I don't have one at home, but i have just got a new laptop from work. I have noticed just how many people DON'T put any security on there routers.
I am sitting in my car having some lunch and i have my choice of networks to access. :whistle:
So if you have a wireless netwok just take a look and add some security.
just switching plain old simple WEP on should ward of the casual drifting laptop-carriers as there's enough unsecured stuff out there for them to pick and choose from! :) ...adding in MAC filtering helps I find
Yes, WEP and MAC-filtering does the job IMHO. As you say, with that enabled there are plenty of easier targets out there.
WEP, MAC-filtering and static IPs over here.
QuoteOriginally posted by Jamoe@Jun 22 2006, 02:51 PM
WEP, MAC-filtering and static IPs over here.
[post=132986]Quoted post[/post]
[/b]
I have a wep installed but am not sure what mac-filtering is?
If I only use my laptop on my wireless connection how do I work the MAC-filtering thingy?
Thanks
PEN
QuoteOriginally posted by ThePENDRAGON@Jun 22 2006, 04:41 PM
I have a wep installed but am not sure what mac-filtering is?
If I only use my laptop on my wireless connection how do I work the MAC-filtering thingy?
Thanks
PEN
[post=132994]Quoted post[/post]
[/b]
MAC-filtering means only allowing network cards on your network with a particular MAC-address. And such an address is unique to every netcard. It is typically written on a little sticker at the bottom of your laptop.
You need to access your router and find your filtering menu, often under advanced setup. What make and model is your router?
QuoteOriginally posted by ThePENDRAGON@Jun 22 2006, 02:41 PM
I have a wep installed but am not sure what mac-filtering is?
If I only use my laptop on my wireless connection how do I work the MAC-filtering thingy?
Thanks
PEN
[post=132994]Quoted post[/post]
[/b]
Start > Run > cmd
type ipconfig /all
and you should be presented with lots of info.
u should see something like this.
Physical Address. . . . . . . . . : 00-12-F0-B7-65-6F
thats a MAC address
whats your router model?
At home I have:
- MAC filtering enabled
- WPA-PSK encryption with >10 character key
- SSID broadcast disabled
- Non-standard and restricted LAN IP range
Paranoid? Me? :)
If some bugger really wants to hack my network, then so be it. I ain't making it easy for 'em though... :ph34r:
QuoteOriginally posted by Cadaver@Jun 22 2006, 03:48 PM
At home I have:- WPA-PSK encryption with >10 character key
- SSID broadcast disabled
If some bugger really wants to hack my network, then so be it. I ain't making it easy for 'em though... :ph34r:
[post=133017]Quoted post[/post]
[/b]
Mmmm!
To get 256bit WPA encryption you actually need a 63 character key.
SSID is broadcast in clear with every packet anyway so hiding it just makes it more difficult to actually get a connection yourself :D
Here are 3 random 63 character keys:
LUYklX&H5K1
iwC>AJJMxk'dj@cG.'!sVDFsg~4D8`'o&62jY8-!2J!!6jCzPi&Dv.*~\5PhU0F
jDSFXSjZ/7i,Y
mix them up and use them as passwords for your wireless network :)
I used Password Guru to make the keys - it's free - http://www.cezeo.com/products/passwordsguru/ (http://www.cezeo.com/products/passwordsguru/)
QuoteOriginally posted by BlueBall@Jun 22 2006, 04:54 PM
Mmmm!
To get 256bit WPA encryption you actually need a 63 character key.
I know that. I said I had >10 characters in my key as I didn't want to say how many I actually had. I could be using 63. :whistle: ;)
QuoteSSID is broadcast in clear with every packet anyway so hiding it just makes it more difficult to actually get a connection yourself :D
I know that as well. ;)
However, I also know my wireless network is there and what it's called. Others don't. Doesn't take too long to enter that info in manually when connecting a new device for the first time.
If someone were to do a scan for my wifi network, they should just see an unnamed network (if indeed their scan sees one at all). I doubt a random bloke with a laptop could be fagged with the extra step of trying to guess my SSID. Especially as my both my neighbours are broadcasting theirs. :doh:
My measures are only deterrents for a casual hacker, and just the way I do things (caveat: they're not necessarily the best way either). I have no doubt that if somebody was
desperate enough to hack my l'il ol' network, it could be done. :dummy:
QuoteOriginally posted by delanvital@Jun 22 2006, 04:15 PM
MAC-filtering means only allowing network cards on your network with a particular MAC-address. And such an address is unique to every netcard.
[post=133003]Quoted post[/post]
[/b]
Don't count on it...
http://www.google.com/search?q=mac+spoofing (http://www.google.com/search?q=mac+spoofing)
QuoteOriginally posted by DogMeat@Jun 22 2006, 08:27 PM
Don't count on it...
http://www.google.com/search?q=mac+spoofing (http://www.google.com/search?q=mac+spoofing)
[post=133040]Quoted post[/post]
[/b]
Yeah I know that. You had to spoil it, didn't you ;) As before, better than nothin'! :D
none of it is completely secure but at least some of it is harder to break!
I quite enjoy having other people on my network. Great way to meet new people. Dear god, I'm still very drunk...
And another friendly reminder :)
If you are using a Intel Pro Wireless 2200 B/G card remember to update your driver ;) The one that comes with the card/laptop usually sends out corrupted packages that makes some routers crash :) Found that out the hard way... :dummy:
http://www.grc.com/securitynow.htm (http://www.grc.com/securitynow.htm)
Listen to eps 10&11. Also, I recommend subscribing to this podcast.
My security is CAT5.
Only way they'll get access is by getting into the house, past the killer dog, 'Satans Little Helper', the cat and up three flights of stairs!
:devil:
QuoteOriginally posted by Othbarty@Jun 26 2006, 09:27 PM
And another friendly reminder :)
If you are using a Intel Pro Wireless 2200 B/G card remember to update your driver ;) The one that comes with the card/laptop usually sends out corrupted packages that makes some routers crash :) Found that out the hard way... :dummy:
[post=133665]Quoted post[/post]
[/b]
Yeah! We learned it the hard way at work. Took a while to solve :angry:
QuoteOriginally posted by Sn00ks@Jun 27 2006, 12:30 PM
My security is CAT5.
[post=133768]Quoted post[/post]
[/b]
Amen to that!
QuoteOriginally posted by Sn00ks@Jun 27 2006, 01:30 PM
My security is CAT5.
[post=133768]Quoted post[/post]
[/b]
In that case you'll need a firewall:
CAT5 Firewall (http://shop.btcv.org.uk/upload/images/standard/81_T71.jpg)
We used them once. Bored one day at work, and some little scrote on the uni student residence network was doing very naughty things. We cut his cat5 in the comms room with boltcutters, and left the severed end + connector pinned to his door, with a pic of the empty hole labelled with his house/floor/room number.
We were *very* bored, and he had really annoyed us too.
QuoteOriginally posted by Carr0t@Jun 28 2006, 10:43 AM
We used them once. Bored one day at work, and some little scrote on the uni student residence network was doing very naughty things. We cut his cat5 in the comms room with boltcutters, and left the severed end + connector pinned to his door, with a pic of the empty hole labelled with his house/floor/room number.
We were *very* bored, and he had really annoyed us too.
[post=133936]Quoted post[/post]
[/b]
:roflmao:
I take it you had no more trouble after that?
Well, no. Lack of connection meant he had very little way of causing trouble, at least of the kind that we care about :P