[olug] Wireless Security?

[Nate Rotschafer]

I feel it necessary to point out a few things...

1) WEP doesn't stop people from seeing your traffic
2) How long it takes to break a WEP key is a function of how much traffic 
goes over a wireless network cause they have to capture ~15000 packets to 
have a reasonable amount to break a WEP key iirc
3) WEP v.2 will fix the issues since the issues are just a poor 
implementation of the RSA keying scheme
4) The safest way is to put wireless on its own network (VLAN to you Cisco 
gurus) and then allow VPN access into your private network from the wireless 
network...then enable WEP...so you have WEP encrypting packets that are 
already encrypted...that would be a "best security practice" imho

Nate


>From: Jordan Wilberding <diginux at diginux.net>
>Reply-To: olug at olug.org
>To: olug at olug.org
>Subject: Re: [olug] Wireless Security?
>Date: Wed, 17 Jul 2002 15:05:34 -0500
>
>
> > I read this on a website for wireless internet access.  I thought WEP
> > was considered relatively insecure now?  I would not consider wireless
> > access security "second to none".
> >
> > Can anybody shed some more light on how secure wireless is right now?
>
>Not very,
>http://www.isaac.cs.berkley.edu/isaac/web-faq.html
>
>At a local company in my town they are implemented a wireless LAN too
>and they tested out WEP encryption. They broke it in 8 min :)
>
>So they decided instead to use an algorithm (I forget the name) that 
>changes
>the key every 10 min.
>
>-Jordan Wilberding
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
>For help contact olug-help at olug.org - run by ezmlm
>to unsubscribe, send mail to olug-unsubscribe at olug.org
>or `mail olug-unsubscribe at olug.org < /dev/null`
>(c)1998-2002 OLUG http://www.olug.org
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at olug.org - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at olug.org
or `mail olug-unsubscribe at olug.org < /dev/null`
(c)1998-2002 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_