On Mon, Jun 18, 2012 at 10:17 AM, Andrew S. Baker <[email protected]> wrote:
> BTW, just as a point of clarification, each measure of a security posture
> does not necessarily have to be secure in and of itself.  Your security lies
> in the combination of each of these measures, operating together.  There is
> *some* security value in obscurity.   It is better said that true security
> cannot be had through obscurity alone.

  There's security, and then there's keeping a low profile.  The two
go well together.

  In particular, I like to keep a low profile as it means there's less
noise from unskilled intrusion attempts.  The more sophisticated
attacks will stand out more.

  That said, as always, it comes down to cost/benefit.  Hiding the
SSID gives you some benefit in the keeping a low profile department,
but if the cost includes a huge number of help desk calls or other
confusion, it may well not be worth it.

  And every scenario is different.  For example, if you're in the
middle of a dense population area with lots of script-kiddie wannabe
"hackers", the noise from that might make hiding an SSID worth it.
OTOH, if you're fairly isolated (say, in a large complex owned by a
single organization), and there's little chance of someone finding
your RF signal by mistake, hiding the SSID might not yield as much
benefit.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to