 trparkyApple... YUMPremium,MVM
join:2000-05-24
Cleveland, OH
kudos:1 | reply to inmuck
Re: Debunking the Myth of SSID Hiding Are you saying that hiding the SSID is useless? It doesn't increase security?
--
WedgeAntilles250 |
|
Host:
Wireless Networking
All Things Unix
Cox HSI
Efficient
Southwest Chat
| He's been saying it for a long time, but keeps getting drowned out by the mindless marketing drones from both schlock and otherwise reputable companies who perpetuate the myth so that they have another check box in the feature column.
--
Just because NetStumbler can't see it doesn't mean it's invisible. |
|
| reply to trparky
said by trparky:
Are you saying that hiding the SSID is useless? It doesn't increase security?
If I may presume to answer for DSLrgm, the answer is yes.
Disabling SSID broadcast does no more to prevent wireless security breaches than taking your name off the door prevents burglary. It provides a modicum of obscurity, which is not security.
Your SSID still can be discovered with many readily available tools, and anyone who can crack your encryption (the only real security) would have such tools. |
|
| reply to trparky
Are you saying that hiding the SSID is useless? It doesn't increase security?
------------------------------
It does very little to increase your security posture. The original intent of the SSID had nothing to do with security. It is more akin to a VLAN identifier than anything else.
Even if you turn off SSID broadcast, anyone worth their salt can still see your SSID using open source wireless tools such as Kismit. The SSID is still sent out in the clear when you send traffic over the wireless link even with WEP enabled.
I agree that propagating the stance that "SSID disabled" as a security feature does more harm than good. Anyone involved in the infosec community knows that the first rule is that "security through obscurity" simply doesn't work. It actually promotes a false sense of security. Sort of like the National Guard in airports.... 
--
Info Network Security:»www.packetdefense.com |
|
