View Single Post
Old 09-29-2004   #13 (permalink)
Chris
Bad as Can
 
Chris's Avatar
 
Join Date: Jul 2002
Posts: 1,141
Quote:
Originally Posted by c0rnholio
Yeah, I know...


ACK, but WEP should only be used if there _is no_ alternative. I know that most older AP's don't support WPA but all new devices should. So if one has the chance to use WPA-PSK, WPA-TKIP or proporitary 256bit WEP he definately should. The reason I posted my statement is that people are learning from reading the posts in this forum and if one is writing that WEP is still ok, he should also mention that it is only ok if there are no alternatives. (IMO of course )

My recommendation is to sell the old AP on ebay or whereever and get a new one that supports WPA.

I agree with Thorn on this. For a home user WEP is good enough (although in my opinion that applies to 128 bit only, forget 64 bit altogether).

Here is my reasoning and in relation to your post about sniffing a neighbors connection for a few days. Why bother? I gaurantee you that for every WEP encrypted network you can see, you can also see 2 that are wide open. What does an attacker gain from accessing YOUR network. The purpose of using WEP in a home environment is to avoid being a target of convenience.

If a person has information on their home network that they feel needs actual protection from attackers, WEP is not an option...but for that matter...what they hell are they doing putting info that needs protecting on their wireless network anyway?

At this point we start to degrade into a philospophical INFOSEC discussion that can quickly become circular.

So, to restate and summarize, I agree with Thorn. 128 bit WEP is enough for most home users.
__________________
perl -e 'print pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
Chris is offline   Reply With Quote