On 7 July, a team of PISA investigators performed a "War Driving" in Hong Kong to study the  Wireless LAN Security Flaws in Hong Kong. PISA announced the result of the study with live demonstration on 27-July-2002. At the scene PISA also showed the strategies of protection against the flaws.

This was the FIRST published War Driving study in the city. The study had captured the attention from the Media.

The Study Report and the Workshop Presentation Slides are downloadable below. We advise personal and corporate networks to take note of the problem and tighten your security.

At the same time, we have to point out that it is NEITHER legal NOR ethical to access any network or system even if you discover vulnerabilities there. You have to get the system owner’s permission before doing a penetration test of their system. PISA’s methodology in the above study did not include a penetration test.


 Topic
War Driving in Hong Kong
 Objective
To make the public aware of
Wireless LAN Security Flaws of Hong Kong
 Date 7 Jul 2002 (Sat)
 Time 11:35am - 13:40pm
 Route Admiralty MTR Stations --> Pacific Place --> Tram (Admiralty to Kennedy Town) --> Tram (Kennedy Town to Causeway Bay)
 Weather
Isolated Showers
 Participants PISA investigators: Jim Shek, W.S. Young and Alan Tam
 Note
  • Unauthorized Access is criminal offence. Do not connect to other's network although they are insecure to let you in.
  • The information here is used to illustrate the problem and provide protection strategy. We DO NOT provide information, skill and assistance for any malicious intent
  •  Outline of
     Presentation
  • WLAN War Driving in Hong Kong
  • WLAN Terms and Security Risks
    • Demo I: Home made antenna, so easy!
    • Demo II: WEP Weakness and Cracking
    • Demo III: Protection from Sniffing by VPN Encryption
  • WLAN Protection Strategy
    • Demo IV: Protection from Illegal Access with silent SSID
  •  Download PISA Workshop Presentation Full Set (1.2MB)
    WarDriving Report Only (900KB)

    Another useful reference
    WLAN Security Seminar (Theory) Presentation by Ray Hunt 13-06-2002

     Media Coverage
  • NeoTek Indonesia (Aug-2003)
  • ComputerWorld Singapore (Feb-2003)
  • CNN TechWatch (Sep-2002, 2MB zipped wmv)
  • ComputerWorld Hong Kong (22-Aug-2002)
  • HiTeck Weekly (13-Aug-2002)
  • PC Market (7-Aug-2002)
  • Yahoo! (6-Aug-2002)
  • Hong Kong Economic Journal (29-Jul-2002)


  •  Organizer
      
      Professional Information
       Security Association
     


    ...Professional Information Security Association...
    ..An Organization for Local Information Security Professionals..