Its false security. Mainly because anyone capable of hacking your network can see your SSID with their toolset (its still out there in the ether).
Obscurity != Security And with that, let the soapboxing begin... -- ME2 On Fri, May 21, 2010 at 10:43 AM, Murray Freeman <[email protected]>wrote: > I've been "lurking" on this topic, and I have a couple of questions. > First, I have a wifi at home and I have the radio broadcast turned off. I'm > using INSSIDER software to look around my neighborhood from time to time. My > SSID shows up as "unknown". Obviously I have no problem connecting and if > someone who has never connected previously comes over, I help them by > telling them the SSID and password to connect. The next time they come over, > they connect automatically. So, my questions. First, even if you know my > SSID, you need to know my password or you're not going to connect. I figure > that without the SSID, it is even more difficult for a stranger to connect. > Oh, I'm using WPA2 security. I know I could use MAC filtering, but I'm > comfortable that I'm secure enough. Can you guys explain to me how having > the radio broadcast turned off makes the security lessened? > > > *Murray * > > > ------------------------------ > *From:* Erik Goldoff [mailto:[email protected]] > *Sent:* Friday, May 21, 2010 12:01 PM > > *To:* NT System Admin Issues > *Subject:* RE: script SSID for wireless configs > > > > No real input as their decisions are already made, but like I said, they > are depending solely on non-broadcast of the SSID as their ‘security’, they > do have other proper measures in place. > > *Erik Goldoff*** > > *IT Consultant* > > *Systems, Networks, & Security * > > ' Security is an ongoing process, not a one time event ! ' > > *From:* Carl Houseman [mailto:[email protected]] > *Sent:* Friday, May 21, 2010 11:55 AM > *To:* NT System Admin Issues > *Subject:* RE: script SSID for wireless configs > > > > The post was offered as a general comment, not a response to your > question. That happens around here a lot. As IT consultant, do you not > have any capacity to advise the agency on security matters? Or keep them > from shooting themselves in the foot? I guess not... > > > > Carl > > > > *From:* Erik Goldoff [mailto:[email protected]] > *Sent:* Friday, May 21, 2010 11:50 AM > *To:* NT System Admin Issues > *Subject:* RE: script SSID for wireless configs > > > > Thank you but that was not the question. To the agency, this is one layer > of security, in addition to WPA, etc. The question is whether the wireless > config could be scripted. > > > > *Erik Goldoff*** > > *IT Consultant* > > *Systems, Networks, & Security * > > ' Security is an ongoing process, not a one time event ! ' > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
