Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Possible Duplicate:
Wireless network connection: Security Type: Unsecure

When I connect to a wireless (802.11/a/b/etc) network what information can either its users or administrators obtain about my computer?

For instance, it must know the MAC address of my wireless card.

For the purpose of this question, I'm only interested in information that is potentially communicated while maintaining the wireless connection. Assume I am running a fully secured computer (ie, there no insecure services running).

The motivation for my question is privacy. I'd like to know what information I'm leaving behind if I'm using multiple wireless networks.

share|improve this question

marked as duplicate by Dave M, Renan, 8088, ChrisF, MaQleod Oct 4 '12 at 15:39

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
not a duplicate. the linked question is about usage of an non-secured network. i'm more interested in what a network finds out about me when i connect to it. –  user13137 Oct 4 '12 at 13:44
    
Please clarify. The duplicate identifies risks around packet sniffing, remote access, etc. When you say your system is secure, do you mean your traffic is encrypted while using the WiFi? –  Dave M Oct 4 '12 at 13:54

1 Answer 1

The axiom in network security is that the only truly safe and secure computer is one that is powered down, disconnected from everything, no one can see or touch it, and inside a Faraday Cage.

That may seem a touch extreme, but it's intended to illustrate the precarious issue of defining "what is secure."

First of all, you don't state what you happens after your computer connects to the wireless network. It's one thing to just "connect" to a wireless network. It's quite another to do anything across that network. What you do makes a huge difference.

It's like asking, "What can someone learn about me if I connect my driveway to the road?" versus "What can someone learn about me if I they see me driving on that road?"

Secondly, it's broadly inaccurate to ever assume one has a "fully secured computer." There's a plethora of unknown, suspected, and even known but non-resolved vulnerabilities across the spectrum of operating systems and applications.

So, to return to my counter-example. It'd be like asking, "What can someone learn about me if I drive on the road?" versus "What can someone learn about me if they look inside the windows of my house?" versus "What can someone learn about if me if they look inside this window I didn't know I had?"

Third, you don't declare whether the network to which you are connected is your destination or whether it's a transit network to reach yet another network. (Are you getting out of your car to go shopping once connected? Or are you using it as a freeway to go somewhere else?"

Fourth, you don't say if you are encrypting (SSL/VPN) or using some kind of proxy or what the nature of your activity would be - if any. (Are you driving in disguise? Is your car wrapped inside a semi-truck? Are you driving to a friends' house first and switching cars? Are you driving a EcoSmart cart, a bulldozer, or a sports car?)

But to help answer your question, let's assume, for a moment, you have a "fully protected" computer and decide to go to some resource on a remote network after connecting to it via a web browser. I'll also assume you use this wireless connection regularly and frequently:

They would likely know or be able to guess:

  • The day/time of your activities and build a social/lifestyle schedule.
  • Enough data to attempt cracking your encrypted logins/passwords.
  • They would identify what websites and URL's you like to visit.
  • Your OS and your browser type.
  • Possibly read your browser cookies and history.
  • Identify your social media (Facebook, Twitter, Instagram, etc) preferences and possibly your identity.
  • Shopping habits, purchase preferences, age, gender, and lifestyle.

In short, anytime you connect to any network, one should assume the network has the ability to monitor any and all traffic you send or receive.

share|improve this answer
    
Thanks for that, I think my question was just poorly asked. I would normally just delete it but I don't want to subsequently delete your excellent response. –  user13137 Oct 4 '12 at 14:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.