Security Basics mailing list archives

Re: Wireless security question...


From: groffg () yahoo com
Date: 28 Oct 2005 17:18:41 -0000

1- Can a wireless router (installed in their home-office) be
hacked into AND can this hacker take control of the wireless
laptop. If so I would need some detail on how we can prevent
that (besides WEP). Let's assume for the sake of discussion
that there is no WEP encryption on the router. 
Yes, of course it can be hacked into, esp if security is not enabled. WPA-PSK + MAC address filtering + disabling 
SSID broadcasting would be a good start to defending the router/network.


2- How easy is it to access the laptop once you're into the
router? Is it child splay or do we need a specialist?
Good security is layered. If someone is able to access the network, that does not automatically entitle that user to 
access a computer on the network. But of course, it makes it a step easier, since at least one security layer has 
been penetrated. 

3- If the laptop's wireless router is secured with WEP and
connected to the office via VPN can it be EASILY hacked
into? The VPN connection gives them little access to the
network, barely what they need to work. Will the intruder
have access to our network?
Assuming the intruder gained access to the wireless router (and an IP address was issued to the intruder, etc), the 
intruder would then need to gain access to the VPN. I don't think that would be nearly as easy as it would be to 
crack WEP (in lieu of WEP, it is recommended that people use WPA-PSK if both your router and wirelss NIC cards 
support it).


4- How secure is my sales rep. running around hotels with
his laptop? 
Depends on the individual. I'd go over basic security guidelines (not opening susipicious email, not installing 
suspect software, etc).


Current thread: