As part of a security awareness campaign, a seven-year-old girl was able to successfully hack a public WiFi hotspot in 10 minutes and 54 seconds.
Seven-year-old Betsy Davis entered into the
ethical hacking demo, meaning that a security expert supervised the entirety of the experiment, with only her laptop. She was then able to find out how to hack the controlled environment’s public WiFi using basic web searches.
Among other things, her searches yielded more than
11 million results on Google, as well as nearly 14,000 video tutorials on YouTube.
Using one of those tutorials, Davis was able to set up a rogue access point for a Man-in-the-Middle (MitM) attack, which allowed her to steal data from other computers accessing the network.
She completed her attack in just under 11 minutes.
“The results of this experiment are worrying but not entirely surprising,” said Marcus Dempsey, the security expert who oversaw the experiment. “Adults need to get their heads around online security basics – and stick to them whenever they connect to an unsecure network.”
The
experiment was carried out by VPN provider
www.hidemyass.com, which is seeking to bring attention to the dangers of users accessing any one of the 270,000 public hotspots available in Britain.
According to
follow-up survey, a majority of British online users (59%) regularly access unsecured public WiFi hotspots, with one in five using them at least once a week. 31% of users transmit emails and personal documents on those networks, and 19 percent access them for personal banking.
Betsy Davis is the latest example of how children can foster a broader understanding of information security and cyber threats.
Back in October of 2014, Tripwire interviewed Reuben Paul, another influential child in the field of security, who is CEO of his own company and regularly speaks at a variety of high-profile security conferences.
You can view an interview with Reuben
here.
