Wireless Security!

[JackMDS]

Nothing in the world is secure.

There are degrees of security.

Judge the situation for yourself, your need, and what you are try to hide, rather then to be taken by slogans.

We all know that never too old to learn.

But you can not teach old dog new tricks.

We just use what ever is comfortable for the moment.


1. Unique SSID.

2. Broadcast off.

3. MAC filters.

4. 128WEP (changed twice a week).

The above measures are more than most home users need.

Still scared wait until WPA is available (about a year away).

 

[SaigonK]

I am waiting for SSL over wireless, now THAT will be really nice!

 

[djdrastic]

I'm waiting until they integrate lasers or phasers into ap's so that I can shoot at the warchalkers outside my home !!!

The best form of security is physical security , and those l337 h@x0rZ won't come near my friggin apartment

 

[BG4533]

Do most home users even need all of that? I think most broadband home users are probably sitting behind their connection with no firewall and unintentional shares from WinXP waiting to be hacked, a WiFi router will at least help this a bit. The data going across most home users networks is not of a most sensitive nature either. I think basic WEP and statistics are probably enough. What are the chances that when the user sends that one CC# across the internet that someone is watching his data? Unless you are in a dense apartment or area it is another story. Then, the last problem I see is people getting into your network and using it for evil. With mac filtering and even static IP addresses it becomes a bit more difficult then most are willing to go through to crack. The hacker will just move to an easier location.

In short, I recognize the security issues with wireless, but for most home users it is plenty.

Brian

 

[djdrastic]

It's plenty easy to Haxxx0r people's wlans , since either

1)They don't turn on security
2)They have no friggin idea what a MAC is
3)They don't password protect / ssh or whatver their stuff

 

[Buddha Bart]

Originally posted by: SaigonK
I am waiting for SSL over wireless, now THAT will be really nice!

SSL is a Transport layer protocol (in fact, its been renamed TLS, transport layer security, for a long time, people just call it SSL out of habit).

You can run it over wireless, even over carrier pigeon, to your hearts content.

As for turning off SSID broadcast, there's no point. Same for MAC filtering. They won't even slow a hacker down.

Changing your WEP key however, is extremely effective. The fact that WEP can be cracked is a done deal, however statistically it takes a lot of packets. So as long as you understand your odds, and rotate your key appropriatly, you're dang-near-invulnerable (to people outside your network, its still a shared medium so you gotta trust all your users).

FAQ #9 About how long would it take to get the password for a network with AirSnort?

bart

 

[skyking]

Thanks for the link, Bart. Simple as rotating a WEP once a week. Heck, once a month for a home user. Now to get peeps to implement that..........

 

[JackMDS]

ttt