Do you think there is any value to turning off SSID broadcast?

Chaotic42

Lifer
Jun 15, 2001
34,550
1,710
126
I'm just curious what you think about this. I've been having... issues with getting wireless working in Debian on my laptop, but I think they're finally solved. Along the way I've run into several conversations and there appears to be some debate about whether there is any true benefit to turning off SSID broadcast. What are your thoughts?
 

Slugbait

Elite Member
Oct 9, 1999
3,633
3
81
Zero benefit: crackers can easily see your hidden SSID.
Negative benefit: you've made it more difficult for friends and family to login to your wi-fi.

It is so useless that MS doesn't provide a way for WP7 to log in to a wi-fi network that has a hidden SSID...many products coming out now are following suit.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
It's only beneficial if you have a ton of children messing around with your network. Anyone with a brain knows how to sniff the SSID anyway.

My neighborhood has devolved so I keep my SSID cloaked until I have people over.

I have gotten tons of hack attempts once it was broadcast even though in front of my house I can pick up 5+ unsecured networks even with default credentials.
 

Paperlantern

Platinum Member
Apr 26, 2003
2,239
6
81
It is actually less secure because of the way a client RUNNING ON the hidden SSID network communicates. That traffic, to someone really trying, if sniffed, can speed up the intrusion process, rather than slow it down. The best practice is to simply broadcast it, and lock it down, at the least. For the best protection (though like was mentioned this does suck for people trying to use it outside of your regular users), use MAC filtering. At least day to day though you wont have any issues. Though some people would also say this is of no use because a MAC can be spoofed, which is true, but it can't hurt.

The ONLY benefit to hiding a network is not if you really want to keep it SECURE, but if you just generally want it hidden. Out of sight out of mind as they say. For example we have a wireless network in this building for IT staff, and some of the upper management and partner staff to use with thier laptops and iphones. The general employees dont know about it and rather than them constantly tryign to connect to it, or asking IT if they can have access so they can listen to Pandora radio without using thier data, we just hide it. The general population will not look for access to something they cannot see. MUCH easier. The network itself is secure even if it is hacked anyway, it cannot access any internal systems, it goes straight to the internet.
 
Last edited:

bobdole369

Diamond Member
Dec 15, 2004
4,504
2
0
but it can't hurt.

Actually.....As in Alkemyst's example you get a wiseguy he might be drawn to your network because of the mac filtering. It not only is simple to spoof a MAC, its part of the written procedure in getting on your MAC filtered network as part of cracking the key. It is simple to see which MAC's are broadcasting - so just be one of those - and/or drown out the legitimate MAC with deauths from your location - filter on the working MAC and you have your 4 way handshake in no time.
 

Paperlantern

Platinum Member
Apr 26, 2003
2,239
6
81
Actually.....As in Alkemyst's example you get a wiseguy he might be drawn to your network because of the mac filtering. It not only is simple to spoof a MAC, its part of the written procedure in getting on your MAC filtered network as part of cracking the key. It is simple to see which MAC's are broadcasting - so just be one of those - and/or drown out the legitimate MAC with deauths from your location - filter on the working MAC and you have your 4 way handshake in no time.

I realize there are simple ways of doing it but even as simple as it is, it is one more hoop.
 

Dravic

Senior member
May 18, 2000
892
0
76
I'm just curious what you think about this. I've been having... issues with getting wireless working in Debian on my laptop, but I think they're finally solved. Along the way I've run into several conversations and there appears to be some debate about whether there is any true benefit to turning off SSID broadcast. What are your thoughts?

Negative benefits:

Your clients now call out for the hidden SSID all the time home or away. Leaving them vuln to imposter networks (they will answer the third call they hear if the real network doesn't speak up), and nullifying any mac filtering as the client is constantly yelling his out to see if he its near the hidden SSID.

Pain for guests
 

Rainsford

Lifer
Apr 25, 2001
17,515
0
0
With properly set up WPA, hiding the SSID doesn't add anything at all to your security. The SSID is relatively easy to discover, and properly set up WPA is impossible to break. It would be like hiding your street address if your house was guarded by the Secret Service ;)