on the same WLAN and effectively share the same encryption keys... Isn't the traffic clear as day then? – sinni800 Jan 28 '11 at 9:48
1  
@sinni That's the "externally" part of the second paragraph. Not relevant here. – Daniel Beck Jan 28 '11 at 9:51
Alrighty, not relevant :) – sinni800 Jan 28 '11 at 9:55
feedback
up vote 0 down vote

He can only sniff data which is not secured.

Secured is: HTTPS, SSH, for example.

Insecure is: HTTP, FTP for example. He can completely sniff this traffic.

For a VPN you first need a VPN provider. For example http://openvpn.net/ (I never tried this, I don't use VPNs.)

OpenVPN also has the client on their site (most popular VPN client as far as I know). You should find a tutorial here, too.

But you said you can't afford a VPN... So there's a few alternatives:

  1. Tor (Very slow, but completely anonymous and encrypted)
  2. Using a free VPN service that includes ads in your traffic: Here is a list of them
link|improve this answer
Tor is only useful if you don't do things that can be linked back to you. Leaking classified documents of a huge organization is fine, logging into Facebook is not. – Daniel Beck Jan 28 '11 at 9:52
Afaik Tor encrypts transfers between nodes. Which will effectively make sniffing in a WLAN useless. Though it is true there CAN be implications when you log into a unencrypted site. The "exit node" will know your data. – sinni800 Jan 28 '11 at 9:54
That's what I meant. You replace your friend/colleague/neighbor with someone you know nothing about and isn't bound by telecommunications law. – Daniel Beck Jan 28 '11 at 10:04
Alright, I give it that. VPN does the same though, if I use a free one I wouldn't one houndred percent trust it. I'd rather trust one that I paid for. – sinni800 Jan 28 '11 at 10:16
feedback
up vote 0 down vote

If you are on the same network, there's little you can do. Of course, all your HTTPS and SFTP/SSH traffic will be secured, but everything else will go through a router at some point, and depending on how experienced your roomate (?) is, he will be able to sniff pretty much anything, even if you have a secured WiFi.

Please threaten him with the fact that sniffing anybody else's private data is illegal, even if you share a network. This is your only resort if you can't find a decent VPN provider.

link|improve this answer
Thank you all, I tried HOTSPOTSHEILD ... Is that Okay? I also tried Logmein Hamachi 2 but I didn't know how to use it. – Frank Jan 28 '11 at 14:34
@Frank I think you need to edit your post and explain exactly where this network is. Is it in an office or at home? That way we will be able to explain the VPN process better. – mickburkejnr Jan 28 '11 at 14:49
@mickburkejnr It's a home network. :) – Frank Jan 28 '11 at 15:58
@Frank A VPN won't help you then. A VPN will help you connect securely to another network over the internet, but won't help you connect securely to the Internet. – mickburkejnr Jan 28 '11 at 17:00
@mickburkejnr Then what do you suggest? – Frank Jan 28 '11 at 19:21
show 3 more comments
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.