current community

your communities

more stack exchange communities

company blog
Stack Exchange Inbox Reputation and Badges
tour help
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
up vote 34 down vote favorite
1

To begin with, I am not very computer savvy. I am an older person with an older computer and a 2003 Windows XP using Google Chrome for a browser. (If anyone is old enough to remember when Windows first came out, and remembers their hologram security seal with a baby touching a computer screen - that baby was my son.) I am widowed, and without resources for help with computer problems, so I would greatly appreciate some help. But you might have to explain things in common english!

We have a wireless router provided by AT&T with WPA2. I have had a suspicion for a while that a neighbor is a hacker. Recently, if I log onto my computer late at night, it tells me that I don't have an internet connection. When I check the wireless network, my network doesn't even appear. What appears is a network that I don't recognize with a 5 bar signal strength. If I refresh the network list, my network appears (with signal bars), then the bars disappear on the unknown network, and I get a connection.

This must mean that someone is hijacking my network, or hacking into my computer at night - right?

share|improve this question
14  
Could you please state the SSID (Name) for the 5 bar network? Also a foolproof way of detecting if that unknown 5 bar network is your own is to compare MAC adresses between both, I'd recommend you use a network scanning tool. Also, congratulations for such a well formulated question! – EChan42 yesterday
21  
This sounds more like a network fault than intentional harm. – Luke Park yesterday
41  
Off topic, but not really; you should very much consider upgrading to an operating system newer than Windows XP. Windows XP has stopped receiving any security updates from Microsoft as of April of 2014. It's needlessly risky to continue to use it. – WorseDoughnut yesterday
22  
a not very computer savvy older person who knows what's WPA2 and ask a question on an information security website...? you must be the coolest grandpa ever – lelloman yesterday
18  
@lelloman: cool, yes, but a person named Susie is more probably a grandma. Not that it matters for the question, ofc. – Guntram Blohm 23 hours ago
up vote 45 down vote

It is unlikely a hacker stealing internet access will have the sophistication (or need) to make the wireless network change between different names.

It is more likely that someone/some device nearby installed a new wireless network that happen to broadcast on the same channel as yours (there are only 3 or 4 non-overlapping ones to choose from) and have a higher signal strength. Depending on the signal strength of your router and the capability of the wireless card, the latter may fail to detect your network until the other one goes quiet.

One solution is to reconfigure your router to use a different channel. This option is normally under the "wireless" or "advanced wireless" section in the web configuration interface of the router. Another one is to find out who operates the other network and ask them to reduce power (they're violating FCC rules).

You'll find a WiFi analyser on a smart phone very hand for both solutions. They can tell you what network are using which channel and the make of the router (useful for hunting them down). On Android, there are many options. I think the best one is "Wifi Analyzer" by farproc. For iOS, the only option is Apple's own AirPort Utility (see guide).

share|improve this answer
2  
Good point. It's worth noting that if she is inadvertently connecting to another unsecured network then it puts her at risk. It also means that instead of being hacked it is almost as though she has accidentally become the hacker. (not really, but it's still a bit funny) – KnightHawk yesterday
2  
Bit misleading in the second paragraph. You can most certainly legally boost an APs power (to a certain extent) without breaking FCC rules. – WorseDoughnut yesterday
1  
If that were the case the internet connection would be unusable as long as the neighbor's device is in use. Since the symptoms reported suggest it's only a daily (or less) very brief outage, this is unlikely. – Jeff Meden yesterday
3  
@WorseDoughnut I felt that way too. Unless some measurement is done, it is impossible to just assume they are violating FCC rules. Also, where is the AP located in his home related to the computer? One possible scenario is the AP in living room by the front door, and he is in the back of the house while neighbor AP is facing the backyard with LOS to OP's computer through the glass window. Fact is, don't make assumptions. – Mindwin yesterday
1  
I wish i could downvote this answer more. "Your neighbor's wifi is stronger than yours? They're probably violating FCC regulations. It can't possibly be something simple like distance, or brand, or something reasonable like that." - billc.cn 2016 – WorseDoughnut 11 hours ago
up vote 9 down vote

Here are some things you can try that may help you out. As you stated that you are not too computer savvy, I'll not be giving you any difficult instruction if I can help it.

  • Possibly try turning off your router when not in use. This may reset your password to the default (I believe this might be printed on the device itself)
  • If you can plug a hard line from your PC to your router, this will keep you on a physically secured connection. You could turn off the wireless from here if you wanted to.
  • You might need to call AT&T and get some 'in person' help. You can find a lot of good information here and other places online, but they do have diagnostics that they can perform and walk you through over the phone to help troubleshoot for problems.
  • If you are comfortable logging into the router itself and looking around the options there, one of the things you should be able to see is a list of connected devices. No guarantee you will see any information about your neighbors computer. What you should see is the MAC address of any connected devices. If you list them out and compare to the devices you own you can find out if there is someone else on your network.

There are any number of other things that might help you, but I think I covered the basics. For now, it's hard to tell exactly what the trouble is, these things will hopefully help you out. Seriously give it some thought to calling AT&T or anyone that you know to help you out in a more personal manner. (I don't recommend Geek Squad though, too expensive. For some of their prices, you're better off getting a new PC at times.)

share|improve this answer
1  
This may reset your password to the default Mine doesn't. – Έρικ Κωνσταντόπουλος 13 hours ago
2  
I would advise against turning your router off frequently. Often ISP's will pick this up as a fault and reduce the speed on your line causing further issues. you should really only turn off your router if you really have too and infrequently as possible. an alternative however is to turn off just the wireless signal. many routers have a button or switch to toggle this. – Harvey 13 hours ago
    
Unfortunately, there isn't a feasible way to connect the cable to my computer. I wish I could, and not have to use a wireless router! – Susie 6 hours ago
    
I don't think I can turn off the router without also disconnecting the cable television by doing so. – Susie 6 hours ago
    
"Possibly try turning off your router when not in use. This may reset your password to the default" LMAO, really? Have you actually seen this? If so, cite which brands do this nonsense, so we can avoid giving them any money. Although, to be fair, I'd say the same to @Harvey about ISPs who would punish us for saving power; again, really? they react to perceived problems on the line by, not fixing it but, worsening it? Both of these are new levels of technological inanity if true. – underscore_d 2 hours ago
up vote 6 down vote

To your fear that a local hacker is trying to compromise your internet connection and/or your computer, it's actually quite hard to "fake" an WPA2-AES protected access point: the handshake doesn't expose the key and if there were a rogue device posing as the AT&T router, the handshake would fail with an error message. So, as long as you heeded any warnings about invalid passwords when connecting, and never tried to connect to any SSIDs than the one you configured for your AT&T device, your internet connection is safe.

Further, the symptoms (a strange no-name network appears with strong signal in place of yours, then disappears) sounds a lot more like the AT&T device is merely rebooting: they don't have the most robust customer prem equipment and this can happen automatically; sometimes triggered late at night. If it happens more than once every week or two, you should contact them for troubleshooting and to obtain a replacement.

share|improve this answer
4  
This sounds much like failing hardware. That might be because of rebooting, as Jeff noted, or some other problem. Since you (Susie, the question-asker) are using a computer that is over a decade old, I wouldn't be surprised if you haven't upgraded your router to something recent. So, chances seem sensibly high that you're using an old router. Consider replacing the old (likely failing) equipment. It sounds like there may be a neighboring network (nothing wrong with that) which becomes more prominent during the times your network is failing. Not a neighbor's attack. – TOOGAM yesterday
    
The network has a name, I just didn't state it. My computer may be decades old, but my AT&T router is only about 2 years old. And why would my internet connection be disrupted only late at night, and only when this other network goes from zero bars to 5 bars? I only get 4 bars when I have an internet connection. – Susie 5 hours ago
1  
@Susie Your question is "Am I being hacked?". The experts here are telling you that it is unlikely. They're not discounting your concerns offhand; they're answering your question. And 2 years really isn't "new-ish" for a router; I've had routers fail completely within a year (although they usually last longer). – Beofett 4 hours ago
1  
@Susie interrupting WiFi is amazingly easy, intentionally or unintentionally. Hard is compromising or impersonating a properly configured WPA2-PSK device. So, rule of simplest explanation applies unless you have more details you can provide like other unexplained computer behavior. – Jeff Meden 4 hours ago
1  
@Beofett The OP asked a very well-written and interesting question but is kinda marring the discussion by seeming only to want to be told what they have already decided is true. – underscore_d 2 hours ago

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.