F-13 new wireless routers -

[Wolfgang S. Rupprecht]

Bill Davidsen <davidsen at tmr.com> writes:
> Wolfgang S. Rupprecht wrote:
>> Bob Goodwin <bobgoodwin at wildblue.net> writes:
>>>     Yes  I have been running WEP 'cause I have one old device that can
>>>     do no more than that, and I usually admit only certain [18 or 19]
>>>     MAC addresses that I have listed. Add to that the fact that I am in
>>>     a rural area surrounded by cotton and soy beans, the distance to the
>>>     road is about 200 meters, I don't think LAN security is a major
>>>     worry. I can't detect any other systems when I scan.
>> 
>> Well, WEP will keep out the casual person looking for an open wifi.  To
>> be honest, I think that is good enough unless you have a bored and
>> highly talented kid living next door.
>
> I live across the street from a college. My security is better than theirs, 
> thankfully.

Reminds me of the joke about the two hikers preparing for a bear
encounter.  One hiker is removing his hiking boots and putting on
sneakers.  The other points out how useless this is because you can't
outrun a bear.  The first retorts, "I don't have to outrun the bear I
only have to outrun you."  In the same vein, you don't need great
security, you just need something better than the school next door. ;-)

Personally, I still believe in WPA2-only with CCMP-only and hex
passwords pulled from /dev/random.  It's not that much more work to set
up that way and give the attackers something very substantial to chew
on.

-wolfgang
-- 
Wolfgang S. Rupprecht      http://www.wsrcc.com/wolfgang/      (IPv6-only)