Security Basics mailing list archives

Re: radius+ wireless


From: GuidoZ <uberguidoz () gmail com>
Date: Thu, 18 Nov 2004 00:29:58 +0000

The quick answer - you bet it's possible. And yes, depending on the
WEP key and the amount of access an attacker has to the signal, it
could be fairly quick.

I'll allow you to do your own research, though I'll point you in some
directions. Also, instead of giving you a large list of tools that are
used, allow me to point you at a well known list:
http://www.wi-foo.com/index-3.html Take a close peek at programs like
Kismet/Netstumbler and AirCrack/AirSnort.

Having MAC filtering enabled and not broadcasting the SSID is two
simple steps to help "secure" your wifi network from your average
script kiddie. However, this will do little more then create a speed
bump for anyone remotely knowledgable about wifi and the means of
breaking WEP/WPA.

Google is also your friend. If you have specif questions beyond this,
feel free to drop me a line directly or straight to the list. =)

--
Peace. ~G


On Wed, 17 Nov 2004 19:18:03 -0300, Gaspar de Elías
<gaspar.delias () gmail com> wrote:
hello
I'm an isp, and i'm providing internet to my customers via wireless,
authenticating with a radius server on freeBSD. My question is the
folowing: Can somebody sniff the wireless conections, crack WEP
alghoritm, and cheat his mac and ip addresses in order to steal
information from one of my customers?
A friend told me that doing this is incredibly easy, so i'm investigating.
What should i implement to make my wireless lan more secure?

--
Gaspar de Elías



Current thread: