der_panzer
join:2003-12-18
Lebanon, TN
| reply to pcscdma
Re: Security is Holistic
said by pcscdma  :
WEP, WPA, AES, VPN, MAC authentication, hide broadcast SID
They don't work unless you turn them on!
Well said. An hour and a half of wardriving in Nashville yielded more than 600 APs. Only about 25% ran WEP, and less than 10% hide SSID.
We weren't even using a fancy setup with a high gain antenna. We had a USB 802.11b adapter on an extension cable slung around the rear view mirror (inside the car).
"There are only two truly infinite things - the universe and stupidity, and I am unsure about the universe" - Albert Einstein |
|
kv5e
Ride Free
Premium
join:2001-12-04
Mesquite, TX
| reply to pcscdma
While drive testing in the Metroplex (can you hear me now), I ran Net Stumbler on my laptop. 146 AP's in about 60 minutes. One third (mostly business) were WEP enabled. The other 2/3 were all open, probably with no MAC authentication, and most likely DHCP. A few of the open AP had changed the SSID, but most were defaulted.
I bet a lot of them were in trusted zones too, but it's like picking the neighbor's tomatoes; even if he doesn't have a fence then not yours for the taking so I don't try to connect.
Regards,
KV5E |
|
pcscdma
Chocobo Chocobo Random Battle
Premium
join:2004-01-14
Winterset, IA
clubs: | reply to kv5e
WEP, WPA, AES, VPN, MAC authentication, hide broadcast SID
They don't work unless you turn them on! |
|
kv5e
Ride Free
Premium
join:2001-12-04
Mesquite, TX | The best encryption is easily overcome by poor procedures in implementation and continued support.
Continued education and diligent administration of security policies is essential.
The wetware is still the critical path!
KV5E |
|
