On Mon, 1 Sep 2003 14:30:22 -0500, yirm spoketh
>"Lars M. Hansen" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed).. .
>
>> The recommended procedure to secure your wireless access points is to
>> disable SSID broadcasts
>
>Which does next to nothing because SSIDs can be detected easily anyway.
>
But it does enough to keep the "accidental" snooper away.
>
>> use the best encryption possible for your setup
>> (128 bit WEP, or preferably WPA)
>
>Well, we know WEP is iffy at best. How good is WPA? My router/NIC
>(Netgear) don't support WPA at this point to my knowledge.
>
WEP isn't the best encryption available, but it's better than none, and
it does keep the amateurs out.
WPA is a lot better. It offers a few choices with regards to encryption
algorithm, including AES. I know the Linksys access points now support
WPA through firmware upgrades (1.08 for the WAP54G supports WPA, it
appears otherwise very unstable, at least for me). Other brands will
probably come with firmware upgrades for WPA as well. Right now, WPA is
really only available for WindowsXP. W2K users have to purchase a 3rd
party software solution...
>
>> and also do MAC address filtering on
>> the wireless access point.
>
>How easy is it to spoof a MAC address? How would a hacker know the MAC
>address to spoof? It seems like this is a good security precaution. How
>easily can it be defeated?
>
>-Jeremy
>
Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)