password protecting my wireless network
in [Mac Systems]
|
Prev: Terminal wedged: "Can't open display: :0.0"
Next: Confusion about MacSpeech Words-Per-Minute claims
From: Tom Stiller on 26 Jan 2010 07:45 In article <260120100042317389%nospam(a)nospam.invalid>, nospam <nospam(a)nospam.invalid> wrote: > In article <sdfisher-825A6E.21390625012010(a)mara100-84.onlink.net>, > Steven Fisher <sdfisher(a)spamcop.net> wrote: > > > > > And I recommend against turning of the SSID broadcast. That adds no > > > > measurable security. It adds a lot more complication to your own life > > > > than to that of any serious intruder. > > > > > > i disagree with that one. it adds no complication at all, but it does > > > add a layer by being invisible to a quick scan. chances are the person > > > will find an open network elsewhere and jump on that anyway. > > > > It definitely adds complications if any of your devices physically move > > on and off the network... > > i've found absolutely no problem connecting to any network at all, > whether it's mine (invisible) or a public network (usually visible, but > not always). passwords are saved, and it even auto-connects when in > range, and that's with multiple wifi clients. Since nearby users don't see it, what are the odds that they will pick an interfering channel when setting up their own WAP? As been said, it adds no security and is a needless complication. -- Tom Stiller PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3 7BDA 71ED 6496 99C0 C7CF
From: Warren Oates on 26 Jan 2010 08:13 In article <260120100004089232%nospam(a)nospam.invalid>, nospam <nospam(a)nospam.invalid> wrote: > there is no need whatsoever for mac address filtering with a good > passphrase and wpa encryption. mac addresses can easily be spoofed and > if someone is able to crack wpa, getting past the mac filter is > trivial. I filter MAC addresses just to annoy the bozos who keep trying to crack/guess my password. They can't, and of course they can spoof a different MAC, but it keeps me happy. I never turn off the SSID broadcast. -- Very old woody beets will never cook tender. -- Fannie Farmer
From: Warren Oates on 26 Jan 2010 08:21 In article <260120100053176156%nospam(a)nospam.invalid>, nospam <nospam(a)nospam.invalid> wrote: > it's not a problem for macs, iphones or ipod touches. you can always > get to 'other' and give it an ssid, which it will then save so you need > not do it again. there might be another device that acts the way you > describe, but that sounds like it has a bug and enabling ssid is just a > workaround for it. Yada. You're just one of those guys who's "smarter than everyone else." Any list of (home) wireless security best practices will tell you that SSID suppression and MAC filtering provide no _true_ security and can cause problems. I go with standards, not shamanism. -- Very old woody beets will never cook tender. -- Fannie Farmer
From: Tom Stiller on 26 Jan 2010 10:53 In article <00dab92d$0$26780$c3e8da3(a)news.astraweb.com>, Warren Oates <warren.oates(a)gmail.com> wrote: > In article <260120100004089232%nospam(a)nospam.invalid>, > nospam <nospam(a)nospam.invalid> wrote: > > > there is no need whatsoever for mac address filtering with a good > > passphrase and wpa encryption. mac addresses can easily be spoofed and > > if someone is able to crack wpa, getting past the mac filter is > > trivial. > > I filter MAC addresses just to annoy the bozos who keep trying to > crack/guess my password. They can't, and of course they can spoof a > different MAC, but it keeps me happy. I never turn off the SSID > broadcast. That's OK until a guest visits and wants to use her laptop and gets *really pissed* when the password you gave her shows a good connection but she still has no connectivity. -- Tom Stiller PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3 7BDA 71ED 6496 99C0 C7CF
From: Warren Oates on 26 Jan 2010 12:21
In article <tom_stiller-2EFD3E.10531626012010(a)news.individual.net>, Tom Stiller <tom_stiller(a)yahoo.com> wrote: > That's OK until a guest visits and wants to use her laptop and gets > *really pissed* when the password you gave her shows a good connection > but she still has no connectivity. Sorry, I meant I _ban_ certain MAC addresses. Everything else gets through. -- Very old woody beets will never cook tender. -- Fannie Farmer |