What type of wirless network to use?

[Xcusme]

Re: What type of wirless network to use?

Disabling SSID broadcast is only marginally effective. It will stop only the most casual snoops because WinXp won't list your AP (access point) in the available networks list. I put the disabling of the SSID in the same category as using MAC filtering to keep folks from getting an IP from your router. One single tool will reveal both pieces of info in just a few seconds. As was mentioned in this thread, security should be multi-layered. To say that just using MAC address filtering will prevent someone from using your router even if they crack your 128bit encryption isn't true. If your WEP is hacked, it's trivial to clone your MAC addy and gain access. You can disable the SSID broadcast and stop some folks, you can use MAC address filtering and stop a few more, you can use WEP and stop even more.

Two years ago, on a frequently driven 30 mile trip, I logged approx. 100 access points. Of these 100, 20% were encrypted, 80% were wide open. Recently, I made the same 30 mile drive and logged over 1000 access points, 40% were encrypted, 60% still open. So things are getting better as folks are becoming better informed and realizing that open access points are a threat to their own computers and personal data.

Things you can do to make things harder for the bad guys:
Use a router-firewall
Change the default login and password of the router
Turn on WPA or WPA2 encryption
Use at least 8 characters for the passphrase (no dictionary words)
Block unused ports in the operating system.
Use a password to log into Windows
Stop using the default administration permissions for your login name
Don't share your whole hard drive
Know what you're doing with P2P sharing programs etc.........

 

[i386]

Re: What type of wirless network to use?

He's right. Sadly, most folks couldn't tell you what the Desktop is or what the right mouse button does. So Norton's $39.99 "fix it all" in a box becomes pretty attractive. It also provides me job security when it breaks or slows down your computer.

But back on topic with my $.02
Wireless G is the best bang for the buck. It's many times faster than your best residential (and most business) Internet connections so it's not going to be a bottleneck. You'll appreciate the extra speed (faster than 802.11B) on your LAN when copying large files, lots of mp3s etc...

Is N officially ready yet or is it still each vendors interpretation of the proposed standard?

 

[Plainsman]

Re: What type of wirless network to use?

Disabling SSID broadcast is only marginally effective. It will stop only the most casual snoops because WinXp won't list your AP (access point) in the available networks list. I put the disabling of the SSID in the same category as using MAC filtering to keep folks from getting an IP from your router. One single tool will reveal both pieces of info in just a few seconds. As was mentioned in this thread, security should be multi-layered. To say that just using MAC address filtering will prevent someone from using your router even if they crack your 128bit encryption isn't true. If your WEP is hacked, it's trivial to clone your MAC addy and gain access. You can disable the SSID broadcast and stop some folks, you can use MAC address filtering and stop a few more, you can use WEP and stop even more.

Two years ago, on a frequently driven 30 mile trip, I logged approx. 100 access points. Of these 100, 20% were encrypted, 80% were wide open. Recently, I made the same 30 mile drive and logged over 1000 access points, 40% were encrypted, 60% still open. So things are getting better as folks are becoming better informed and realizing that open access points are a threat to their own computers and personal data.

Things you can do to make things harder for the bad guys:
Use a router-firewall
Change the default login and password of the router
Turn on WPA or WPA2 encryption
Use at least 8 characters for the passphrase (no dictionary words)
Block unused ports in the operating system.
Use a password to log into Windows
Stop using the default administration permissions for your login name
Don't share your whole hard drive
Know what you're doing with P2P sharing programs etc.........

Excellent post. Some of the people asking questions here don't know a lot about computer, networks and security. Just as I don't know much about a boat or a motor. It helps to explain things even if if you do over and over again.

And i386 has excellent points too.

N wireless, what happened to A. I thought it was B, then G then A.

 

[mscher]

Re: What type of wirless network to use?

........Even if you can break the 128 ecryption you still cant get access until you put the MAC address in.

Wanna bet ......?

How would one break the 128 bit encryption and gain access to a secured wireless network?

Is there a safer way to protect a wireless LAN?

Thanks

 

[troypolla]

Re: What type of wirless network to use?

Not that I know of. I live on a dead end street so its not like people are driving down here to try to hack it anyway. I am paying for 1.5 megabit and I want to use it when I need it.

 

[Plainsman]

Re: What type of wirless network to use?

Just remember, anything is better than nothing. It's up to you how far you want to go to secure you computers.

 

[Xcusme]

Re: What type of wirless network to use?

Sadly, either flavor of WEP (64 bit or 128 bit) can be cracked in minutes, it's horribly flawed. All one has to do is Google Wep Crack and you'll find plenty of info, it's no big secret. A bit of hardware and software and you too can crack your own router's WEP. Hacking someone elses AP is illegal and to my way of thinking morally wrong. Just because my neighbor doesn't have a clue, doesn't gives me the right to leech off his service, but that's just me. A pcmcia or built-in wifi card and a Linux PenTest distro are all that's needed.
Actually, I hold the router manufacturers responsible for a lot of the problem. They make it too easy for the average person to connect a wireless router and get it up and flying but fail to explain the importance of protecting the installation. On the same token, people don't read. The security functions are built into the router, people just don't turn them on, they're off by default. We know all to well that when a piece of computer gear doesn't work out of the box, it goes back to the store for 'something that's easier' . They wouldn't sell too many routers if all the protections were enabled by default....kinnda like Microsoft. Read, stay informed, ask questions...and be safe.

 

[i386]

Re: What type of wirless network to use?

As usual, right on the money Xcuseme. d