Re: how do I secure my Wi-Fi network

From: Philip Herlihy (foof8501_at_herlihy.eu.veil.com)
Date: 07/10/04


Date: Sat, 10 Jul 2004 10:03:53 +0100

The older standard, 802.11b (11Mb/s) has an encryption scheme called WEP,
which uses keys of either 64bit or 128bit (stronger). WEP is always off by
default, and most folk don't turn it off, which is why some of them get
hacked. WEP isn't proof against a highly skilled, determined and patient
hacker if you send a lot of data over your links without rotating the keys
now and then, but such people won't be interested in investing that much
time and effort in the likes of you and me unless we have something they
really want. Even then, WEP is enough of a barrier that they would be
likely to consider getting access by some other method, including physical
access to a machine. So, unless you have something valuable to hide, turn
on WEP and you'll be way beyond the "low-hanging-fruit" category. Rotate
the keys every month (depends on data volumes, so may be more often) and
you'll be very difficult to hack. (Most configurations allow for the
storage of four keys which you can then select one by one).

The later standard, 802.11g, supports something called WPA, which is
designed to be much harder to crack, even by experts. I bought a set of kit
which supports it (US Robotics) so that I'd be familiar with it in case a
paranoid customer demanded it, but I don't use it myself as I want to be
able to connect up my PDA, which is 802.11b.

I'd advise buying 802.11g kit anyway, as it has higher bandwidth (54Mb/s)
and better range. Of course, if you're really paranoid, range might not be
an advantage! The older kit (802.11b, and that's what it'll be if it
doesn't specify) is getting very cheap now.

-- 
####################
##  PH, London
####################
"Qa" <anonymous@discussions.microsoft.com> wrote in message
news:2a01401c46602$e9eae670$a501280a@phx.gbl...
> I want to switch my network from cable to wireless. But
> with all the talk of unauthorised people able to access
> wireless networks to log on, I'm concerned as to how
> secure wireless networking really is. Can wireless
> networking be set in a way to prevent unauthorised access
> to any of aspect of the network, including internet and
> most of all file sharing? How do I go about it? Any ideas
> of good, simple websites? Thanks


Relevant Pages

  • Re: Is Dynamic WEP Secure Enough?
    ... Forgive me for my ignorance and please correct me if I am wrong OR if I have wrongly understood these/ any of the replies to the Dynamic WEP question ... different users changing their keys at different points in time ... The physical security that is existing on the ground that can contribute and hence the probability of finding out a parking lot hacker ... WEP can be cracked in less than ten minutes (even on a network without ...
    (Security-Basics)
  • Re: wep still does not work
    ... wireless network open, that works perfectly. ... As Im under breezy, Ive tried the brand new dapper live cd, knoppix ... generate 64-bit keys, so if you're using 128-bit keys, the string ... I used WEP quite effectively in Breezy on a PPC system, ...
    (Ubuntu)
  • WPA/WEP key discovery time
    ... determine how often to cycle the keys used in a WEP and WPA installation. ... abuse the machines on the network. ...
    (sci.crypt)
  • Re: Is Dynamic WEP Secure Enough?
    ... rotate keys every three minutes. ... or else you might as well keep the network open and turn WEP ... > corporate SSID (I have others with much lower security requirements). ...
    (Security-Basics)
  • Wireless Network Connection Dropped at Re-Boot
    ... cards and this thing talking to each other. ... You get to pick the WEP key that you want to ... wireless networks," which in my case are known ... if I select "linksys" I'm asked for my network key ...
    (microsoft.public.windowsxp.network_web)