Re: [LUG] re homeplugs - VIP

[Alan Jones <alan@xxxxxxxxxxxx>]

Seconded!!

Mac address filtering IS less than useless! (Google "Cain & Abel" and "MacMakeup" to see JUST how easy it is!)
Why not get a cheap wireless router and set it to WPA? Use a nice long maximum entropy password and thats about as secure as it gets!
These days, they ARE as cheap as chips!

Alan


Robin Cornelius wrote:

On Fri, Aug 22, 2008 at 2:11 PM, kevin <kevin.lucas@xxxxxxxxxxxxxxxxxx> wrote:

  

You could keep your existing network and apply ipsec encryption to it
but this would require a router that can do ipsec or using a computer
as a router which can easily have ipsec enabled etc.

Robin

      

I just use the mac address filter
so only hardware I know about can  get on!
    

Maybe you would like me to demonstrate an ARP Spoof attack where i
redirect all your traffic through my laptop and sniff your passwords
and watch what websites you are visiting in real time. This is very
very easy.

And as i can see packets wining around the network i can get your mac
addresses and its trival on some hardware to change the mac address
anyway so i can just spoof your one and bang i'm in your network.

Mac address filters are mostly worthless don't rely on them for any
real security.

Robin

  

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html