Wireless Security

Submitted by jmarki on 10 April 2007 - 4:56pm

I am reading the the Today newspaper and there's an article on wireless security. "Go wireless, but keep intruders away", it says. All's well and good, till one reads the contents:

Summary of contents

  • Router placement: Place in the centre of the house
  • Router password: Change admin password
  • Disable SSID: Disable SSID broadcast
  • Add a filter: Enable MAC filtering
  • Limit the connection lines: Limit DHCP connections to the number of actual computers connecting
  • Enable security: Use WEP at the minimum, WPA if possible

Disable SSID broadcast? Add a MAC filter? Enable WEP security?!? Hello, these DON'T work!!! SSID and MAC is easily discovered via packet sniffing. MAC addresses can be easily spoofed. And the latest WEP crack published last week managed to crack it within 60 seconds.

Geez, when will proper security advice be given from the mainstream press.

Proper advice:

  • Configure your wireless using a wired connection.
  • Change the admin user and password, using a good long password.
  • Give your network a unique name (no, "linksys", "default" are not unique).
  • Leave SSID broacast on. SSID broadcast off only gives connection headaches with no gains in security.
  • Restrict by MAC address if you want to, no harm done, not much gain either.
  • And most importantly, use WPA-TKIP encryption (WPA2 is even better) with an extremely long, and good passphrase consisting of UPPER, lower, numb3rs, and maybe even $ymb0ls.

Trackback URL for this post:

http://www.jmarki.net/drupal/trackback/37

Comments

Seriously, the best way to
10 April 2007 - 7:12pm — NIxxy (not verified)

Seriously, the best way to solve this:
Just use wired connections... Added protection via physical barrier, much tougher to access your network! Sticking out tongue
I intend to do that soon...

The best way is to maintain
15 April 2007 - 4:06pm — Alien Cat (not verified)

The best way is to maintain absolute security is to use floppy/portable disks and burn them each time you finish using them.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <pre> <img> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
  • Textual smileys will be replaced with graphical ones.

More information about formatting options

Smileys

Smileys
SmileyAcronyms
=)=) :) :-) :smile:
;);) ;-) :wink:
=(=( :( :-( :sad:
=D=D :D :-D :lol:
}:)}:) }:-) :evil:
=p=p =P :P :-P :tongue:
O.oO.o :O :-O :shocked:
:?:? :-? :puzzled:
8)8) 8-) :cool:
:jawdrop::jawdrop:
:sick::sick: :barf: