I'm not a wireless guru, but I play one on TV...  So...

There are different levels at which you could be insecure.

- People can observe your raw data travelling between wireless client 
and access point
- People can "connect" to your access point and use it to connect to 
the Internet
- People can connect to your AP and attempt to hack computers on your 
LAN (generally more dangerous for PCs than Macs).
- People can get physical access to a computer already on your 
network and use that to do whatever (unlikely if the computer is in 
your house, but who knows!)

So as a general rule, I don't do any financial stuff (credit card 
transactions, online banking, online shopping, etc) when I'm not hard 
wired.  I also try to avoid sending "sensitive" (passwords, SSN, etc) 
information from my wireless clients.  Chances are that no one is 
snooping on my network, but I like to be safe.

I'm not concerned with people using my bandwidth to get on the 
Internet, but I suppose I should be.  Someone with low morals could 
use your connection to do something illegal online.  When his victim 
checks the logs, your IP address will appear as the attacker's. 
Since most APs don't keep logs of who was connected and when, 
ultimately the finger of blame will be pointed at you.  Still, 
chances are, this won't happen to you.

Since we are all running Mac OS 7/8/9, there's very little chance 
anyone will ever hack your Macintosh.  It's pretty darn hard to hack 
a Mac, especially for your average script kiddy.  Don't allow 
"guests" to connect to your Mac, set good passwords for all your 
users, or avoid using file sharing all together.  Don't run FTP or 
web servers (including Personal Web Sharing).  If you do that, your 
Mac is more-or-less bulletproof.  If you've got a PC, then that's a 
wholely different beast.  OS X is supposed to be more secure out of 
the box, but let's face it - OS X has lots of switches to toggle and 
is built on an OS that takes a whole different approach to network 
security that the classic Mac OS (which basically was originally 
built never having been intended to be connected).

WEP (even 128bit WEP) is compromised and can be broken pretty easily 
- tools exist that will let almost anyone break your WEP encryption. 
WEP pretty much just keeps honest people honest.  If someone is 
determined, your WEP encryption won't stop him from breaking into 
your network.

Some APs also give you the option to "hide," "cloak," or "close" your 
network.  That can make your network harder to detect (my 
ClassicStumber can't see these types of networks, for example), but 
there are tools which defeat this too (NetStumbler, for one).

The best solution might be to find an AP that only allows clients 
with known MAC addresses to connect (this won't stop someone from 
sniffing your wireless data though).

If you are really concerned about security, don't use 802.11b.  Stick 
with your wired LAN or modem.  (There are ways to still be relatively 
secure though, like using PGP encryption when sending data, etc.  Or 
you could put a copper cage around your house to capture all stray RF 
signals.... heh)

Peace,
Drew
-- 

Author of ClassicStumbler
email: <[EMAIL PROTECTED]>
web: <http://homepage.mac.com/alk/>

Want to know if your neighbor has Wi-Fi?  Find out with 
ClassicStumbler! <http://homepage.mac.com/alk/classicstumbler/>


-- 
PowerBooks is sponsored by <http://lowendmac.com/> and...

  Small Dog Electronics    http://www.smalldog.com   | Enter To Win A |
  -- Canon PowerShot Digital Cameras start at $299   |  Free iBook!   |

      Support Low End Mac <http://lowendmac.com/lists/support.html>

PowerBooks list info:   <http://lowendmac.com/lists/powerbooks.shtml>
  --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/powerbooks%40mail.maclaunch.com/>

Using a Mac? Free email & more at Applelinks! http://www.applelinks.com

Reply via email to