Quote:
Originally Posted by streaker69
I agree with this. I have two AP's at work, one broadcasts one doesn't. The one that doesn't, has only one client that is supposed to connect to it, and it's hardcoded to connect to only that AP. As for a hacker finding it, good luck I say, it's in a big metal building, when the garage door is down, you can't even pick up a broadcast from it. If the door is up, I'd think I'd notice someone sitting in their car in the parking lot screwing around with it. Plus, I have my syslog server email me everytime someone connects to that AP.
The other one is just an AP that I turn on in the conference room if we're having guests. It does broadcast, and that's just because it's easier for the clueless. When there's no one using the room, I actually turn the AP off completely.
But I do understand SP's point. In the place he was describing, it would be easy for someone to setup camp and not be noticed.
|
I did the same thing when I was at Alpha Circuits... had the Engenuis's AP's locked down, not broadcasting etc.. for the company use, and each of the 3 conference rooms had a linksys WAP that would allow internet access, all they had to do is throw a switch on the wall and it would go live.
So when I pointed out to this guy that Wifi has its uses in corp. America, it also has its risks.
Like a woman have unprotected sex without practicing a form of birth control.... sooner or later they get knocked up, or they contract a disease.
Its how you minimize the risks that counts. This guy was not taking steps it would seem to do so.
And I bet if I wanted to I could do a scan of his building, find the AP, and log into it. I won't because I know better and 2) sooner or later someone will jack with his network.