Security Advice, Please

GEC: Discuss gaming, computers and electronics and venture into the bizarre world of STGODs.

Moderator: Thanas

Post Reply
User avatar
Sonnenburg
Official Dave Barry Clone
Posts: 2305
Joined: 2002-11-05 08:35pm
Location: Gotham City
Contact:

Security Advice, Please

Post by Sonnenburg »

I just put up a wireless router and after only a few times swearing I've got the mofo working. I hooked it up using the encryption for the wireless adapter. I was wondering if anyone could advise me on this:
1) Is my computer itself secure? I have PC-Cillin Firewall set up; with the encryption is that enough?
2) Is my bandwidth safe? Is there something I should be doing to stop people from swiping it?
Chuck

Image
User avatar
Dalton
For Those About to Rock We Salute You
For Those About to Rock We Salute You
Posts: 22637
Joined: 2002-07-03 06:16pm
Location: New York, the Fuck You State
Contact:

Post by Dalton »

You're fine, although my experiences with PC-Cillin have been mostly of annoyance :P
Image
Image
To Absent Friends
Dalton | Admin Smash | Knight of the Order of SDN

"y = mx + bro" - Surlethe
"You try THAT shit again, kid, and I will mod you. I will
mod you so hard, you'll wish I were Dalton." - Lagmonster

May the way of the Hero lead to the Triforce.
User avatar
Xisiqomelir
Jedi Council Member
Posts: 1757
Joined: 2003-01-16 09:27am
Location: Valuetown
Contact:

Re: Security Advice, Please

Post by Xisiqomelir »

Use an MAC filter too. Every little bit helps.
User avatar
Sonnenburg
Official Dave Barry Clone
Posts: 2305
Joined: 2002-11-05 08:35pm
Location: Gotham City
Contact:

Post by Sonnenburg »

It turns out its WEP (of course). Will a MAC filter beef that up?
Chuck

Image
User avatar
Xisiqomelir
Jedi Council Member
Posts: 1757
Joined: 2003-01-16 09:27am
Location: Valuetown
Contact:

Post by Xisiqomelir »

Sonnenburg wrote:It turns out its WEP (of course). Will a MAC filter beef that up?
Every network adapter has a unique MAC. If you filter your router to allow only trusted devices on your network, working to spoof an allowed MAC is one more step a cracker needs to do to access your network. So, not perfect security, but a useful deterrent.
User avatar
phongn
Rebel Leader
Posts: 18487
Joined: 2002-07-03 11:11pm

Post by phongn »

A MAC filter is a waste of time as it is too easily defeated. It also makes it more difficult for the administrator - encryption is enough.
User avatar
Faram
Bastard Operator from Hell
Posts: 5271
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

MAC filering= useless crap do not do it.

Also turning off SSID broadcast is stupid and adds no security but a shitload of trubble.

Go for WPA2 and a good passkey.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
R. U. Serious
Padawan Learner
Posts: 282
Joined: 2005-08-17 05:29pm

Re: Security Advice, Please

Post by R. U. Serious »

Sonnenburg wrote:1) Is my computer itself secure? I have PC-Cillin Firewall set up; with the encryption is that enough?
For your computer to be secure, make sure that you have all updates nd servicepacks installed available for your version of windows. Make sure that all software that does network-related things (browser, mailclient, filesharing etc.) is up to date.


As for a MAC-Filter: Somebody who takes the effort to crack a WEP-Key will mot be stopped by a mac-filter. However - to circumvent it, the attacker needs to spoof your mac. While the spoofing itself is done easily, the attacker also has to get a hold of your mac-adress. When you are using Wifi, this is always transmitted with every package - however if your computer is only turned on in the evening or at the weekends, drive-by hackers during the day will not be able to sniff your MAC to spoof it. (Of yource you could make an equally good case, that you should simply turn off your wifi-router when you're away or at night).
Also turning off SSID broadcast is stupid and adds no security but a shitload of trubble.
That I fully agree with it. The SSID is transmitted from time to time in the normal data anyhow, so turning off the broadcast literally does not achieve anything if you already are using WEP/WPA.

As has been said, if you can, then do switch to WPA(2). Otherwise at least use a 128/108bit WEP key.
Privacy is a transient notion. It started when people stopped believing that God could see everything and stopped when governments realized there was a vacancy to be filled. - Roger Needham
User avatar
Uraniun235
Emperor's Hand
Posts: 13772
Joined: 2002-09-12 12:47am
Location: OREGON
Contact:

Post by Uraniun235 »

Faram wrote:MAC filering= useless crap do not do it.

Also turning off SSID broadcast is stupid and adds no security but a shitload of trubble.

Go for WPA2 and a good passkey.
He just said his router doesn't support WPA.
"There is no "taboo" on using nuclear weapons." -Julhelm
Image
What is Project Zohar?
"On a serious note (well not really) I did sometimes jump in and rate nBSG episodes a '5' before the episode even aired or I saw it." - RogueIce explaining that episode ratings on SDN tv show threads are bunk
Post Reply