Member Panel

thedudesam

Hiya i bought a great ADSL router from netgear, its fantastic, my ps3 connects no problem and my pc works fine with it.

I had WEP security and it was fine, no drop in speeds.

But i read WEP is basicly ****, so i use WPA but now my speeds are slightly slower, i notice no lag on ps3 games.

But my main pc which is connected via a lan cable. I get 200 ping on all Source games, DoD, CS:s, TF, HL2

m

and so on =[

Hengis

So re-enable WEP and use mac address filtering on the router...far more secure than either WEP or WPA on their own

etoad

Originally Posted by Hengis

So re-enable WEP and use mac address filtering on the router...far more secure than either WEP or WPA on their own

Noooooo!!!!

To quote George Ou from his six dumbest ways to secure a wireless network:as it's easier than me typing my version ...

"MAC filtering: This is like handing a security guard a pad of paper with a list of names. Then when someone comes up to the door and wants entry, the security guard looks at the person's name tag and compares it to his list of names and determines whether to open the door or not. Do you see a problem here? All someone needs to do is watch an authorized person go in and forge a name tag with that person's name. The comparison to a wireless LAN here is that the name tag is the MAC address. The MAC address is just a 12 digit long HEX number that can be viewed in clear text with a sniffer. A sniffer to a hacker is like a hammer to a carpenter except the sniffer is free. Once the MAC address is seen in the clear, it takes about 10 seconds to cut-paste a legitimate MAC address in to the wireless Ethernet adapter settings and the whole scheme is defeated. MAC filtering is absolutely worthless since it is one of the easiest schemes to attack. The shocking thing is that so many large organizations still waste the time to implement these things. The bottom line is, MAC filtering takes the most effort to manage with zero ROI (return on investment) in terms of security gain."

Hengis · 09:42 PM

...and as both WEP and WPA have been hacked, it's really a non-arguement. Having 2 types of protection as opposed to 1 hacked one has got to be better...surely and I was suggesting a combination, of course.

etoad

In which case fine ....

I read your response as do the MAC filtering and nothing else ... my humble apols ....

Hengis

Hehe..no need to apologise friend. We only want what's best for people here and your input is just as valid as mine

Lebowski · 03:53 AM

I disagree personally; having done a little wardriving myself.

WEP is a piece of cake to crack, deauth & aireplay it takes a few mins to capture enough IV's to grab the key, it's also trivial to find the a mac address of a valid client to spoof.

WPA/WPA2/etc takes much much longer. So much so it's not even worth the time most of the time unless you have a specific reason

However unless you're actually worried about people cracking a wep key don't let it bother you. WEP + Mac access list should be fine as it stops 99% of leeches

, also, disable SSID broadcasting or at the very least ensure it's not the default SSID.

Also thinking about it, if you wanted a little more protection you could turn off DHCP and use static addresses.

-Lebowski

Member Panel

Sponsors and Ads

Noticeboard