I'm not a wireless guru, but I play one on TV... So... There are different levels at which you could be insecure.
- People can observe your raw data travelling between wireless client and access point - People can "connect" to your access point and use it to connect to the Internet - People can connect to your AP and attempt to hack computers on your LAN (generally more dangerous for PCs than Macs). - People can get physical access to a computer already on your network and use that to do whatever (unlikely if the computer is in your house, but who knows!) So as a general rule, I don't do any financial stuff (credit card transactions, online banking, online shopping, etc) when I'm not hard wired. I also try to avoid sending "sensitive" (passwords, SSN, etc) information from my wireless clients. Chances are that no one is snooping on my network, but I like to be safe. I'm not concerned with people using my bandwidth to get on the Internet, but I suppose I should be. Someone with low morals could use your connection to do something illegal online. When his victim checks the logs, your IP address will appear as the attacker's. Since most APs don't keep logs of who was connected and when, ultimately the finger of blame will be pointed at you. Still, chances are, this won't happen to you. Since we are all running Mac OS 7/8/9, there's very little chance anyone will ever hack your Macintosh. It's pretty darn hard to hack a Mac, especially for your average script kiddy. Don't allow "guests" to connect to your Mac, set good passwords for all your users, or avoid using file sharing all together. Don't run FTP or web servers (including Personal Web Sharing). If you do that, your Mac is more-or-less bulletproof. If you've got a PC, then that's a wholely different beast. OS X is supposed to be more secure out of the box, but let's face it - OS X has lots of switches to toggle and is built on an OS that takes a whole different approach to network security that the classic Mac OS (which basically was originally built never having been intended to be connected). WEP (even 128bit WEP) is compromised and can be broken pretty easily - tools exist that will let almost anyone break your WEP encryption. WEP pretty much just keeps honest people honest. If someone is determined, your WEP encryption won't stop him from breaking into your network. Some APs also give you the option to "hide," "cloak," or "close" your network. That can make your network harder to detect (my ClassicStumber can't see these types of networks, for example), but there are tools which defeat this too (NetStumbler, for one). The best solution might be to find an AP that only allows clients with known MAC addresses to connect (this won't stop someone from sniffing your wireless data though). If you are really concerned about security, don't use 802.11b. Stick with your wired LAN or modem. (There are ways to still be relatively secure though, like using PGP encryption when sending data, etc. Or you could put a copper cage around your house to capture all stray RF signals.... heh) Peace, Drew -- Author of ClassicStumbler email: <[EMAIL PROTECTED]> web: <http://homepage.mac.com/alk/> Want to know if your neighbor has Wi-Fi? Find out with ClassicStumbler! <http://homepage.mac.com/alk/classicstumbler/> -- PowerBooks is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Enter To Win A | -- Canon PowerShot Digital Cameras start at $299 | Free iBook! | Support Low End Mac <http://lowendmac.com/lists/support.html> PowerBooks list info: <http://lowendmac.com/lists/powerbooks.shtml> --> AOL users, remove "mailto:" Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive: <http://www.mail-archive.com/powerbooks%40mail.maclaunch.com/> Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
