Re: WEP or not to WEP...




"char" <char@xxxxxxxxxxxxxx> wrote in message
news:wIednczq6YE2QofZRVnytw@xxxxxxxxxxxx

"Stephen Stewart" <a.nonymous@xxxxxxx> wrote in message
news:dve5em$c72$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

"Beck" <beck@xxxxxxxxxxxxxxxxxx> wrote in message
news:4419ecef$0$70300$ed2619ec@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Mel wrote:

Either you want to share your network with neighbours and passers by
or you want to use WPA.

Why would using WEP allow neighbours in?


With the latest tools you can crack 128bit WEP in around three minutes.

If your SSID is hidden can be discovered by sending special packets that
require the SSID to be included in the response.

MAC addressing can easily be discovered and spoofed.

So the upshot of all this is that all these security measures only block
casual browsers.

Unless you use WPA (preferrably WPA-PSK if supported) anyone that can
download the appropriate software will be able to hack in to your network
at will.


Stephen


"Stephen Stewart" <a.nonymous@xxxxxxx> wrote in message
news:dve5em$c72$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

"Beck" <beck@xxxxxxxxxxxxxxxxxx> wrote in message
news:4419ecef$0$70300$ed2619ec@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Mel wrote:

Either you want to share your network with neighbours and passers by
or you want to use WPA.

Why would using WEP allow neighbours in?


With the latest tools you can crack 128bit WEP in around three minutes.

If your SSID is hidden can be discovered by sending special packets that
require the SSID to be included in the response.

MAC addressing can easily be discovered and spoofed.

So the upshot of all this is that all these security measures only block
casual browsers.

Unless you use WPA (preferrably WPA-PSK if supported) anyone that can
download the appropriate software will be able to hack in to your network
at will.


Stephen


Have you actually seen it done?.... 128bit wep in three minutes??!?!

if you use a non standard alpha numeric password you should be fine?
"R1TsyT234H"

I've spent a couple of hours looking around for these tools....
(AirSnort/Kismet)

It seems as though you need a particular kind of wireless card to get it
working and it can take bloody ages...

We use wireless at work and I'm trying to find out HOW secure it actually
is...

Regards..



http://www.tomsnetworking.com/2005/03/31/the_feds_can_own_your_wlan_too/

All done with publicly available tools.

There are other articles available on this I just picked the first Google
came up with.


Stephen


.



Relevant Pages

  • Re: wpa ....
    ... >>Ok i have a client, that has a network with about 5 clients... ... WPA is exactly the same as WEP ...
    (alt.internet.wireless)
  • Re: Wireless router
    ... >>I keep hearing the WEP is easily crack able now. ... You want WPA. ... You just want to stop casual usage of your network by ... Wireless technolphiles could use a wireless ...
    (comp.security.firewalls)
  • Re: WPA/PSK: need to REPAIR to connect to inet
    ... using WEP on XP SP2. ... Uninstall then reinstall network card using the Device Manager. ... Setup the WPA again. ... > If I right click the wireless icon in system tray, and select REPAIR, most ...
    (microsoft.public.windowsxp.network_web)
  • Re: WPA/PSK: need to REPAIR to connect to inet
    ... using WEP on XP SP2. ... Uninstall then reinstall network card using the Device Manager. ... Setup the WPA again. ... > If I right click the wireless icon in system tray, and select REPAIR, most ...
    (microsoft.public.windowsxp.general)
  • Re: Using WEP instead of WPA
    ... I can get the Compaq connected using WPA with no problems. ... connection using the WEP security feature. ... have my Linksys wireless router broadcasting 24/7 to my second computer. ... If no one is trying to break into your network, ...
    (alt.sys.pc-clone.dell)