Xatrix Security

[Quaon]

I think it would be good to have a brief rundown of all the options open to the public in terms of wireless security. To name a few:

WEP
WPA2
MAC Filtering

Lets have everyone go ahead and list their own, or tell what is their opinion on each. For instance, which is most secure vs. which allows fastest information transfer.

[muto]

WEP and WPA are both horribly broken, you can crack them in a minute. WPA with AES is still unbroken, but requires a higher end router.

MAC address filtering will only keep out someone casually trying to connect - as soon as one of your client machines sends any data, they can sniff a valid MAC, and use that. In a very busy area this is harder.

WPA2 with a very strong key and MAC filtering is about the best you've got, but personally, I'd make sure that none of my security relies on my wireless staying secure - put it on a seperate VLAN.

[Xcellerator]

If you want complete security, just have absolutely now wireless connections, only LAN connections to a PC... But if you want to use a laptop wirelessly (to access xatrix) then yes, WPA2 with Mac Filtering would be the best bet...

[TJ_2k7]

I did use WPA but after i found out about cracking it under minute and posting about it I changed to WPA2 right away.
Plus; I've always used Mac Filtering so I'd always considered my wireless to be pretty secure.

There's alot of Wireless networks in my area that use WEP (Still ) so if anyone is gonna try and crack one they sure ain't gonna go for mine. Not that i think anyone in my area would do that =/

[Xcellerator]

Some guy brought a tiny little netbook into my school, and at lunch he went upstairs to an empty classroom, and cracked the wireless (WPA-PSK) there wasn't much point the password was:

Code: Select all

***admin

*** being the schools initials i.e:

Code: Select all

***-sr-001

. LOL! It was that easy, now we bring psps in and browser teh internet at school!

[TJ_2k7]

I don't see the point of using the school internet unless you use a proxy or vpn as you get restricted =/

[Xcellerator]

the point is that using the 'file:/' command you can access the servers and AD isn't supported on psp so no restrictions...
and if I want internet I'll just use my proxy...

[phiber]

I've been playing around with 100 gigs of rainbow tables against WPA TKIP.
The target AP is so "quiet" that within 72 hrs I was only able to get 1 handshake. Wasn't around to death him at that time

Will post more info soon.