Upgrade your account to a Community Supporter account and remove most of the site ads.

Reply to thread

Message: <blockquote data-quote="azhrei_fje" data-source="post: 2461741" data-attributes="member: 12966">Okay, sounds like there are a bunch of knowledgeable people frequenting this thread. <img src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/1f642.png" class="smilie smilie--emoji" loading="lazy" width="64" height="64" alt=":)" title="Smile    :)"  data-smilie="1"data-shortname=":)" />My concern is to make sure people understand that wireless is not perfect. If they understand that, and take the risks knowingly, then we (as IT professionals) have done all we can.  Part of my motivation is to reduce the number of Windows machines taken over by spammers and black hat hackers who will use them as zombies.  If even a single person learns enough to protect their machine, then my time spent has been worth it.  (Stopping one zombie might not seem like a lot, but stopping one means that the machine won't be out there patrolling the 'net looking for others to take over.)Listen to what IronWolf said and secure your network as much as possible, based on the documentation you received.  Each additional security feature gets you about some percentage closer to being 100% secure (in reality there is no such thing, but we still want to strive for it).  So, the first feature (using WEP) will be 60%, let's say.  Turning off SSID broadcasts will get you another 60% closer to 100%, so you're at 60%+(60% of the remaining 40) is 84%.  Filtering based on MAC isn't worth much at all, so let's get you another 20% closer; now you're at 84%+(20% of 16) or 87%.Concerning WPA, there are issues with any implementation that doesn't use RADIUS.  As IronWolf pointed out, no one who isn't an IT geek is going to run a RADIUS server at home!!  The fact that the software is free, though, should help tilt things in that direction in the future.  If such software can be easily downloaded and configured, it will become more popular.There are Live CD distributions of Linux that specialize in security and I read about one recently that has FreeRADIUS installed (don't remember which one, though; check <a href="http://www.distrowatch.org" target="_blank">www.distrowatch.org</a>).  The configuration files can be kept on a write-protected floppy.  Pull the hard drive out of an old machine, boot from CD, and put the floppy in when prompted.  You now have a FreeRADIUS server without any chance of corruption!  If it *does* somehow get hacked, reboot it and you're ready to go again.  Cool. <img src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/1f609.png" class="smilie smilie--emoji" loading="lazy" width="64" height="64" alt=";)" title="Wink    ;)"  data-smilie="2"data-shortname=";)" />I've modified the quote slightly:</blockquote>

Verification