On Wed, 21 Jan 2004 17:04:45 GMT,
(E-Mail Removed) (Roger Blake) wrote:
>On Tue, 20 Jan 2004 03:56:43 GMT, mfell2112*NOSPAM*@yahoo.com <mfell2112*NOSPAM*@yahoo.com> wrote:
>> From day one I could never access my downstairs machine. I just
>>spent two hours on the phone with Linksys tech support.The verdict?
>
>The verdict? Wireless networks are inherently less reliable than
>wired networks, not to mention the horrendous security problems.
>(Wireless LANs are trivially simple to break into.) It's your
>choice, but I'd stick with a traditional wired network, or perhaps
>phone line or power line adapters.
Fat lot of good that'd do with a roaming notebook. You mean I can't read news
and surf out on my deck with a cold one any more?
A properly designed and implemented wireless segment works as these things
were originally intended to do - which is *not* to replace wired segments, but
to allow roaming clients.
No doubt 98% of wireless installation are negligently configured because 98%
of the users are clueless, refuse to rtfm, and already had security risks up
the keister with their *wired* segments so why should the wireless side be any
better.
Don't advertise a wap, use mac filtering to allow only known macs to get
through the wap, enable 128 or 156 bit WEP if capable to keep out the kiddie
riff-raff, use mac filtering at the routing appliance so only known macs get
to WAN, don't use Windows 95/98/ME which are outrageously insecure at their
best, make sure all systems require per-user authentication, turn off
unnecessary network services and protocols, and run software firewalls and
rogue application blockers on everything that has a pulse.
It isn't perfect, but it's pretty resilient. If someone does manage to get
through the intrinsic weak spot (the wap) they're not going to get very far...
/daytripper