Protected WLAN

[JD]

On 05/22/11 07:14, Tim wrote:
> Mikkel L. Ellertson:
>>> They do not usually guess. The use a program that monitors the
>>> traffic, and captures the MAC address of any system that connects to
>>> the router. They then use one of these to connect.
> JD:
>> So, the initial connection request goes in the clear!
>> Now that's security!! :)
> It has to work that way.  You connect a route, then encrypt traffic that
> will go through it.  The connection setup isn't doing anything that
> gives away secrets, it's just connecting two things together.
>
I was referring to the use of MAC filtering which is
soundly defeated by the transmission of the MAC
in the clear. So, MAC filtering is absolutely useless
as a security measure.
If I turn off my machine, the hacker has my MAC, and
will have 1 less thing to worry about getting.

My reliance is then totally on wpa2-psk/aes and a
well chosen 63 byte pass-phrase.

> And as far as how long does it take.  Well, on a network that may have
> 50 megabit per second speed, sending out numerous relatively smaller
> packets (all with networking headers) hundreds or thousands of times per
> second, how long do you think it would take to see data *about* the
> connections?
>
> Blink, and you'll miss it.
Not with modern day scanners which capture packets continuously.