Wireless - Control via MAC or WEP

[Michael]

The only wireless connection will be my new Toshiba e740. Is there a big disadvantage to using MAC filtering vs. WEP (slows the connection down)?

thanks,

Michael

 

[JackMDS]

MAC does not cause any apparent performance decrease. WEP usually does.

Whether MAC is enough, or you need both, depends on your environment, and level of security that you would like to maintain.

 

[Michael]

I'm not all that concerned about "security" as long as they can't get onto my network. WEP is good in that it encrypts all the packets, but there will not be anything going from my handheld to my network that I will care about being encrypted. My biggest concern would be if the router (713P) was broadcasting everything over the air.

Michael

 

[JackMDS]

The major issue is not necessarily intercepting the traffic between your PocketPC and the Main computer.

Even when your PocketPC is off, your AP is ready for action. An Unsecured AP can be used by any one in the range that have a computer with a Wireless Client Card. They become part of your Network. If your main computer is not secure they can even read and write to your drive.

 

[Michael]

If I set the MAC address filtering to only allow my PDA, I don't see how anyone else can get on my network?

Michael

 

[cipher00]

Try reading this about wep and mac control. Interesting that this suggests that mac control is actually a bad idea....I'm not sure that I buy it, but it is intriguing.

 

[JackMDS]

The whole issue is really playing with perspectives, without defining the play.

In the automotive business no serious commentator will analyze a simple Entry Level Sedan, as a prospective candidate for the Indy 500.

In the computer business there is no adequate etiquette in this matter. Almost every writer likes to make big wave, and make it as freighting as possible without defining the level of service that they are dealing with.

As an example one should not write about security issues of a commercial bank, insinuating that this suppose to be the concern of every one who uses computer access.

 

[Michael]

My best friend is an IT security officer at a commercial bank/investment/brokerage company. What he considers "secure" is way different than what I worry about at home.

From reading my documentation - MAC filtering with association turned on and the MAC address would be my E740 would limit the connection to my network to approved devices. I guess the MAC could be spoofed, but I can't imagine why a hacker would care about what is on my network, it is a simple home network and I even have software firewalls on each machine and do not have file sharing turned on for my main machine.

Michael

 

[JackMDS]

That is exactly my point.

Sensing the MAC to find what is the number, and Spoofing it is not an exercise that can be done with regular knowledge and tools. If you are no Bank why bother.