Connecting to an unsecured wireless network - Tilted Forum Project Discussion Community

Slavakion · 01-28-2005, 06:28 PM

Well, while I was trying to fix my internet connection (long story short, the cable from the router to the modem was unplugged), I noticed that there's a new wireless network in town. That makes two as far as my wifi card can see. I noticed that the SSID was an unoriginal "linksys" and figured that there was no WEP in place. Fire up netstumbler for a confirmation; that network's open wider than an unpatched windows box. What did I do? I told my wifi card to connect. Success.

Since my neighborhood's not too densely settled, I think that the network belongs to one of two neighbors near me. My question is, what could someone with access to a network like that actually do that could be harmful? I know that you could leech bandwidth, but is there anything else? I want to know whether I should find my neighbor this weekend or bring it up in a conversation later.

Church · 01-28-2005, 06:35 PM

Any open network is at risk for a number of things. Either way, you should find the person with the open network and tell them, if you care that much.

Hardknock · 01-28-2005, 06:55 PM

You can either do one of two things, exploit their ignorance about networking or you can be a good citizen and inform them and educate them about the importance of securing their network. Who knows, maybe they want it open on purpose. One of my co-workers has a neighbor that has an open router and he keeps it that way so my co-worker can use his bandwidth. Maybe your neighbor has something like that going on.

Slavakion · 01-28-2005, 07:02 PM

I know I probably have no credibility on the 'net, but I'm curious and kinda want to know how to "do something". I'd never do anything malicious.

*waits to be modded for technically asking how to hack*

heyal256 · 01-28-2005, 07:04 PM

I believe that with a wide open network, that it's possible to find and hack any computer that is on the network. This does assume some of the following, if the wireless network isn't secure, the pc's connected to the network don't have the latest security patches/firewall/up to date antivirus/etc. If someone wanted to be evil, they could either plant a trojan to get any private info on the pc, or use it as a "zombie" machine for spamming/spreading viruses/etc.

I don't think that most people would do more then leech internet access tho, but sometimes it's good to know what an evil person could do/try to do.

glytch · 01-28-2005, 08:05 PM

You could always perform a little ARP poisoning attack and, for instance, send them to some porn site every time they want to go to Google. Of course, there are much more dangerous things you can do with ARP poisoning, which I refuse to go into. I believe you should be a good neighbor and let them know about their mistake.

On a lighter note, you could always send documents to their printer. That always freaks my neighbors out...

theFez · 01-28-2005, 08:28 PM

three of my neighbors had wide open wireless networks. i didnt really need the access so decided to give them some hints to tighten things up. logged in to their routers, disabled wireless, set an admin password and rebooted the router.

One of them had wep running after that. the other two just used hardware reset and went right back to wide open.

so i changed their SSID's to HACK_ME and HACK_ME2.

One of them got the hint from that and fixed his network. HACK_ME2 is still wide open though.

Personally i dont bother with WEP I tend to move pretty big files from my server to laptop and dont like the performance hit. but i disable SSID broadcast, disable DHCP, only allow enough IP addresses for my equipment and MAC filter connections.

Hardknock · 01-28-2005, 08:30 PM

Quote:

Originally Posted by glytch

On a lighter note, you could always send documents to their printer. That always freaks my neighbors out...

Ooooo!!! I know what I'm doing next time I find a unsecured router!!

Hardknock · 01-28-2005, 08:31 PM

Quote:

Originally Posted by theFez

three of my neighbors had wide open wireless networks. i didnt really need the access so decided to give them some hints to tighten things up. logged in to their routers, disabled wireless, set an admin password and rebooted the router.

One of them had wep running after that. the other two just used hardware reset and went right back to wide open.

so i changed their SSID's to HACK_ME and HACK_ME2.

One of them got the hint from that and fixed his network. HACK_ME2 is still wide open though.

Personally i dont bother with WEP I tend to move pretty big files from my server to laptop and dont like the performance hit. but i disable SSID broadcast, disable DHCP, only allow enough IP addresses for my equipment and MAC filter connections.

Let it go man. If you tried to be nice and educate them and they still want to act dumb, let them. It'll be their own demise.

Slavakion · 01-29-2005, 06:05 AM

Quote:

Originally Posted by Hardknock

Let is go man. If you tried to be nice and educate them and they still want to act dumb, let them. It'll be their own demise.

Heh, that's a pretty direct way for me to do what I want. As soon as I have time to figure the address of the router, I'm definitely doing that. And if I can figure out how to tell if there's a printer on the network... I'd have to print out something really bizarre.
101 non-food uses for mayonnaise.

Well, it's not that I can't figure out the IP of the router. The signal is just so faint in here. My router is no more than fifteen feet away, and sometimes the singal drops to low. I swear, there's lead paint on the walls, or something.

AquaFox · 01-29-2005, 12:02 PM

i also have a neigbhor with a unsecure router.... i've allways wonder if it is illegal or anything to connect to peoples internet.... because in a way, it's kinda like stealing internet.... it reminds me of those old t.v. commericals about stealing cable tv

i have my own network, which is secured, soo i don't have to worry about it, lol

Hardknock · 01-29-2005, 12:43 PM

I just bought a house and one of my neighbors has a wireless router. No WEP enabled buy I thing she had the MAC filtering turned on becasue my card can't access it. But net stumbler says it's wide open. Go figure.

yotta · 01-31-2005, 08:27 AM

Quote:

Originally Posted by theFez

Personally i dont bother with WEP I tend to move pretty big files from my server to laptop and dont like the performance hit. but i disable SSID broadcast, disable DHCP, only allow enough IP addresses for my equipment and MAC filter connections.

If WEP causes a performance hit, then your equipment sucks. Higher end (and even most cheap newer) wireless hardware has no trouble doing WEP/WPA at full speed.

rubicon · 01-31-2005, 04:13 PM

I hate to ruin the "how can I hack into my neighbor's router to show him a thing or two about how stupid he is" party, but why don't you turn your idle time into a money-making venture?

Wardrive 'round the neighborhood and get an idea of the open access points. Print up some flyers and stick them in people's doors offering to secure their home network for $100. You may be surprised at what business you get.

LewisCouch · 01-31-2005, 10:48 PM

Some people use unsecured wireless networks as a decoy. I've considered doing it myself just to amuse the wardrivers around here. Basically all you do is setup an old wireless router to broadcast SSID with no security enabled. Just don't hook it up to your network.

Slavakion · 02-01-2005, 03:46 AM

Quote:

Originally Posted by rubicon

I hate to ruin the "how can I hack into my neighbor's router to show him a thing or two about how stupid he is" party, but why don't you turn your idle time into a money-making venture?

Wardrive 'round the neighborhood and get an idea of the open access points. Print up some flyers and stick them in people's doors offering to secure their home network for $100. You may be surprised at what business you get.

When I get my laptop this summer, I'm so doing that. I'd feel kinda weird swindling $100 for 5 minutes of work (changing SSID and setting a WEP password), but money is money.

asshopo · 02-01-2005, 06:05 AM

It's not swindling. The majority of people don't "get" computers. A friend runs a "fix your pc in your home" business and he does stuff just like that, along with hardware installs, formatting, spyware removal, etc. He charges $40 and you'd be surprized at how many visits are minimum of 2 hours. It isn't like they can take their router into the nearest Best Buy or Circuit City and have them setup security for them, especially if they don't know they need to secure anything!

Wingless · 02-01-2005, 09:00 PM

Or be a good samaritan (sp?) and create a document that says how to secure their network, and print it out on their system.

Nah, too easy :-P

Hardknock · 02-02-2005, 01:35 AM

Where's the fun and the $$$ in that?

God idea rubicon. That's actually part of my new consulting business.

Mephisto2 · 02-02-2005, 02:09 AM

I'd be surprised if people paid $100 for enabling WPA.

But who knows?

Mr Mephisto

Hardknock · 02-03-2005, 12:15 AM

You'd be surprised man, you'd be surprised.

wolf · 02-03-2005, 06:29 AM

There is actually quite a bit you can do with a little know-how on an unsecure wireless connection. I got $150 to setup my neighbors wireless router and firewall, I enabled WEP. He initially just bought the router, but I showed him that it needed to be secured by printing 101 uses for sporks on his printer. He offered the $150 to setup security, install a firewall and get everything fine tuned. Took about an hour.

Oh incase you wanted to know about 101 uses for sporks:

http://www.angelfire.com/punk/spiffyangel/101uses.html

rubicon · 02-03-2005, 07:16 AM

My original suggestion was based on using your knowledge for something positive. Secure their WAP for free, a six-pack, charge $100, charge $10. People will pay you what you ask or what they feel it's worth.

It seems funny to me that people's first instincts are to "teach someone a lesson" for what they don't know. Instead, educate them. Maybe they'll educate the next person and before you know it, every wi-fi in the neighborhood will be secured. Or you'll have made some extra money.

KMA-628 · 02-03-2005, 09:04 AM

I have two unsecured WAP's that are within the range of my receiver.

In an effort to help, I put up a flyer on the mailboxes explaining the situation and even offering to help, if help was needed.

Nobody contacted me and the WAP's stayed unsecure, nothing was done.

I checked a few days ago (after originally reading this thread) and both are now gone, so, who knows.

But, for as long as they stayed unsecure, I am guessing that the people just didn't care.

Temporary_User · 05-19-2005, 12:49 PM

ummm, not sure if i should post this or not...
im a poor college student and I couldnt afford internet anymore and it got disconnected.
After being netless for a while my dad came and visited me w/ his laptop.
I live in a downtown sector so we found a unsecure network he could connect to the net with.
My dad bought me a wireless network card and I am now connecting to the net w/ this.
This is actually only my second day like this, but am I causing harm to myself/cpu. or am i just using someone elses bandwidth?

Mephisto2 · 05-19-2005, 02:15 PM

You're just using someone else's bandwidth.

You shouldn't be doing this, but it's not harming your computer. It's kinda just like stealing apple-pie from an open window...

Mr Mephisto

Temporary_User · 05-19-2005, 02:29 PM

Quote:

Originally Posted by Mr Mephisto

It's kinda just like stealing apple-pie from an open window...

All right good.
the way i see it is that its like stealing apple-pie but still leaving the apple pie there.

Slavakion · 05-19-2005, 04:05 PM

Accessing someone else's network is against the law in the USA, and depending on how you read the laws, a Federal Crime as well. (capital letters necessary)

http://www.usdoj.gov/criminal/cybercrime/1030_new.html

There's too much to quote, but a post from the netstumbler forums sums it up nicely.

Quote:

Originally Posted by daedalus04

Let's see what the Feds actually have to say about this:

Unless I read it wrong (please feel free to check), the current revision of Title 18 says that you must intentionally access a protected computer without authorization, and as a result of such conduct, cause damage of $5000 or more in a 1-year period for this to be a crime.

So, let's say we just want to do some Internet surfing via a wide-open, unencrypted AP of unknown origin (probably a neighbor), from the luxury of the living room

-Is it intentional? YES.
-Is it a "computer" I'm accessing? According to USC 18 - YES. An AP is a computer by definition.
-Is it a protected computer? According to the definition in USC 18 - Not inherently. But in this case we'll be getting on the Internet, so YES.
-Is the access authorized? It's kind of subjective, but I don't believe so.
-Am I causing a loss of $5000 or more? Easily - See below.

"Loss" can include things like time spent responding to the incident, damage assessment, etc. So, "loss" can add up pretty quickly with these intangibles. However, it doesn't count unless the loss was incurred as a result of a crime.

So, to sum up - Chilling in your living room and surfing via your neighbors AP (as harmless as it seems) is a federal crime. Also, some states like Alaska now have laws that specifically prohibit doing this as well (Theft of Service).

When I first started checking this out, I figured there would be some loophole that makes it all "okay". Well, there still might be one, but I haven't found it yet. The only solace to the determined I can give is this - If you can make any one of the five requirements above a "No", then you should be in the clear as far as the Federales are concerned.

I tried to make this post informative and factual. Hope it helps those who are hazy on the subject.

-Daedalus

If your neighbors are tech-impaired and you don't plan to do any illegal downloading, you could probably get away with it. Just keep this in the back of your mind.

MikeSty · 05-19-2005, 05:54 PM

What are some other things you guys reccomend for Wireless Security?

I've changed our SSID. I disabled SSID broadcast but then nothing worked (?) I'm using the cheap linksys shit (BEFW11S4 :/). A friend of mine who works for Cisco says that WEP does cause a major hit on performance (which already seems bad; family doesn't like our WLAN too much). Haven't heard a peep about WPA though.

I have yet to change the admin password for some reason.

I think I may just disable DHCP as it's causing big problems with port forwarding and my server!

glytch · 05-19-2005, 06:32 PM

You could, of course, disable DHCP, but what I'd recommend doing (in addition to a number of other things that have already been mentioned) is to enforce MAC filtering. Make a list of all of the MAC addressess of any device connected to your network, then restrict access to your network to only your MAC addresses. If you need help with how to set this up, I'm sure you'll find ample help here. Don't be afraid to ask.

Slavakion · 05-20-2005, 02:53 AM

Quote:

Originally Posted by MikeSty

A friend of mine who works for Cisco says that WEP does cause a major hit on performance (which already seems bad; family doesn't like our WLAN too much). Haven't heard a peep about WPA though.

I think WEP only causes performance issues in larger networks with a lot of users and a lot of traffic. Even so, it's silly not to use it. There were a couple posts recently about wireless security where Mr. Mephisto posted a great guide.

cliche · 05-20-2005, 07:02 AM

I run a small network for a group of friends living in bedsit accommodation. Due to the high faff potential, and potential performance hit, I haven't enabled WEP or WPA and rely on MAC filtering to keep the network secure. In fact, I occasionally allow the DHCP server to give out a few ips to unrecognised computers who are then given a very slow access to the net (going through the dhcp server using iptables etc).

What is the real risk of someone being able to use the network without my permission? I'm thinking it would probably be a matter of sitting with a sniffer for a few minutes to 'steal' a recognised MAC address. Would it be that easy?

Slavakion · 05-20-2005, 10:29 AM

Quote:

Originally Posted by cliche

What is the real risk of someone being able to use the network without my permission? I'm thinking it would probably be a matter of sitting with a sniffer for a few minutes to 'steal' a recognised MAC address. Would it be that easy?

You have no encryption? Fire up your favorite network sniffer, and you should be able to find 'legal' MAC addresses pretty quickly. As soon as someone shuts off their computer or disconnects, you can connect to the network with a spoofed MAC. You can even match your IP and become pseudo-invisible.

If they're not gonna disconnect, you can boot them off. This requires two wifi cards or two computers. Have one card spoof the MAC, etc. of an AP and start flooding a computer with deassociate (disconnect) frames. Have the other card spoof the MAC, etc. of the computer you're booting and try to associate with the AP. Because you're drowning the target PC with a deassociate DOS attack, it'll be easy to override it.

MikeSty · 05-20-2005, 11:23 AM

Wow! :-D

I took an A+ course this year (98/98 on final; recieved merit for that last night

), but i'm taking Net+ next year. This will be fun

Cynthetiq · 05-20-2005, 11:33 AM

when i found someone on my wifi, I kept slowly disabling things like sending email but able to receive it. Disabled some URLs like google.com yahoo.com, disabled AIM/IRC, VPN, disabled the ability to use HTTPS.

took about 2 weeks to get this person off my router.

Mephisto2 · 05-21-2005, 07:40 AM

Quote:

Originally Posted by Cynthetiq

when i found someone on my wifi, I kept slowly disabling things like sending email but able to receive it. Disabled some URLs like google.com yahoo.com, disabled AIM/IRC, VPN, disabled the ability to use HTTPS.

took about 2 weeks to get this person off my router.

You're either cruel or have more patience than I do...

Mr Mephisto

heyal256 · 05-22-2005, 06:21 PM

Well if you REALLY want to be evil...... you can do what someone did at defcon to get rid of people leeching your internet connection.
http://www.evilscheme.org/defcon/

I did mention that it was really evil right?

01-28-2005, 06:28 PM	#1 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	Connecting to an unsecured wireless network Well, while I was trying to fix my internet connection (long story short, the cable from the router to the modem was unplugged), I noticed that there's a new wireless network in town. That makes two as far as my wifi card can see. I noticed that the SSID was an unoriginal "linksys" and figured that there was no WEP in place. Fire up netstumbler for a confirmation; that network's open wider than an unpatched windows box. What did I do? I told my wifi card to connect. Success. Since my neighborhood's not too densely settled, I think that the network belongs to one of two neighbors near me. My question is, what could someone with access to a network like that actually do that could be harmful? I know that you could leech bandwidth, but is there anything else? I want to know whether I should find my neighbor this weekend or bring it up in a conversation later.

01-28-2005, 06:35 PM	#2 (permalink)
Church Tilted F*ckhead Location: New Jersey	Any open network is at risk for a number of things. Either way, you should find the person with the open network and tell them, if you care that much. __________________ Through counter-intelligence, it should be possible to pinpoint potential trouble makers, and neutralize them.

01-28-2005, 06:55 PM	#3 (permalink)
Hardknock Republican slayer Location: WA	You can either do one of two things, exploit their ignorance about networking or you can be a good citizen and inform them and educate them about the importance of securing their network. Who knows, maybe they want it open on purpose. One of my co-workers has a neighbor that has an open router and he keeps it that way so my co-worker can use his bandwidth. Maybe your neighbor has something like that going on. Last edited by Hardknock; 01-28-2005 at 08:28 PM..

01-28-2005, 08:05 PM	#6 (permalink)
glytch I am not permanent. Location: Tennessee	You could always perform a little ARP poisoning attack and, for instance, send them to some porn site every time they want to go to Google. Of course, there are much more dangerous things you can do with ARP poisoning, which I refuse to go into. I believe you should be a good neighbor and let them know about their mistake. On a lighter note, you could always send documents to their printer. That always freaks my neighbors out... __________________ If you're flammable and have legs, you are never blocking a fire exit. - Mitch Hedberg

01-28-2005, 08:28 PM	#7 (permalink)
theFez Crazy Location: here and there	three of my neighbors had wide open wireless networks. i didnt really need the access so decided to give them some hints to tighten things up. logged in to their routers, disabled wireless, set an admin password and rebooted the router. One of them had wep running after that. the other two just used hardware reset and went right back to wide open. so i changed their SSID's to HACK_ME and HACK_ME2. One of them got the hint from that and fixed his network. HACK_ME2 is still wide open though. Personally i dont bother with WEP I tend to move pretty big files from my server to laptop and dont like the performance hit. but i disable SSID broadcast, disable DHCP, only allow enough IP addresses for my equipment and MAC filter connections. __________________ # chmod 111 /bin/Laden

01-28-2005, 07:02 PM	#4 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	I know I probably have no credibility on the 'net, but I'm curious and kinda want to know how to "do something". I'd never do anything malicious. waits to be modded for technically asking how to hack

01-28-2005, 07:04 PM	#5 (permalink)
heyal256 Not so great lurker Location: NY	I believe that with a wide open network, that it's possible to find and hack any computer that is on the network. This does assume some of the following, if the wireless network isn't secure, the pc's connected to the network don't have the latest security patches/firewall/up to date antivirus/etc. If someone wanted to be evil, they could either plant a trojan to get any private info on the pc, or use it as a "zombie" machine for spamming/spreading viruses/etc. I don't think that most people would do more then leech internet access tho, but sometimes it's good to know what an evil person could do/try to do.

01-29-2005, 12:02 PM	#11 (permalink)
AquaFox WaterDog	i also have a neigbhor with a unsecure router.... i've allways wonder if it is illegal or anything to connect to peoples internet.... because in a way, it's kinda like stealing internet.... it reminds me of those old t.v. commericals about stealing cable tv i have my own network, which is secured, soo i don't have to worry about it, lol __________________ ...AquaFox...

01-29-2005, 12:43 PM	#12 (permalink)
Hardknock Republican slayer Location: WA	I just bought a house and one of my neighbors has a wireless router. No WEP enabled buy I thing she had the MAC filtering turned on becasue my card can't access it. But net stumbler says it's wide open. Go figure.

01-31-2005, 04:13 PM	#14 (permalink)
rubicon Stop. Think. Question. Location: Redondo Beach, CA	I hate to ruin the "how can I hack into my neighbor's router to show him a thing or two about how stupid he is" party, but why don't you turn your idle time into a money-making venture? Wardrive 'round the neighborhood and get an idea of the open access points. Print up some flyers and stick them in people's doors offering to secure their home network for $100. You may be surprised at what business you get. __________________ How you do anything is how you do everything.

01-31-2005, 10:48 PM	#15 (permalink)
LewisCouch Insane Location: Pacific NW	Some people use unsecured wireless networks as a decoy. I've considered doing it myself just to amuse the wardrivers around here. Basically all you do is setup an old wireless router to broadcast SSID with no security enabled. Just don't hook it up to your network. __________________ "The gift of liberty is like that of a horse, handsome, strong, and high-spirited. In some it arouses a wish to ride; in many others, on the contrary, it increases the desire to walk." -- Massimo d'Azeglio

02-01-2005, 06:05 AM	#17 (permalink)
asshopo Insane Location: Michigan	It's not swindling. The majority of people don't "get" computers. A friend runs a "fix your pc in your home" business and he does stuff just like that, along with hardware installs, formatting, spyware removal, etc. He charges $40 and you'd be surprized at how many visits are minimum of 2 hours. It isn't like they can take their router into the nearest Best Buy or Circuit City and have them setup security for them, especially if they don't know they need to secure anything! __________________ Patterns have a habit of repeating themselves.

02-01-2005, 09:00 PM	#18 (permalink)
Wingless Psycho Location: Metro Detroit, Mich, USA	Or be a good samaritan (sp?) and create a document that says how to secure their network, and print it out on their system. Nah, too easy :-P __________________ Tommy Nibs is a funny word. So here I am, above palm trees, so straight and tall... You are, smaller getting smaller, but I still see... you. Jimmy Eat World - Goodbye Sky Harbor

02-02-2005, 01:35 AM	#19 (permalink)
Hardknock Republican slayer Location: WA	Where's the fun and the $$$ in that? God idea rubicon. That's actually part of my new consulting business.

02-02-2005, 02:09 AM	#20 (permalink)
Mephisto2 Junkie	I'd be surprised if people paid $100 for enabling WPA. But who knows? Mr Mephisto

02-03-2005, 12:15 AM	#21 (permalink)
Hardknock Republican slayer Location: WA	You'd be surprised man, you'd be surprised.

02-03-2005, 06:29 AM	#22 (permalink)
wolf Ravenous Location: Right Behind You	There is actually quite a bit you can do with a little know-how on an unsecure wireless connection. I got $150 to setup my neighbors wireless router and firewall, I enabled WEP. He initially just bought the router, but I showed him that it needed to be secured by printing 101 uses for sporks on his printer. He offered the $150 to setup security, install a firewall and get everything fine tuned. Took about an hour. Oh incase you wanted to know about 101 uses for sporks: http://www.angelfire.com/punk/spiffyangel/101uses.html __________________ Thousands of years ago, cats were worshipped as Gods. Cats have never forgotten this.

02-03-2005, 07:16 AM	#23 (permalink)
rubicon Stop. Think. Question. Location: Redondo Beach, CA	My original suggestion was based on using your knowledge for something positive. Secure their WAP for free, a six-pack, charge $100, charge $10. People will pay you what you ask or what they feel it's worth. It seems funny to me that people's first instincts are to "teach someone a lesson" for what they don't know. Instead, educate them. Maybe they'll educate the next person and before you know it, every wi-fi in the neighborhood will be secured. Or you'll have made some extra money. __________________ How you do anything is how you do everything.

02-03-2005, 09:04 AM	#24 (permalink)
KMA-628 ....is off his meds...you were warned. Location: The Wild Wild West	I have two unsecured WAP's that are within the range of my receiver. In an effort to help, I put up a flyer on the mailboxes explaining the situation and even offering to help, if help was needed. Nobody contacted me and the WAP's stayed unsecure, nothing was done. I checked a few days ago (after originally reading this thread) and both are now gone, so, who knows. But, for as long as they stayed unsecure, I am guessing that the people just didn't care.

05-19-2005, 12:49 PM	#25 (permalink)
Temporary_User Psycho	ummm, not sure if i should post this or not... im a poor college student and I couldnt afford internet anymore and it got disconnected. After being netless for a while my dad came and visited me w/ his laptop. I live in a downtown sector so we found a unsecure network he could connect to the net with. My dad bought me a wireless network card and I am now connecting to the net w/ this. This is actually only my second day like this, but am I causing harm to myself/cpu. or am i just using someone elses bandwidth?

05-19-2005, 02:15 PM	#26 (permalink)
Mephisto2 Junkie	You're just using someone else's bandwidth. You shouldn't be doing this, but it's not harming your computer. It's kinda just like stealing apple-pie from an open window... Mr Mephisto

05-19-2005, 05:54 PM	#29 (permalink)
MikeSty The Computer Kid :D Location: 127.0.0.1	What are some other things you guys reccomend for Wireless Security? I've changed our SSID. I disabled SSID broadcast but then nothing worked (?) I'm using the cheap linksys shit (BEFW11S4 :/). A friend of mine who works for Cisco says that WEP does cause a major hit on performance (which already seems bad; family doesn't like our WLAN too much). Haven't heard a peep about WPA though. I have yet to change the admin password for some reason. I think I may just disable DHCP as it's causing big problems with port forwarding and my server!

05-19-2005, 06:32 PM	#30 (permalink)
glytch I am not permanent. Location: Tennessee	You could, of course, disable DHCP, but what I'd recommend doing (in addition to a number of other things that have already been mentioned) is to enforce MAC filtering. Make a list of all of the MAC addressess of any device connected to your network, then restrict access to your network to only your MAC addresses. If you need help with how to set this up, I'm sure you'll find ample help here. Don't be afraid to ask. __________________ If you're flammable and have legs, you are never blocking a fire exit. - Mitch Hedberg

05-20-2005, 07:02 AM	#32 (permalink)
cliche Rookie Location: Oxford, UK	I run a small network for a group of friends living in bedsit accommodation. Due to the high faff potential, and potential performance hit, I haven't enabled WEP or WPA and rely on MAC filtering to keep the network secure. In fact, I occasionally allow the DHCP server to give out a few ips to unrecognised computers who are then given a very slow access to the net (going through the dhcp server using iptables etc). What is the real risk of someone being able to use the network without my permission? I'm thinking it would probably be a matter of sitting with a sniffer for a few minutes to 'steal' a recognised MAC address. Would it be that easy? __________________ I can't understand why people are frightened of new ideas. I'm frightened of the old ones. -- John Cage (1912 - 1992)

05-20-2005, 11:23 AM	#34 (permalink)
MikeSty The Computer Kid :D Location: 127.0.0.1	Wow! :-D I took an A+ course this year (98/98 on final; recieved merit for that last night ), but i'm taking Net+ next year. This will be fun

05-20-2005, 11:33 AM	#35 (permalink)
Cynthetiq Tilted Cat Head Administrator Location: Manhattan, NY	when i found someone on my wifi, I kept slowly disabling things like sending email but able to receive it. Disabled some URLs like google.com yahoo.com, disabled AIM/IRC, VPN, disabled the ability to use HTTPS. took about 2 weeks to get this person off my router. __________________ I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not. What's the best nation in the world? DO-NATION!

05-22-2005, 06:21 PM	#37 (permalink)
heyal256 Not so great lurker Location: NY	Well if you REALLY want to be evil...... you can do what someone did at defcon to get rid of people leeching your internet connection. http://www.evilscheme.org/defcon/ I did mention that it was really evil right?