[nycbug-talk] How secure: wireless + ssh?

[Isaac Levy]

Hey All,

On Dec 23, 2005, at 12:48 PM, Trish Lynch wrote:

>>> Most access points will allow you to setup filters on the MAC.
>>
>> Many OS's allow you to change your MAC.
>> --
>
> Yes, but you still have to guess valid macs, right? guess thats  
> firly easy while sniffing.
>
> seriously its just another minor layer, but it won't help keep  
> someone from sniffing the wireless.
>
> Why use WEP? use WPA, it addresses the issues with WEP.

WPA is definately nicer than WEP, but it's still crackable (and in  
some instances, requires less wireless packet capture to perform a  
successful crack than WEP even):

http://wifinetnews.com/archives/004428.html

"Both the WPA and 802.11i documentation recommend a minimum 20- 
character password. Unfortunately, this small tip is buried in a lot  
of highly technical information, and therefore unavailable to the  
typical SOHO user."
http://www.informit.com/articles/article.asp?p=370636&rl=1

--
If it's something you care about, change passphrases often- it's  
quite effective dealing with WEP/WPA crack threats, as they both  
simply take time to actually crack the keys.

http://en.wikipedia.org/wiki/ECHELON

Rocket-
.ike