Tablet PC and Ultra-Mobile PC News, Forums, and Video Reviews  
       
 
 


 

Friday, February 08, 2008

« Lamenting Ink Desktop 2Main  | Interview With N-Trig Coming Up - Your Questions W... »

GottaBeSecure: WiFi vs. Mobile Broadband

- Terry Bradley

imageIf you read my weekly GottaBeSecure articles, you'll know that WiFi security is one of my favorite topics. Many people ask me, however, whether cell phone data cards (AKA mobile broadband or air cards) are any more secure? Assuming you're worried about your average black hat hacker or your snooping next door neighbor, the answer is definitely "yes." Air cards beat WiFi for security hands-down. Why? Let me offer a few proofs that hopefully put things into perspective.

image First, the technology used for cellular data cards is very different than that used for WiFi. WiFi operates in an unlicensed radio frequency band located around 2.4 GHz and is patterned after insecure Ethernet protocol. There are numerous other products that send and receive communications in that same frequency band (cordless phones, Bluetooth devices, wireless cameras, etc.). As such, it should come as no surprise that communications in this frequency range are not protected nor are they secure. Also, the WiFi protocol is very similar to wired Ethernet (just without the wires), which is based on a "party line" concept. All that is needed to receive (or intercept) WiFi communications is a WiFi adapter and the proper software drivers to cause your WiFi card to listen to all network traffic.

Cellular data cards (for instance the Verizon air card) operate in licensed and restricted frequency ranges around 850 MHz and 1900 MHz using a technology called CDMA (Code Division Multiple Access). What does that mean? Simply put, it means you can't listen in on other people's data communications as easily because the system is designed to be secure through the use of spread spectrum technology and pseudo-random codes that encrypt communications to and from the mobile and base stations (for more details, see this paper on CDMA security).

Still not convinced? Did I mention it's illegal to monitor or intercept cellular communications? Now I know hackers don't care about laws, but given the huge volumes of WiFi traffic that is free for the taking, why risk jail time to intercept cellular communications (by the way, depending on where you are and what you're doing, intercepting WiFi may also be illegal).

Finally, one additional piece of evidence I would offer is from a recent article on WiFi security. In the article, Chief Technology Officer of Errate Security (and creator of the famous Ferret data seepage tool), David Maynor, comments that he uses a cellular broadband data card rather than public WiFi to protect his data. He also recommends you do the same.

So, to summarize, cellular data cards are more secure that WiFi because:

  1. The CDMA technology air cards use has built-in security
  2. It's illegal to intercept cellular communications
  3. Security experts like David Maynor trust air cards over WiFi

I am always impressed with how much GBM readers know about the various topics I cover; if you have some special insight into this subject, I'd love to hear from you!



2/8/2008 6:53 AM MST  

GottaBeSecure: WiFi vs. Mobile Broadband     Comments [3]  |  Digg This |  del.icio.us |  Citations 
Friday, February 08, 2008 10:54:40 AM (Mountain Standard Time, UTC-07:00)
Terry:
The fact that WiFi shares spectrum with other services does not make it less secure, it only makes it more susceptible to interference.

Also, CDMA is not Code Division Multiplexing Analog, but rather Code Division Multiple Access; the sharing of a chunk of spectrum by many users all operating on the same frequency but having different spreading codes. Fascinating technology and a better way to share a band than either FDMA (Frequency Division Multiple Access), where each user has an assigned frequency or channel, or TDMA (Time Division Multiple Access), where each user has an assigned time slot.
Mark (K0LO)
Friday, February 08, 2008 10:55:49 AM (Mountain Standard Time, UTC-07:00)
I'd argue that cellular traffic is just as much "party line" as WiFi. In both cases, your radio puts signals in the air that are up for grabs for anyone with an antenna -- there is no dedicated physical channel. That channel is created through other means (protocols).

Both WiFi and cellular traffic is encrypted. I am not an encryption expert, so I can't tell you whether the celluar encryption methods are more secure than the more sophisticated (than WEP) methods WiFi employs. But to create the impression that no matter what you do anyone can listen in (and understand!) your WiFi traffic is misleading.

I'd say that cellular traffic is more secure because (a) it always has encryption turned on (while with WiFi it depends on the configuration of the router you connect to) and (b) because WiFi is a lower hanging fruit (more users, easier access to equipment, ...) for would-be hackers.

I always use VPN whenever I connect at a hotspot. I usually also use it with my EVDO card.
Oliver
Friday, February 08, 2008 11:28:38 AM (Mountain Standard Time, UTC-07:00)
Mark,

CDMA spelled-out corrected; sorry for that gross inaccuracy.
Terry Bradley
Comments are closed.


       





Copyright 2008 GottaBeMobile.com
 
     

 
     
 
     
 
     
 
The vision of GottaBeMobile.com is to become the definitive source for mobile computing news, reviews, and commentary, as well as the home for the mobile community to discover and discuss these issues. When you think mobile, think GottaBeMobile.com.

The mobile computing space is one of the fastest growing and fastest changing spaces, and indeed industries worldwide. Within that constantly evolving and face paced world, GBM covers a range of spaces and technologies including Tablet PCs, UMPCs, MIDs, Ultra-portable computers, operating systems, software, natural human interfaces, accessories, mobile connectivity solutions, and other solutions that appeal to the mobile user.
     
Featured Stories
     
 
Latest GBM Shortcut Video Reviews and InkShows

 
News Categories
     
Twitter, Google Tools, etc
News Archive