Internet Security & SSIDs

[Omniyoji]

Two for one because I'm too lazy to make two threads.

Post#1

Recently I was browsing the local network neighborhood and I was shocked and amazed at the amount of people who still have no router security or use WEP still. I know some people like to share their connection but I'd still implement something and setup my friends PCs to access it.

Here's the most I could collect w/o moving much:

Spoiler: show

http://i253.photobucket.com/albums/h...0tech/SSID.jpg

So it looks like me and Africa (lol) are the only ones using WPA2. Quite disappointing People should also be aware at the recent cracking of WPA.

Anyone else here wanna share what other fellow neighbors are using (if applicable) or any funny naming schemes people use on their SSIDs? If you'd like to use Inssider you can download it free here -> inSSIDer | MetaGeek

Post #2

Forgot to post this website earlier. Not sure if others have checked out www.matousec.com: Security software testing, analyses, research and reviews. before. They test several internet security suites (free & paid) for holes bugs and problems. Their "Proactive Security Challenge" puts the suites through a variety of tests per level with 10 levels total. Each level contains a score limit that is necessary to pass a level. Several vendors use matousec's services as an addendum to checking their products strength.

I suggest reading their introduction page before so you'll know more about it and their methodologies used.

NOTE* The thing you have to remember when seeing these results is that their for mostly security suites and not for stand alone firewall/virus scanners, so don't be shocked at the overall scores of your free anti-virus programs lol

You can check the latest results -> here <-to see how your suite does. Personally I'm happy with my Comodo's results

Thoughts comments?

[Blabj]

WEP is a problem, but WPA isn't so bad. Yeah it still only takes 5 minutes to crack it or whatever, but the knowledge of doing that isn't as well known as cracking WEP is. A lot of mobile technology doesn't support WPA2, which forces some users to use older versions.

At the end of the day, it's better to use Mac Address Filtering, since unless you know the specific allowed MACs, you're not gonna get access.

[bungiefan]

I have to use WEP to play my DS online. That's the only reason the network in the house uses it. Even though it's able to be broken through, at least having a password on the network gives you legal grounds to work on if someone does break into your network, and we don't keep anything vital shared on it. The computers on the network have their own passwords to use the network printer or shared folders, so it's not a worry. You just need to pay attention to the connected computers on the network now and then to see if anyone has broken in.

[SephYuyX]

A lot of mobile technology doesn't support WPA2, which forces some users to use older versions.

This. For example, NDS only supports WEP.

[Cephius]

It may be concerning how fast WPA and WEP can be hacked, but unless someone has malicious intent towards you specifically, it's nothing to worry about. Putting security on your wireless is usually just a deterrent for people stealing your internet. So, I don't think it's such a big deal.

[Skjie]

but WPA isn't so bad. Yeah it still only takes 5 minutes to crack it or whatever

I'm very interested to know of a way to crack WPA without using a dictionary.

[Nattack]

only a few people actually log on to other peoples networks. you have got to live in an apartment block or something because the most ive seen in one place is like 7.

on another note, WPA/WPA2 isnt as widely supported as WEP, for example, my DS cannot connect to it. older versions of windows cannot connect to it, there just arent that many people willing to crack a WEP/WPA password.

i have a laissez-faire point of view for wireless, but ive never lived in an area where it was a nessecity.

[Blabj]

I'm sure I read that WPA encryptions were generally crackable in 5-15 minutes, but maybe I'm making stuff up in my mind.

Having read a bit into it, it seems the idea of 5-15 minutes comes from brute forcing a pretty basic password (as mentioned, with a dictionary...) and I don't think that's 'cracking' per sé, in the sense of WEP where there are no guesses as to what the password might be.

[Skjie]

I'm sure I read that WPA encryptions were generally crackable in 5-15 minutes, but maybe I'm making stuff up in my mind.

Having read a bit into it, it seems the idea of 5-15 minutes comes from brute forcing a pretty basic password (as mentioned, with a dictionary...) and I don't think that's 'cracking' per sé, in the sense of WEP where there are no guesses as to what the password might be.

WEP can be broken in roughly 5 minutes with current tools, however WPA still requires a dictionary assault. Unless you are very lucky with a terrible password and a common SSID, WPA is going to take far far longer than 15 minutes to crack.

That is unless you know of a tool that's either private or only come out in the past 6 months.