The promiced wireless MAC post....
So as not to upset the geeks (not me maam, I've got leather trousers...), here is something interesting (yawn) info on the allegedly safe practice of securing your wireless LAN by use of MAC addresses...
I happened to be in a different locality recently, where a wife, who shall remain nameless, needed internet access quickly and cheaply... having wireless hardware and experience, we fairly easily managed to secure such access through a conveniently placed open access network... As this was obviously a community connection, due to their choice of disregarding any kind of security, we made the connection, did what we needed, and of course logged off, forgetting all connection details afterwards...
Out of curiosity however, and with the aid of a commercially available network management tool which will also remain nameless... So with the aid of Wildpackets Airopeek NX I found I could quite easily monitor wireless traffic, including MAC addresses of client adapters, without really trying. When I tried, I could even tell what kind of traffic they were sending/receiving, i.e. web stuff, messenger etc. based on the ports their net connection was using... The implication is that if you grap the MAC address, you can join the inner circle of trusted MAC addresses by simply using a cunning program that changes your adapter's MAC address to a 'safe' one. I'll not name the tool that I know of, but they're not hard to find...
And the point? Well I know some people that think they are secure by just using a WEP... erm... airsnort + enough traffic = WEP, or hiding their SSID broadcasts...erm sniffers... or using MAC authentication... protocol analysers such as the one I used, and a swift alteration of MAC address...
But back to the point... If you are worried about your wireless security, spend some time/money/effort and implement an actual secure authentication method... WPA, TKIP or to be really safe, a RADIUS authentication server... Personally I have none of the above, relying on the simple WEP method, but then again,
a) the majority don't know where I live..
b) I regularly monitor my router for accesses..
c) I have various ways of scanning the local area...
d) Being a nerd, I have a pocket protector.
In summary, take the time and the responsibility to look after your network, as there people even cleverer than me without my (un)questionable moral stance who may seek to do naughtiness at your expence... You'd never catch me expoiting someone's wireless insecurities... I cover my tracks ;)
I happened to be in a different locality recently, where a wife, who shall remain nameless, needed internet access quickly and cheaply... having wireless hardware and experience, we fairly easily managed to secure such access through a conveniently placed open access network... As this was obviously a community connection, due to their choice of disregarding any kind of security, we made the connection, did what we needed, and of course logged off, forgetting all connection details afterwards...
Out of curiosity however, and with the aid of a commercially available network management tool which will also remain nameless... So with the aid of Wildpackets Airopeek NX I found I could quite easily monitor wireless traffic, including MAC addresses of client adapters, without really trying. When I tried, I could even tell what kind of traffic they were sending/receiving, i.e. web stuff, messenger etc. based on the ports their net connection was using... The implication is that if you grap the MAC address, you can join the inner circle of trusted MAC addresses by simply using a cunning program that changes your adapter's MAC address to a 'safe' one. I'll not name the tool that I know of, but they're not hard to find...
And the point? Well I know some people that think they are secure by just using a WEP... erm... airsnort + enough traffic = WEP, or hiding their SSID broadcasts...erm sniffers... or using MAC authentication...
But back to the point... If you are worried about your wireless security, spend some time/money/effort and implement an actual secure authentication method... WPA, TKIP or to be really safe, a RADIUS authentication server... Personally I have none of the above, relying on the simple WEP method, but then again,
a) the majority don't know where I live..
b) I regularly monitor my router for accesses..
c) I have various ways of scanning the local area...
d) Being a nerd, I have a pocket protector.
In summary, take the time and the responsibility to look after your network, as there people even cleverer than me without my (un)questionable moral stance who may seek to do naughtiness at your expence... You'd never catch me expoiting someone's wireless insecurities... I cover my tracks ;)
