Re: SSID cloaking reducing WLAN security

[Noah <focushacks () gmail com>]

We already had this discussion a few times.  Actually, cloaking
decreases the potential of attack in most residential settings, where
there are several nearby access points with even less protection.
Search for "Low-Hanging Fruit" and you'll see what I mean.  Most of
your WiFi abusers aren't sitting there with frequency counters looking
for access points that aren't broadcasting their SSIDs.  Most are
looking for obvious, open access points.

Even when your non-broadcasting AP shows up on their passive scanner,
it shows up initially without the SSID, and it's usually easier to hop
on one that requires less effort.

That said, I advocate using WPA-Personal(PSK) on home networks, on top
of MAC address access control and SSID hiding.  Cloaking your SSID
does not increase your risk of attack, however.

In a business setting, using SSID cloaking as your only line of
defense is goofy and foolhardy.  New encryption systems or a
sandbox-VPN should always be used in those situations.


On 4/21/07, scott <redhowlingwolves () bellsouth net> wrote:
>   If some form of unity was involved with the writing,and compatibility of
> drivers,at least for most *nix servers....without having to resort to in
> house compatibility testing,.....I believe the security of wireless
> could be much improved.
> Many people I know don't try to secure their wireless networks because
> of cmp issues.....ie: no drivers from the NIC device makers that are
> useable with the router they happen to be using!
>
> I flipped out when I was told;  "I talked to an IT guy and he said the
> depencdenies for...such and such card...are  too hard!!!"!?
>
> Never mind that he could be the one taking advantage of your unsecured
> router!    (This was a Windows case,none the less.....)
>
> Wireless,whether your SSID is broadcast or not,is inherently vulnerable
> to outsiders.I say inherently,because it uses radio waves,....ask any
> ham radio operator how they can manipulate radio waves any way they
> choose....!Especially if you happen to be within their range!
>
> Cloaking, just gives the possibility to potential attackers ,that there
> could be something worth checking out!
>
> IMHO
>                   Regards,
>                         Scott


--
http://www.focushacks.com/focushacks-gpg.txt - My GPG encryption key