To SSID or not to SSID. That is the question.

[tyler811]

I have read that many people here say do not turn off your SSID. One person, cannot remember who, said it is worse for security reasons then leaving it on. I do not though recall reading why.


Is this true or did I read it wrong.

 

[MustISO]

I think it's better not to broadcast it and change it from the default. I'm pretty sure it can still be figured out if it's hidden but why not make it a little harder.

 

[Crusty]

Yes, even if the SSID is hidden you can figure it out. There is no point to turning it off. The best thing you can do is change the name from the default and leave it be. The problem with making the SSID hidden is that some devices, notably non-computer devices like hand held electronics, have problems finding and connecting to hidden access points. As always though, if you turned it off and have no issues then it's not a big deal.. but as soon as you do start to have problems that should be the first thing you enable.

 

[thecoolnessrune]

I turn mine off and changed it from default because there's 500 people within range of it. At least the normal masses wont even notice it when they start up their laptop and want to connect to the first network that pops up. It's as much about removing extra networks from the viewspace as it is keeping them from trying to connect in the first place.

 

[tyler811]

Well I only have one laptop so as far non pc items that is okay. I also subscribe to the theory if someone cannot see then they wont waste thier time. But I thought I saw someone said that it can turn out to be a bigger security issue if it is off.

 

[Crusty]

Well it shows that you are trying to hide something so it's obviously going to be a more interesting target to a hacker.

 

[thecoolnessrune]

For me the only thing I'm trying to hide is my laser printer so someone doens't spoof it with 1,000 pages screaming "FUCK YOU". Other than that they're free to snoop all they want 😛 I have nothing of value on my computers.

 

[tyler811]

Originally posted by: Crusty
Well it shows that you are trying to hide something so it's obviously going to be a more interesting target to a hacker.

Hey give me back my avatar :laugh:

 

[jlazzaro]

not broadcasting the SSID can cause instability with some clients, and most software list these "hidden" networks anyways...leave it on.

 

[kevnich2]

Originally posted by: jlazzaro
not broadcasting the SSID can cause instability with some clients, and most software list these "hidden" networks anyways...leave it on.

2nd this. There is no benefit security wise or any other to turning off the SSID broadcast. If anything, it'll actually cause problems. And yes, I have seen many instances where turning off SSID broadcast actually causes wireless instabililty, dropping of clients unexpectedly, etc. And besides that, it is VERY easy to find the SSID even if it is hidden, so why make it harder on yourself when you are trying to connect. There is also no point to MAC address authentication either - very easy to sniff and spoof a MAC address.

Just make sure you turn on encryption (WPA2-AES > WPA-TKIP > WEP) in order from most secure to least and you won't have to worry about unauthorized persons connecting to your wireless.

 

[JackMDS]

The idea behind SSID On is the fear of uniformed users that if the Wireless is broadcasting and thus its existence of the Access Point appears on someone else available Wireless Networks, it might encourage someone to try to break the Wireless security.

Thus far WPA was Not broken and I doubt that if any one secretly knows how brake it his choice would be to brake into Joe Six Pack from Main street USA Wireless Network.

One can alose assume that any one that know how to deal with encryption codes can sniff Wireless beacon even if the SSID is Off.

On the other hand Entry level Wireless systems are Not stable when the SSID is off.

----------

From the weakest to the strongest, Wireless security capacity is.
No Security
Switching Off SSID (same has No Security. SSID can be easily sniffed even if it is Off)
MAC Filtering______(Band Aid if nothing else is available, MAC number can be easily Spoofed).
WEP64____(Easy, to "Break" by knowledgeable people).
WEP128___(A little Harder, but "Hackable" too).
-------------------
The above, are Not considered safe.

Safe Starts here with WPA.
-------------------
WPA-PSK__(Very Hard to Break).
WPA-AES__(Not functionally Breakable)
WPA2____ (Not functionally Breakable).

Note 1: WPA-AES the the current entry level rendition of WPA2.

Note 2: If you use WinXP bellow SP3 and did not updated it, you would have to download the WPA2 patch from Microsoft. <http://support.microsoft.com/kb/893357>

The documentation of your Wireless devices (Wireless Router, and Wireless Computer's Card) should state the type of security that is available with your Wireless hardware.

All devices MUST be set to the same security level using the same pass phrase.

Therefore the security must be set according what ever is the best possible of one of the Wireless devices.
I.e. even if most of your system might be capable to be configured to the max. with WPA2, but one device is only capable to be configured to max . of WEP, to whole system must be configured to WEP.

If you need more good security and one device (like a Wireless card that can do WEP only) is holding better security for the whole Network, replace the device with a better one.

Setting Wireless Security - <http://www.ezlan.net/Wireless_Security.html>

The Core differences between WEP, WPA, and WPA2 - <http://www.ezlan.net/wpa_wep.html>

 

[Jeff7181]

Aside from some application instability, the main reason I've heard for not disabling SSID broadcasting is in the business world. You WANT your employees/customers to be able to find your access point so they don't connect to a less secure network because it's easier or found first.

 

[n0cmonkey]

I think I had read a while back that Fake AP attacks were easier against clients that usually associate to wireless networks where the SSID is hidden. Not positive though.