> ASE Labs: Secure your wireless routers!

Secure your wireless routers!

There are 20 messages in this topic Watch this topic for replies

Add Reply Back to forum "Computer Hardware" Back to Index

2014: Year of change. Joined: August 3, 2001 Status: Offline Posts: 10753 Rep:

Secure your wireless routers!

Fri Mar 10, 2006 2:50:55 PM #16456 Perm Link

I'm down the shore and I was running Netstumbler on the way down. I'd say over 70% of the wireless networks are insecure. Even more disturbing is that most of those networks haven't changed the defaults on the router at all. This is a call to action. Make sure you enable some type of encryption on your router and please change the SSID/password and do not broadcast it.

2014 is going to be a good year. More content, more streamlining. Be a part of history!

Reply Quote Send PM Profile

Is. Joined: December 29, 2005 Status: Offline Posts: 2180 Rep:

(No Title)

Fri Mar 10, 2006 3:02:34 PM #16457 Perm Link

I'm actually going to get a wireless, I currently have one that's wired. Networking is a bitch.

Said By blackwidow47
I know Im an ideot but I just proved that some of you are ediots too

Reply Quote Send PM Profile

Joined: December 6, 2005 Status: Offline Posts: 930 Rep:

(No Title)

Fri Mar 10, 2006 3:36:56 PM #16458 Perm Link

In response to FroogleDoop #16457

Said By FroogleDoop
I'm actually going to get a wireless,

for a second I thought you wanted to buz a radio... wireless the noun is a radio in my ears :S

Reply Quote Send PM Profile

Nihilistic Mystic Joined: December 19, 2005 Status: Offline Posts: 92 Rep:

(No Title)

Fri Mar 10, 2006 4:03:25 PM #16459 Perm Link

"Some sort" of encryption is really not even good enough and turning off SSID broadcast is completely useless. The router will still broadcast it's SSID, it just turns off the SSID beacon which makes its easier to find and makes it easier for users the automatically change networks. Any utility, such as netstumbler can get this through the routers probe requests, probe responces, association requests, and re-association requests all of which contain the SSID. WEP encrystion can be broken in a few minutes, although this may deter casual snooping. There are utilities out there that sit and generate traffic on you wireless network and after collection 5 million or so packets (3 or 4 minutes) they can figure out the key. Newer hardware supporting WPA provides much better security, but it does rely on the strength of your passwords and there are new tools out that can crack WPA with short password. Someone has written a mini RADIUS server that will run on the Linksys WRT54G/GS (http://www.tinypeap.com) which is likely the most effective way of protecting your wireless network around right now, asside from setting up you own RADIUS/PEAP server.

Edited at Sat Mar 11, 2006 1:55:20 AM

Reply Quote Send PM Profile

2014: Year of change. Joined: August 3, 2001 Status: Offline Posts: 10753 Rep:

(No Title)

Fri Mar 10, 2006 6:16:43 PM #16462 Perm Link

In response to Nihilistic Mystic #16459

Said By Nihilistic Mystic
WEP encrystion can be broken in a few minutes, although this may deter casual snooping. There are utilities out there that sit and generate traffic on you wireless network and after collection 5 million or so packets (3 or 4 minutes) they can figure out the key.

I suggest you do some sort of research. 5 million packets on a home network will take DAYS unless you are actively flooding the AP with packet requests. Any type of deterent will stop 99% of the malicious types.

2014 is going to be a good year. More content, more streamlining. Be a part of history!

Reply Quote Send PM Profile

Nihilistic Mystic Joined: December 19, 2005 Status: Offline Posts: 92 Rep:

(No Title)

Mon Mar 13, 2006 10:28:01 AM #16471 Perm Link

In response to Aron Schatz #16462

OK so 3 or 4 minutes is a bit of an exaggeration, but there are plenty of ways to generate traffic on a target network, there are toys for forcing de-auths of clients which generates traffic, and the best way re-injecting captured traffic, especailly ARP packets can easily be identified and generate a good amount of traffic which appears to come from a client and don't interfere with normal network operation. Also, if you use the WEP key generator included with alot of routers' several of them are flawed especially when creating WEP64 keys. WEP64 includes a 40 bit key length, flaws in these key generators reduce that to 21bits effectively, which can be brute force cracked in a few minutes.
EDIT:
Also it would seem I am a bit behind the times, there are tools out now that can crack WEP64 with about 200,000 packets adn WEP128 with about 500,000.

Edited at Mon Mar 13, 2006 6:51:45 PM

Reply Quote Send PM Profile

Vintage "Mr.Glass" Joined: March 25, 2006 Status: Offline Posts: 222 Rep:

(No Title)

Sat Apr 1, 2006 12:18:08 PM #16784 Perm Link

My brother and I have been trying to Secure our Wireless Network From a Heartless Neighoor who Steals our Internet

Reply Quote Send PM Profile

Retro Grade Joined: August 16, 2003 Status: Offline Posts: 2958 Rep:

(No Title)

Sun Apr 2, 2006 10:58:36 AM #16820 Perm Link

I steal the school's internet with my old laptop. Sit outside at the main entrance and play Counter-Strike during lunch. School doesn't block it at all. In fact, the only reason I bought a wireless card for my 7 year-old laptop was to do that. At home I plug it into our router.

Michael: Jodie, how's my schedule look for today?
Jodie: You've got a conference and dinner party at the Japanese Embassy regarding wildlife protection.
Michael: Oh, yeah...sorry, but I'll have to cancel that. I'm heading out to save America!

Reply Quote Send PM Profile

Joined: December 6, 2005 Status: Offline Posts: 930 Rep:

(No Title)

Sun Apr 2, 2006 11:26:57 AM #16821 Perm Link

hehe... my school is 100% wired... but if it weren't it probably wouldn't be blocked...

Reply Quote Send PM Profile

Vintage "Mr.Glass" Joined: March 25, 2006 Status: Offline Posts: 222 Rep:

(No Title)

Sun Apr 2, 2006 4:04:44 PM #16822 Perm Link

How do you possibly play counterstrike on a laptop... you gotta get pwned?

Reply Quote Send PM Profile

Retro Grade Joined: August 16, 2003 Status: Offline Posts: 2958 Rep:

(No Title)

Sun Apr 2, 2006 6:22:17 PM #16826 Perm Link

In response to Vintage #16822

Said By Solidarity
How do you possibly play counterstrike on a laptop... you gotta get pwned?

I get killed regardless. Playing it with a usb mouse makes little difference in my Counter-Strike abilities. It just determines whether I get a poorly aimed-shot off or just die. I typically use a mouse though.

Michael: Jodie, how's my schedule look for today?
Jodie: You've got a conference and dinner party at the Japanese Embassy regarding wildlife protection.
Michael: Oh, yeah...sorry, but I'll have to cancel that. I'm heading out to save America!

Reply Quote Send PM Profile

Vintage "Mr.Glass" Joined: March 25, 2006 Status: Offline Posts: 222 Rep:

(No Title)

Mon Apr 3, 2006 12:56:10 PM #16846 Perm Link

Oh because when you said "Lap-Top" the first thing that popped into my head is the little red thing you move the mouse with in the middle ... etc. lol

Reply Quote Send PM Profile

Joined: December 6, 2005 Status: Offline Posts: 930 Rep:

(No Title)

Tue Apr 4, 2006 8:53:27 AM #16855 Perm Link

red touchpads ?

Reply Quote Send PM Profile

2014: Year of change. Joined: August 3, 2001 Status: Offline Posts: 10753 Rep:

(No Title)

Tue Apr 4, 2006 8:56:14 AM #16856 Perm Link

In response to free::zombie #16855

I'm sure he means the eraser head type.

2014 is going to be a good year. More content, more streamlining. Be a part of history!

Reply Quote Send PM Profile

Caramoore Joined: June 16, 2004 Status: Offline Posts: 10 Rep:

(No Title)

Tue Jun 27, 2006 10:06:27 AM #18500 Perm Link

They should make all wireless routers so that you have to WIRED into them to change settings...

Reply Quote Send PM Profile

2014: Year of change. Joined: August 3, 2001 Status: Offline Posts: 10753 Rep:

(No Title)

Tue Jun 27, 2006 10:32:50 AM #18501 Perm Link

In response to Caramoore #18500

That's an okay suggestion unless there are no computers on the network that are hardwired.

Manufacturers should say in the setup program that a password will be given or can be typed in by the user. It is not that hard to include this in the setup.

2014 is going to be a good year. More content, more streamlining. Be a part of history!

Reply Quote Send PM Profile

I don't quote Joined: September 2, 2005 Status: Offline Posts: 1189 Rep:

(No Title)

Wed Jun 28, 2006 6:39:36 AM #18553 Perm Link

In response to Caramoore #18500

As long as you have a wired computer, that's fine.

Like Aron said, what if you don't have any wired clients?

-SHCase

Reply Quote Send PM Profile

2014: Year of change. Joined: August 3, 2001 Status: Offline Posts: 10753 Rep:

(No Title)

Wed Jun 28, 2006 7:10:01 AM #18566 Perm Link

I keep seeing this free wireless internet service called "Linksys" everywhere I go. They must have a good service.

2014 is going to be a good year. More content, more streamlining. Be a part of history!

Reply Quote Send PM Profile

Joined: May 31, 2006 Status: Offline Posts: 573 Rep:

(No Title)

Wed Jun 28, 2006 7:14:56 AM #18571 Perm Link

In response to Aron Schatz #18566

I've seen others that offer a good service like "Netgear." I'm glad there are organizations like "Linksys" and "Netgear" that offer free internet to everyone.

Said By Einstein
Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.

Reply Quote Send PM Profile

I don't quote Joined: September 2, 2005 Status: Offline Posts: 1189 Rep:

(No Title)

Thu Jun 29, 2006 6:30:44 AM #18605 Perm Link

It is troubling that the amount of insecure wireless networks keeps going up in ratio, not down. You would think that people would finally get a clue. Guess not.

-SHCase

Reply Quote Send PM Profile

Page: [1]

Add Reply Back to forum "Computer Hardware" Back to Index

Quick Reply