View Single Post
Old 02-03-2010, 00:31   #18
Ed2020
Inactive
 
Join Date: May 2007
Services: Virgin Media XL package.
Posts: 272
Ed2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to allEd2020 is a name known to all
Re: Concerned about "Piggybackers".

Quote:
Originally Posted by darkm View Post
Static ip as in, assign ip's through your router to each mac. Yes Virgin use dynamic which rarely changes anyway but with the router options use a lan ip setup with Mac address filtering as well.
Whilst I don't dispute that there are benefits, in some circumstances, to assigning static IPs on the LAN I can see few (if any) benefits from a security perspective. And I've no idea what it has to do with the way VM allocate IPs to devices on their network...

Quote:
Originally Posted by darkm View Post
Wpa/2 is secure with a good password. For the casual "piggybacker" your network will be secure.
With a strong password it will be secure against determined hackers as well as casual piggybackers.

Quote:
Originally Posted by darkm View Post
The Mac address filtering is a good backup as well if someone did happen to gain access to your network by bruteforcing the password.
If it's a good password it won't be crackable in a realistic timescale with a bruteforce attack. Quote from http://blogs.zdnet.com/hardware/?p=2724

"For example, a 15 character password made up of uppercase, lowercase, digits and common punctuation is highly resistant to a brute-force attack. Even at the rate of 100,000,000 password attempts a second, cracking that could take 3.5 x 10^12 years."

Anyone with the patience and the technology to bruteforce a good WPA2 password (if such a person existed) will find MAC spoofing incredibly trivial to circumvent. In this situation it provides no backup whatsoever - nobody is going to go to the trouble of cracking a WPA2 password and then give up when they see there's MAC filtering to workaround.

Quote:
Originally Posted by darkm View Post
My advice dont listen to the scare mongering that it still not safe..
Lets face nothing is really safe, anything can be cracked given time and money....
WPA2 is secure. It's certainly secure enough for any home network. MAC filtering offers no meaningful additional security. True, anything can be cracked given enough time, but with WPA2 we're not talking months, or even years. With current technology it would take substantially longer than the universe has existed for.
Ed2020 is offline   Reply With Quote