Re: Wireless security

From: Juergen Nieveler (juergen.nieveler.nospam_at_arcor.de)
Date: 10/10/05 

Date: 10 Oct 2005 20:06:00 GMT

John Hyde <EJhyd@netscape.net> wrote:

> 1. I have read that WEP is broken. Is it really? Do I want to use
> something else? One of the laptops that will be connecting is a few
> years old and it's built in wireless supports WEP 128 but not other
> encryption as far as I can tell.

WEP can be broken with a few minutes of work and a few tools like
"Aircrack". You should use WPA instead. If the builtin system doesn't
support it, don't use it - buy another WLAN card.

> 2. MAC filtering seems to me to be a great idea. Adds a layer of
> security. If WEP is enabled, is the MAC address of the laptop also
> encrypted? Does it matter?

It doesn't matter. The encryption of WEP can be broken in minutes,
after that the attacker can see your MAC, adjust his computer, and he's
in.

> 3. Thinking out loud now. If my laptop is busy looking for wireless
> access points, and transmitting it's MAC address in the clear. Assume an
> attacker learns my MAC address. Then I get to my office and log on to
> the Wireless Access Point. It requires that I send the MAC encrypted.
> Does the attacker have a crib that will them to pry open WEP 128? If
> so, am I better off with just WEP and not MAC filtering?

WEP128 is broken, it's not even worth thinking about anymore.

Juergen Nieveler 

-- 
ebius tagline. This is a moebius tagline. This is a mo ...

Relevant Pages

  • Re: radius+ wireless
    ... if you or someone else has duplicated a MAC address on the same ... current set up with weak WEP and but decent authentication, ... You didn't mention what kind of wireless, what your coverage area is, ... gear, RADIUS might be sufficient. ...
    (Security-Basics)
  • Re: Activesync 4/WM5: Wireless network not available
    ... I'm getting the same effect on changing the router's wireless encryption to ... WEP - Activesync and the wireless network seem to be working together quite ...
    (microsoft.public.pocketpc.activesync)
  • Re: God I hate macs
    ... I've spent hours trying to set up the WEP password and trying other ... router, but won't travel to the internet. ... The only way I can connect to the internet is without wireless ... On the Mac, for some unfathomable reason, you can't just type ...
    (comp.sys.mac.advocacy)
  • Re: Stupid networking question!!
    ... The WEP password is definitely correct. ... MAC address filtering is usually only configurable for wireless ... Before you start to debug the wireless connection, ...
    (uk.comp.sys.mac)
  • Re: Wireless security
    ... >> I am in the process of setting up wireless access in our small office. ... I have read that WEP is broken. ... >> encryption as far as I can tell. ... MAC filtering seems to me to be a great idea. ...
    (comp.security.misc)
Quantcast