Lets talk about wireless security.

[AaronM]

Currently I have my wireless router set for 128bit WEP encryption as well as using the MAC address filter.

The WEP makes me feel a bit more secure but it clearly slows down the connection and it tends to drop the connection from time to time.

Are both nevessary? I would think that the MAC filter alone would be enough but since I am not very well versed in these things.....I thought I would run it by a few of you highschool kids.

[xxxoutsourcing]

From what i have been told the MAC filter is enough, lets hear it..
Only thing that can be seen is the wireless network within range.

Intresting question Aaron.

[Juicy D. Links]

blowfish encryption

[AndrewKanuck]

MAC's can be cloned - but do people within range of your AP care enough to be doing that much digging around so they can access your wireless network?

It's enough for an AP.

[cyberpunk]

Depends on what you need to protect. If you are pulling CC info, your own to buy stuff, or clients then I'd leave the WEP in place and for those of you doing things that that Uncle Sam would beintrested in don;t be fooled by 128bit crypto it doesn't protect you worth a shit if someon really wants to see what your doing.

If anyone wants info on real secure crypto stuff ping me on ICQ

[fris]

good document i have by internet security systems

http://www.dreambigmedia.com/wireless_security.pdf

goes over a lot of stuff

[xxxoutsourcing]

Originally posted by juicylinks
blowfish encryption

412 or summot, tooooo slow man...
or am i wrong?

[xxxoutsourcing]

Originally posted by egonetworks
MAC's can be cloned - but do people within range of your AP care enough to be doing that much digging around so they can access your wireless network?

It's enough for an AP.

Educated, thank you.... did not know that.

[OzMan]

Did you see that recent story about the news reporters who flew over LA with a wireless laptop and were able to access several thousand home and business wireless networks!

So for the moment anyhow it seems there are more than enough easy targets for wireless hackers without them bothering to go after the harder encrypted networks.

[AndrewKanuck]

Originally posted by xxxoutsourcing
Educated, thank you.... did not know that.

Just takes a network card with a flashable PROM chip and someone with a prom writer. I've got one laying around as I used to code ASM onto 8031 chips...we toy'd around with Cloning mac's back when we were coding out firewall software for our wireless isp.

[erehwon]

Originally posted by AaronM
Currently I have my wireless router set for 128bit WEP encryption as well as using the MAC address filter.

The WEP makes me feel a bit more secure but it clearly slows down the connection and it tends to drop the connection from time to time.

Are both nevessary? I would think that the MAC filter alone would be enough but since I am not very well versed in these things.....I thought I would run it by a few of you highschool kids.

The enviroment I come from works with the belief that if you want to insure the security of the information on your network, avoid using wireless.

With that said, if you insist on using wireless, make your network more of a challenge for the random hacker to give up wanting to access your network and find an easier mark.

One of the better FAQ's can be found at Michigan Wireless' Wireless Networking Basic Security Checklist.