<?xml version="1.0" encoding="UTF-8"?> <rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
xmlns:media="http://search.yahoo.com/mrss/"
><channel><title>Chris Pirillo &#187; wep</title> <atom:link href="http://chris.pirillo.com/tag/wep/feed/" rel="self" type="application/rss+xml" /><link>http://chris.pirillo.com</link> <description>News and Reviews! Geek, Internet Entrepreneur, Hardware Addict, Software Junkie, Book Author, Once TV Show Host, Technology Enthusiast, Shameless Self-Promoter, Tech Conference Coordinator, Early Adopter, Idea Evangelist, Tech Support Blogger, Bootstrapper, Media Personality, Technology Consultant, Thicker Quicker Picker Upper.</description> <lastBuildDate>Tue, 24 Nov 2009 12:46:05 +0000</lastBuildDate> <generator>http://wordpress.org/?v=2.8.5</generator> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <copyright>&#xA9; </copyright> <managingEditor>chris@pirillo.com ()</managingEditor> <webMaster>chris@pirillo.com()</webMaster> <category></category> <itunes:keywords></itunes:keywords> <itunes:subtitle></itunes:subtitle> <itunes:summary>Geek, Internet Entrepreneur, Hardware Addict, Software Junkie, Book Author, Once TV Show Host, Technology Enthusiast, Shameless Self-Promoter, Tech Conference Coordinator, Early Adopter, Idea Evangelist, Tech Support Blogger, Bootstrapper, Media Personality, Technology Consultant, Thicker Quicker Picker Upper.</itunes:summary> <itunes:author></itunes:author> <itunes:category text="Society &amp; Culture"/> <itunes:owner> <itunes:name></itunes:name> <itunes:email>chris@pirillo.com</itunes:email> </itunes:owner> <itunes:block>No</itunes:block> <itunes:explicit>no</itunes:explicit> <itunes:image href="http://chris.pirillo.com/wp-content/plugins/podpress/images/powered_by_podpress_large.jpg" /> <image> <url>http://chris.pirillo.com/wp-content/plugins/podpress/images/powered_by_podpress.jpg</url><title>Chris Pirillo</title><link>http://chris.pirillo.com</link> <width>144</width> <height>144</height> </image> <item><title>Wireless Security: Why WEP is Bad</title><link>http://chris.pirillo.com/wireless-security-why-wep-is-bad/</link> <comments>http://chris.pirillo.com/wireless-security-why-wep-is-bad/#comments</comments> <pubDate>Mon, 10 Nov 2008 00:52:23 +0000</pubDate> <dc:creator>Chris</dc:creator> <category><![CDATA[Technology]]></category> <category><![CDATA[encryption]]></category> <category><![CDATA[wep]]></category> <category><![CDATA[wifi]]></category> <category><![CDATA[wireless]]></category> <category><![CDATA[wpa]]></category><guid
isPermaLink="false">http://chris.pirillo.com/2008/11/09/wireless-security-why-wep-is-bad/</guid> <description><![CDATA[<p><a
href="http://chris.pirillo.com/wireless-security-why-wep-is-bad/">Wireless Security: Why WEP is Bad</a> is a post from <a
href="http://chris.pirillo.com">Chris Pirillo</a></p><p><em>Fellow <a
href="http://geeks.pirillo.com/">geek</a> Andy Riordan emailed me in regards to a video we recorded a while ago on wireless (WiFi) access points. I haven&#8217;t used WEP for wireless security since WPA was available as an option. I refuse to run anything less than WPA on my home wireless network, although it was recently revealed that <a
href="http://www.vnunet.com/vnunet/news/2230071/researchers-crack-wpa">WPA has also been cracked</a>. What&#8217;s so bad about WEP? Andy&#8217;s here to explain&#8230;</em></p><p>WEP does indeed stand for Wired Equivalent Privacy, which is a rather hopeful name considering that WEP can be cracked in less than 60 seconds now. How? Well, when you connect to a WEP network, the router sends you a randomly generated &#8220;hello&#8221; message. The connecting machine then encrypts the message using the WEP key and sends it back to the router. The router then decrypts it with the WEP key, and if it matches the original, unencrypted (&#8221;cleartext&#8221;) message, the machine is authorized.</p><p>This is bad. Why? Well, first we have to look at how the encryption and decryption is done. You may or may not be familiar with bitwise operators, but in this case we&#8217;re dealing with &#8220;exclusive or&#8221;, XOR. XOR, like other bitwise operators, operates on bits. If the 2 input bits are 0 and 0, it puts out 0. If they are 1 and 0, it puts out 1. If they are 0 and 1, it puts out 1. If they are 1 and 1, it puts out 0.</p><p>To encrypt the data for WEP, the data is XORed with the key (getting &#8220;cyphertext&#8221;). To decrypt, the cyphertext is XORed with the key, reversing the operation and returning the cleartext. When you think about it, that really can be shown visually (hope it doesn&#8217;t get mauled in the mail):</p><p><span
style="font: 9pt 'Courier New', Courier">Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1<br
/> Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0</span></p><p>Now, to decrypt:</p><p><span
style="font: 9pt 'Courier New', Courier">Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0<br
/> Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1</span></p><p>As you can see, we end up with the original message. (Cryptography is fun!)</p><p>However, this is where the problem is. Remember what we did to authenticate with WEP &#8211; we got sent a cleartext message, and then sent back the cyphertext results. What happens when we XOR the cleartext with the cyphertext?</p><p><span
style="font: 9pt 'Courier New', Courier">Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0<br
/> Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> ???&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1</span></p><p>That byte looks a lot like one we&#8217;ve seen before. I wonder what it could be&#8230;</p><p><span
style="font: 9pt 'Courier New', Courier">Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1</span></p><p>Well, darn. That&#8217;s our key. An attacker can get our key just by XORing two things exchanged when a connection is made. It can&#8217;t be all bad, though, since a connection has to be made before that can happen, right? How often do you disconnect a machine and reconnect it? A few times a day. They would have to be lucky to catch you doing it.</p><p>Except that there&#8217;s another vulnerability which makes booting everyone off the network and causing a reconnect easy. Thus, our friend the cracker needs only to force a disconnect of all clients, then watch for the handshake and XOR the two pieces of information exchanged between the router and one of the clients.</p><p>That&#8217;s why you use WPA now. WPA is pretty much competely safe, if you have a good password. Rule 1 (or perhaps it&#8217;s 0) of security is that you never use a short, easily guessable password. Using a short, easy to guess password opens you up to the dictionary attack, or as I like to call it, the Gandalf attack. Scream elvish words at the router long enough and the gates of Moria are bound to open to one of them. Make the &#8220;word&#8221; long enough (32 characters is good, and is about what I use since some devices have issues with 64) and it will be impossible to guess. Again, a lock is only as secure as its combination. In your case, for instance, I don&#8217;t recommend a password of &#8220;Pixie&#8221;.</p><p>Now, for the banking/email question. This brings us to the realm of diffie-hellman key exchange. Many a beginning cryptographer has lost his life to the tangle of bits and factored prime numbers that awaits us here, so suffice it to say this: If there is an SSL connection between you and your web site of choice, you are safe. All your traffic will be encrypted, and will not be decrypted until you get to the site. You&#8217;re safe, as long as you have an SSL connection to the site itself, regardless of whether it&#8217;s an open wifi hotspot. If you don&#8217;t have an SSL connection and they give you a WEP or WPA key, don&#8217;t think banking will be secure &#8211; if they gave the key to you, they gave it to others, too!</p><p>Now, there are caveats (aren&#8217;t there always with technology?). Notice I said &#8220;If there is an SSL connection between you and your web site of choice, you are safe.&#8221; I don&#8217;t want to have to send you HTML mail, so mentally underline the first part of that sentance. What&#8217;s to stop the hotspot from saying &#8220;Ah, he&#8217;s going to &#8216;MyBankSite&#8217; &#8211; take out their certificate (the part that contains their &#8220;public key&#8221; &#8211; what you use to encrypt your data to send to them. Note that public and private key encryption are one-way operations &#8211; if you encrypt something with the public key, it cannot be easily decrypted with that same key. When I say &#8220;easily&#8221;, I mean it would take a supercomputer thousands of years.) and put in our own public key. That way, we can decrypt his traffic on our end, look at it, then encrypt it with his bank&#8217;s public key and send it on.&#8221; Well, in a word, nothing is stopping them. This is known as a man-in-the-middle attack.</p><p>Wait, nothing is stopping them? How am I safe, then? Well, nothing is STOPPING them, but their key won&#8217;t be signed by a signing authority. A signing authority basically verifies that a given key belongs to a given site, and then when someone asks whether a key belongs to &#8216;MyBankSite&#8217; they check their database and see. The &#8220;someone&#8221; who asks is your browser. This is done automatically in modern browsers &#8211; if you have the SSL indicator in your browser somewhere on &#8216;MyBankSite&#8217; (this varies by browser &#8211; it usually comes in the form of a lock in the statusbar), that means the browser has checked the site&#8217;s credentials out with a trusted authority (VeraSign, etc) and it has checked out. If you get a site that can&#8217;t be verified but has a certificate, you will be warned &#8211; as in the case of our scheming wifi friends. Thus, if you see a warning, run far, far away.</p><p>Whew. Well, that certainly only scratched the surface, but it should help some. Glad I didn&#8217;t type that on my phone.<ul
class="related_post"><li><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-home-network/" title="How to Secure your Wireless Home Network">How to Secure your Wireless Home Network</a></li><li><a
href="http://chris.pirillo.com/wireless-internet-is-everywhere/" title="Wireless Internet is Everywhere">Wireless Internet is Everywhere</a></li><li><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-network/" title="How to Secure Your Wireless Network">How to Secure Your Wireless Network</a></li><li><a
href="http://chris.pirillo.com/wireless-routers-review/" title="Wireless Routers Review">Wireless Routers Review</a></li><li><a
href="http://chris.pirillo.com/should-wi-fi-be-free/" title="Should Wi-Fi be Free?">Should Wi-Fi be Free?</a></li><li><a
href="http://chris.pirillo.com/clearwire-coupon/" title="Clearwire Coupon">Clearwire Coupon</a></li><li><a
href="http://chris.pirillo.com/safeguard-your-security-and-privacy/" title="Safeguard Your Security and Privacy">Safeguard Your Security and Privacy</a></li><li><a
href="http://chris.pirillo.com/the-go-to-guy/" title="The Go-To Guy">The Go-To Guy</a></li><li><a
href="http://chris.pirillo.com/one-step-for-privacy-and-security/" title="One Step for Privacy and Security">One Step for Privacy and Security</a></li><li><a
href="http://chris.pirillo.com/how-to-save-money-with-online-backup-service-discounts/" title="How to Save Money with Online Backup Service Discounts">How to Save Money with Online Backup Service Discounts</a></li></ul> ]]></description> <content:encoded><![CDATA[<p><a
href="http://chris.pirillo.com/wireless-security-why-wep-is-bad/">Wireless Security: Why WEP is Bad</a> is a post from <a
href="http://chris.pirillo.com">Chris Pirillo</a></p><p><em>Fellow <a
href="http://geeks.pirillo.com/">geek</a> Andy Riordan emailed me in regards to a video we recorded a while ago on wireless (WiFi) access points. I haven&#8217;t used WEP for wireless security since WPA was available as an option. I refuse to run anything less than WPA on my home wireless network, although it was recently revealed that <a
href="http://www.vnunet.com/vnunet/news/2230071/researchers-crack-wpa">WPA has also been cracked</a>. What&#8217;s so bad about WEP? Andy&#8217;s here to explain&#8230;</em></p><p>WEP does indeed stand for Wired Equivalent Privacy, which is a rather hopeful name considering that WEP can be cracked in less than 60 seconds now. How? Well, when you connect to a WEP network, the router sends you a randomly generated &#8220;hello&#8221; message. The connecting machine then encrypts the message using the WEP key and sends it back to the router. The router then decrypts it with the WEP key, and if it matches the original, unencrypted (&#8221;cleartext&#8221;) message, the machine is authorized.</p><p>This is bad. Why? Well, first we have to look at how the encryption and decryption is done. You may or may not be familiar with bitwise operators, but in this case we&#8217;re dealing with &#8220;exclusive or&#8221;, XOR. XOR, like other bitwise operators, operates on bits. If the 2 input bits are 0 and 0, it puts out 0. If they are 1 and 0, it puts out 1. If they are 0 and 1, it puts out 1. If they are 1 and 1, it puts out 0.</p><p>To encrypt the data for WEP, the data is XORed with the key (getting &#8220;cyphertext&#8221;). To decrypt, the cyphertext is XORed with the key, reversing the operation and returning the cleartext. When you think about it, that really can be shown visually (hope it doesn&#8217;t get mauled in the mail):</p><p><span
style="font: 9pt 'Courier New', Courier">Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1<br
/> Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0</span></p><p>Now, to decrypt:</p><p><span
style="font: 9pt 'Courier New', Courier">Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0<br
/> Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1</span></p><p>As you can see, we end up with the original message. (Cryptography is fun!)</p><p>However, this is where the problem is. Remember what we did to authenticate with WEP &#8211; we got sent a cleartext message, and then sent back the cyphertext results. What happens when we XOR the cleartext with the cyphertext?</p><p><span
style="font: 9pt 'Courier New', Courier">Cyphertext&nbsp;&nbsp;1 0 1 0 0 1 1 0<br
/> Cleartext&nbsp;&nbsp;&nbsp;0 1 1 0 1 0 1 1<br
/> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br
/> ???&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1</span></p><p>That byte looks a lot like one we&#8217;ve seen before. I wonder what it could be&#8230;</p><p><span
style="font: 9pt 'Courier New', Courier">Key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1 1 0 0 1 1 0 1</span></p><p>Well, darn. That&#8217;s our key. An attacker can get our key just by XORing two things exchanged when a connection is made. It can&#8217;t be all bad, though, since a connection has to be made before that can happen, right? How often do you disconnect a machine and reconnect it? A few times a day. They would have to be lucky to catch you doing it.</p><p>Except that there&#8217;s another vulnerability which makes booting everyone off the network and causing a reconnect easy. Thus, our friend the cracker needs only to force a disconnect of all clients, then watch for the handshake and XOR the two pieces of information exchanged between the router and one of the clients.</p><p>That&#8217;s why you use WPA now. WPA is pretty much competely safe, if you have a good password. Rule 1 (or perhaps it&#8217;s 0) of security is that you never use a short, easily guessable password. Using a short, easy to guess password opens you up to the dictionary attack, or as I like to call it, the Gandalf attack. Scream elvish words at the router long enough and the gates of Moria are bound to open to one of them. Make the &#8220;word&#8221; long enough (32 characters is good, and is about what I use since some devices have issues with 64) and it will be impossible to guess. Again, a lock is only as secure as its combination. In your case, for instance, I don&#8217;t recommend a password of &#8220;Pixie&#8221;.</p><p>Now, for the banking/email question. This brings us to the realm of diffie-hellman key exchange. Many a beginning cryptographer has lost his life to the tangle of bits and factored prime numbers that awaits us here, so suffice it to say this: If there is an SSL connection between you and your web site of choice, you are safe. All your traffic will be encrypted, and will not be decrypted until you get to the site. You&#8217;re safe, as long as you have an SSL connection to the site itself, regardless of whether it&#8217;s an open wifi hotspot. If you don&#8217;t have an SSL connection and they give you a WEP or WPA key, don&#8217;t think banking will be secure &#8211; if they gave the key to you, they gave it to others, too!</p><p>Now, there are caveats (aren&#8217;t there always with technology?). Notice I said &#8220;If there is an SSL connection between you and your web site of choice, you are safe.&#8221; I don&#8217;t want to have to send you HTML mail, so mentally underline the first part of that sentance. What&#8217;s to stop the hotspot from saying &#8220;Ah, he&#8217;s going to &#8216;MyBankSite&#8217; &#8211; take out their certificate (the part that contains their &#8220;public key&#8221; &#8211; what you use to encrypt your data to send to them. Note that public and private key encryption are one-way operations &#8211; if you encrypt something with the public key, it cannot be easily decrypted with that same key. When I say &#8220;easily&#8221;, I mean it would take a supercomputer thousands of years.) and put in our own public key. That way, we can decrypt his traffic on our end, look at it, then encrypt it with his bank&#8217;s public key and send it on.&#8221; Well, in a word, nothing is stopping them. This is known as a man-in-the-middle attack.</p><p>Wait, nothing is stopping them? How am I safe, then? Well, nothing is STOPPING them, but their key won&#8217;t be signed by a signing authority. A signing authority basically verifies that a given key belongs to a given site, and then when someone asks whether a key belongs to &#8216;MyBankSite&#8217; they check their database and see. The &#8220;someone&#8221; who asks is your browser. This is done automatically in modern browsers &#8211; if you have the SSL indicator in your browser somewhere on &#8216;MyBankSite&#8217; (this varies by browser &#8211; it usually comes in the form of a lock in the statusbar), that means the browser has checked the site&#8217;s credentials out with a trusted authority (VeraSign, etc) and it has checked out. If you get a site that can&#8217;t be verified but has a certificate, you will be warned &#8211; as in the case of our scheming wifi friends. Thus, if you see a warning, run far, far away.</p><p>Whew. Well, that certainly only scratched the surface, but it should help some. Glad I didn&#8217;t type that on my phone.<ul
class="related_post"><li><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-home-network/" title="How to Secure your Wireless Home Network">How to Secure your Wireless Home Network</a></li><li><a
href="http://chris.pirillo.com/wireless-internet-is-everywhere/" title="Wireless Internet is Everywhere">Wireless Internet is Everywhere</a></li><li><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-network/" title="How to Secure Your Wireless Network">How to Secure Your Wireless Network</a></li><li><a
href="http://chris.pirillo.com/wireless-routers-review/" title="Wireless Routers Review">Wireless Routers Review</a></li><li><a
href="http://chris.pirillo.com/should-wi-fi-be-free/" title="Should Wi-Fi be Free?">Should Wi-Fi be Free?</a></li><li><a
href="http://chris.pirillo.com/clearwire-coupon/" title="Clearwire Coupon">Clearwire Coupon</a></li><li><a
href="http://chris.pirillo.com/safeguard-your-security-and-privacy/" title="Safeguard Your Security and Privacy">Safeguard Your Security and Privacy</a></li><li><a
href="http://chris.pirillo.com/the-go-to-guy/" title="The Go-To Guy">The Go-To Guy</a></li><li><a
href="http://chris.pirillo.com/one-step-for-privacy-and-security/" title="One Step for Privacy and Security">One Step for Privacy and Security</a></li><li><a
href="http://chris.pirillo.com/how-to-save-money-with-online-backup-service-discounts/" title="How to Save Money with Online Backup Service Discounts">How to Save Money with Online Backup Service Discounts</a></li></ul> ]]></content:encoded> <wfw:commentRss>http://chris.pirillo.com/wireless-security-why-wep-is-bad/feed/</wfw:commentRss> <slash:comments>5</slash:comments> </item> <item><title>How to Secure Your Wireless Network</title><link>http://chris.pirillo.com/how-to-secure-your-wireless-network/</link> <comments>http://chris.pirillo.com/how-to-secure-your-wireless-network/#comments</comments> <pubDate>Fri, 25 Jan 2008 06:11:13 +0000</pubDate> <dc:creator>Chris</dc:creator> <category><![CDATA[Media Blog]]></category> <category><![CDATA[encrypt]]></category> <category><![CDATA[network]]></category> <category><![CDATA[router]]></category> <category><![CDATA[wep]]></category> <category><![CDATA[wireless]]></category><guid
isPermaLink="false">http://chris.pirillo.com/2008/01/24/how-to-secure-your-wireless-network/</guid> <description><![CDATA[<p><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-network/">How to Secure Your Wireless Network</a> is a post from <a
href="http://chris.pirillo.com">Chris Pirillo</a></p><p><object
width="325" height="264"><param
name="movie" value="http://www.youtube.com/v/Y83kt3My8nA"><param
name="wmode" value="transparent"></param><embed
src="http://www.youtube.com/v/Y83kt3My8nA" type="application/x-shockwave-flash" wmode="transparent" width="325" height="264"></embed></object></p><p><a
href="itms://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=73330048">Add to iTunes</a> | <a
href="http://youtube.com/subscription_center?add_user=lockergnome">Add to YouTube</a> | <a
href="http://fusion.google.com/add?feedurl=http://feeds.pirillo.com/ChrisPirillo">Add to Google</a> | <a
href="http://feeds.pirillo.com/ChrisPirillo">RSS Feed</a></p><p>One community member wrote: &#8220;After years of mistrust about wireless networks and creative use of Ethernet cabling I have now adopted a wireless network in my home for a laptop to access anywhere in the house. I have over the past week, done a lot of research and have some tips the community might want to consider in relation to the setup and/or use of wireless networks.&#8221;</p><p>Here are actually <strong>TWO</strong> Top 5 lists for helping make your wireless network more secure!</p><blockquote><ul><li><strong>Am I secured?</strong> If you haven’t set up security passwords yourself then it’s not likely that you will be secured. To find out, simply go to ‘My Network Places’ on your PC and scan for your wireless network. In the list that appears, there should be a picture of a padlock next to the name of your network. If there is no padlock, then you need some security.</li><li><strong>Use WPA.</strong> Most new routers now offer WiFi Protected Access (WPA) passwords as well as Wired Equivalent Privacy (WEP). WPA offers increased security, and if your computer and other hardware is compatible, you should always use WPA as it is far harder to hack into than previous encryption methods.</li><li><strong>Added security.</strong> You should also always have comprehensive anti-virus software such as Norton or McAfee installed on your computer to protect you from viruses that can open your PC up to hackers. Make sure that these are always kept up to date by regularly checking for updates on the provider’s website. You should also use a firewall &#8211; many routers have one built-in but you should run one on your PC too.</li><li><strong>Isolate your wireless signal.</strong> Wireless isolation works to make your signal invisible to anyone searching for WiFi in your area. Wireless Broadband UK is built-in to some routers but must be physically enabled by the user &#8211; so check your router’s manual for Wireless Broadband tips on how to do this.</li><li><strong>Use an access list.</strong> If you’re still worried, you can create an access list. All computers have their own Media Access Control (MAC) address &#8211; a way of identifying each individual computer &#8211; and you can tell your router which MAC addresses it can allow access to; blocking all others. This means that anyone wanting to use your wireless signal would not only have to have your password but would have to be on the access list too.</li></ul></blockquote><blockquote><ul><li><strong>Encrypt it!</strong> The first and most important consideration if you are thinking of running a wireless network is to make sure that you have not left the network totally unsecured, I say totally unsecured as no network is ever 100% secure and this is especially the case with wireless networks as they allow easier access for potential unsavory characters to get in. An unencrypted wireless connection can allow anyone within the range of your wireless signal to immediately connect to it and start using your Internet connection for personal and/or criminal purposes and also access any files you may have shared on the hard drives of the machines connected on the network. </br><br
/> There are many guides available on securing your wireless network available on the Internet and your router&#8217;s manual should also provide a guide in doing so. A lot of the terminology and setup options may at first seem very technical to you but the couple of hours of research/setup is valuable time to spend where your privacy is concerned.</li><li><strong>Be aware what you share,</strong> Most people using a wireless network or any network for that matter usually want to share files between computers on the network. Make sure you do not share any files in these shared areas which are in any way confidential or important enough that you would not want anyone to potentially see them. For example you might want to share some mp3s on a computer to listen to on another computer in your house which is fine, however sharing say a document with your bank details etc on is a definite no no. </br><p>If totally unsecured, anyone within range of your wireless network can access any of these files without you noticing. Securing your wireless network will 99.9% of the time stop this intrusion but as mentioned no wireless network is 100% secure so just avoid sharing important files.</li><li><strong>Be aware of public hot spots.</strong> There are many wireless hot spots in coffee shops or in general, wireless is everywhere! and where there is an abundance of something there are usually some individuals lurking about ready to exploit it. If you are thinking of or do use these wireless hot spots there are some things to remember. Turn off your shared files, even if they are only mp3s, it is still wise to make sure they cannot access your hard drive. </br><p>Make sure any sites where you enter login details are secure. This can normally be determined with &#8216;https&#8217; in the URI in the address bar or the padlock symbol in the bottom right of your browser window. This is because computers sharing the same network as you can (with the right software) see exactly what you are sending or receiving over that network unless that information is encrypted. This also means that it is possible for someone to snoop in on what websites you are visiting or the email you are sending (be aware that most secure sites merely secure the login details you enter, after that everything is visible on the network) so it is advisable to be a bit conservative on what you do on the Internet in these places. It is certainly a wise idea to wait until you get home to check your bank balance online or make an online purchase.</li><li><strong>Keep your computer up to date and behind a firewall.</strong> Making sure you have your computer&#8217;s operating system up to date, a virus program installed and a firewall initiated on your machine should be something you have implemented anyway. However with the increased security risk a wireless network can expose you to, these things are totally essential in keeping you safe and secure. It is also the case I have found that users will often keep their main desktop computer up to date but neglect a laptop that they do not use as often. These laptops are likely the candidate machine that the user will be using to access a wireless network.</li><li><strong>Turn it off.</strong> Simple yet most effective tip. If you are a moderate user simply turn your router/wifi off when you are not using it or schedule the wireless connection to only be off at times you know you will not be using it. If it is off then your wireless network is 100% safe.</li></ul></blockquote><p><ul><li
style='margin-bottom:15px'><a
rel='nofollow' href='http://shop.tagjag.com/cb/lockergn/BCCOMP/'>Win-Spy Monitoring Software.</a></li></ul></p><p>Want to embed this video on your own site, blog, or forum? Use this code or <a
href="http://blip.tv/file/get/L0ckergn0me-HowToSecureYourWirelessNetwork758.mp4">download the video</a>:</p><p><textarea style="width: 460px; height:60px;">&#60;object width=&#34;425&#34; height=&#34;350&#34;&#62;&#60;param name=&#34;movie&#34; value=&#34;http://www.youtube.com/v/Y83kt3My8nA&#34;&#62;&#60;/param&#62;&#60;param name=&#34;wmode&#34; value=&#34;transparent&#34;&#62;&#60;/param&#62;&#60;embed src=&#34;http://www.youtube.com/v/Y83kt3My8nA&#34; type=&#34;application/x-shockwave-flash&#34; wmode=&#34;transparent&#34; width=&#34;425&#34; height=&#34;350&#34;&#62;&#60;/embed&#62;&#60;/object&#62;&#60;br /&#62;&#60;a href=&#34;http://chris.pirillo.com/&#34;&#62;Chris&#60;/a&#62; | &#60;a href=&#34;http://live.pirillo.com/&#34;&#62;Live Tech Support&#60;/a&#62; | &#60;a href=&#34;http://media.pirillo.com/&#34;&#62;Video Help&#60;/a&#62; | &#60;a href=&#34;http://feeds.pirillo.com/ChrisPirilloShow&#34;&#62;Add to iTunes&#60;/a&#62;</textarea></p><ul
class="related_post"><li><a
href="http://chris.pirillo.com/wireless-routers-review/" title="Wireless Routers Review">Wireless Routers Review</a></li><li><a
href="http://chris.pirillo.com/wireless-security-why-wep-is-bad/" title="Wireless Security: Why WEP is Bad">Wireless Security: Why WEP is Bad</a></li><li><a
href="http://chris.pirillo.com/wireless-networks-hard-drive-failures-web-browsers/" title="Wireless Networks, Hard Drive Failures, Web Browsers">Wireless Networks, Hard Drive Failures, Web Browsers</a></li><li><a
href="http://chris.pirillo.com/how-to-optimize-network-management/" title="How to Optimize Network Management">How to Optimize Network Management</a></li><li><a
href="http://chris.pirillo.com/windows-security-software/" title="Windows Security Software">Windows Security Software</a></li><li><a
href="http://chris.pirillo.com/what-is-community/" title="What is Community?">What is Community?</a></li><li><a
href="http://chris.pirillo.com/protecting-your-privacy-and-security/" title="Protecting Your Privacy and Security">Protecting Your Privacy and Security</a></li><li><a
href="http://chris.pirillo.com/whats-your-favorite-bluetooth-device/" title="What&#8217;s Your Favorite Bluetooth Device?">What&#8217;s Your Favorite Bluetooth Device?</a></li><li><a
href="http://chris.pirillo.com/how-to-email-web-pages-to-yourself/" title="How to Email Web Pages to Yourself">How to Email Web Pages to Yourself</a></li><li><a
href="http://chris.pirillo.com/who-are-you-on-twitter/" title="Who Are You on Twitter?">Who Are You on Twitter?</a></li></ul> ]]></description> <content:encoded><![CDATA[<p><a
href="http://chris.pirillo.com/how-to-secure-your-wireless-network/">How to Secure Your Wireless Network</a> is a post from <a
href="http://chris.pirillo.com">Chris Pirillo</a></p><p><object
width="325" height="264"><param
name="movie" value="http://www.youtube.com/v/Y83kt3My8nA"><param
name="wmode" value="transparent"></param><embed
src="http://www.youtube.com/v/Y83kt3My8nA" type="application/x-shockwave-flash" wmode="transparent" width="325" height="264"></embed></object></p><p><a
href="itms://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=73330048">Add to iTunes</a> | <a
href="http://youtube.com/subscription_center?add_user=lockergnome">Add to YouTube</a> | <a
href="http://fusion.google.com/add?feedurl=http://feeds.pirillo.com/ChrisPirillo">Add to Google</a> | <a
href="http://feeds.pirillo.com/ChrisPirillo">RSS Feed</a></p><p>One community member wrote: &#8220;After years of mistrust about wireless networks and creative use of Ethernet cabling I have now adopted a wireless network in my home for a laptop to access anywhere in the house. I have over the past week, done a lot of research and have some tips the community might want to consider in relation to the setup and/or use of wireless networks.&#8221;</p><p>Here are actually <strong>TWO</strong> Top 5 lists for helping make your wireless network more secure!</p><blockquote><ul><li><strong>Am I secured?</strong> If you haven’t set up security passwords yourself then it’s not likely that you will be secured. To find out, simply go to ‘My Network Places’ on your PC and scan for your wireless network. In the list that appears, there should be a picture of a padlock next to the name of your network. If there is no padlock, then you need some security.</li><li><strong>Use WPA.</strong> Most new routers now offer WiFi Protected Access (WPA) passwords as well as Wired Equivalent Privacy (WEP). WPA offers increased security, and if your computer and other hardware is compatible, you should always use WPA as it is far harder to hack into than previous encryption methods.</li><li><strong>Added security.</strong> You should also always have comprehensive anti-virus software such as Norton or McAfee installed on your computer to protect you from viruses that can open your PC up to hackers. Make sure that these are always kept up to date by regularly checking for updates on the provider’s website. You should also use a firewall &#8211; many routers have one built-in but you should run one on your PC too.</li><li><strong>Isolate your wireless signal.</strong> Wireless isolation works to make your signal invisible to anyone searching for WiFi in your area. Wireless Broadband UK is built-in to some routers but must be physically enabled by the user &#8211; so check your router’s manual for Wireless Broadband tips on how to do this.</li><li><strong>Use an access list.</strong> If you’re still worried, you can create an access list. All computers have their own Media Access Control (MAC) address &#8211; a way of identifying each individual computer &#8211; and you can tell your router which MAC addresses it can allow access to; blocking all others. This means that anyone wanting to use your wireless signal would not only have to have your password but would have to be on the access list too.</li></ul></blockquote><blockquote><ul><li><strong>Encrypt it!</strong> The first and most important consideration if you are thinking of running a wireless network is to make sure that you have not left the network totally unsecured, I say totally unsecured as no network is ever 100% secure and this is especially the case with wireless networks as they allow easier access for potential unsavory characters to get in. An unencrypted wireless connection can allow anyone within the range of your wireless signal to immediately connect to it and start using your Internet connection for personal and/or criminal purposes and also access any files you may have shared on the hard drives of the machines connected on the network. </br><br
/> There are many guides available on securing your wireless network available on the Internet and your router&#8217;s manual should also provide a guide in doing so. A lot of the terminology and setup options may at first seem very technical to you but the couple of hours of research/setup is valuable time to spend where your privacy is concerned.</li><li><strong>Be aware what you share,</strong> Most people using a wireless network or any network for that matter usually want to share files between computers on the network. Make sure you do not share any files in these shared areas which are in any way confidential or important enough that you would not want anyone to potentially see them. For example you might want to share some mp3s on a computer to listen to on another computer in your house which is fine, however sharing say a document with your bank details etc on is a definite no no. </br><p>If totally unsecured, anyone within range of your wireless network can access any of these files without you noticing. Securing your wireless network will 99.9% of the time stop this intrusion but as mentioned no wireless network is 100% secure so just avoid sharing important files.</li><li><strong>Be aware of public hot spots.</strong> There are many wireless hot spots in coffee shops or in general, wireless is everywhere! and where there is an abundance of something there are usually some individuals lurking about ready to exploit it. If you are thinking of or do use these wireless hot spots there are some things to remember. Turn off your shared files, even if they are only mp3s, it is still wise to make sure they cannot access your hard drive. </br><p>Make sure any sites where you enter login details are secure. This can normally be determined with &#8216;https&#8217; in the URI in the address bar or the padlock symbol in the bottom right of your browser window. This is because computers sharing the same network as you can (with the right software) see exactly what you are sending or receiving over that network unless that information is encrypted. This also means that it is possible for someone to snoop in on what websites you are visiting or the email you are sending (be aware that most secure sites merely secure the login details you enter, after that everything is visible on the network) so it is advisable to be a bit conservative on what you do on the Internet in these places. It is certainly a wise idea to wait until you get home to check your bank balance online or make an online purchase.</li><li><strong>Keep your computer up to date and behind a firewall.</strong> Making sure you have your computer&#8217;s operating system up to date, a virus program installed and a firewall initiated on your machine should be something you have implemented anyway. However with the increased security risk a wireless network can expose you to, these things are totally essential in keeping you safe and secure. It is also the case I have found that users will often keep their main desktop computer up to date but neglect a laptop that they do not use as often. These laptops are likely the candidate machine that the user will be using to access a wireless network.</li><li><strong>Turn it off.</strong> Simple yet most effective tip. If you are a moderate user simply turn your router/wifi off when you are not using it or schedule the wireless connection to only be off at times you know you will not be using it. If it is off then your wireless network is 100% safe.</li></ul></blockquote><p><ul><li
style='margin-bottom:15px'><a
rel='nofollow' href='http://shop.tagjag.com/cb/lockergn/BCCOMP/'>Win-Spy Monitoring Software.</a></li></ul></p><p>Want to embed this video on your own site, blog, or forum? Use this code or <a
href="http://blip.tv/file/get/L0ckergn0me-HowToSecureYourWirelessNetwork758.mp4">download the video</a>:</p><p><textarea style="width: 460px; height:60px;">&#60;object width=&#34;425&#34; height=&#34;350&#34;&#62;&#60;param name=&#34;movie&#34; value=&#34;http://www.youtube.com/v/Y83kt3My8nA&#34;&#62;&#60;/param&#62;&#60;param name=&#34;wmode&#34; value=&#34;transparent&#34;&#62;&#60;/param&#62;&#60;embed src=&#34;http://www.youtube.com/v/Y83kt3My8nA&#34; type=&#34;application/x-shockwave-flash&#34; wmode=&#34;transparent&#34; width=&#34;425&#34; height=&#34;350&#34;&#62;&#60;/embed&#62;&#60;/object&#62;&#60;br /&#62;&#60;a href=&#34;http://chris.pirillo.com/&#34;&#62;Chris&#60;/a&#62; | &#60;a href=&#34;http://live.pirillo.com/&#34;&#62;Live Tech Support&#60;/a&#62; | &#60;a href=&#34;http://media.pirillo.com/&#34;&#62;Video Help&#60;/a&#62; | &#60;a href=&#34;http://feeds.pirillo.com/ChrisPirilloShow&#34;&#62;Add to iTunes&#60;/a&#62;</textarea></p><ul
class="related_post"><li><a
href="http://chris.pirillo.com/wireless-routers-review/" title="Wireless Routers Review">Wireless Routers Review</a></li><li><a
href="http://chris.pirillo.com/wireless-security-why-wep-is-bad/" title="Wireless Security: Why WEP is Bad">Wireless Security: Why WEP is Bad</a></li><li><a
href="http://chris.pirillo.com/wireless-networks-hard-drive-failures-web-browsers/" title="Wireless Networks, Hard Drive Failures, Web Browsers">Wireless Networks, Hard Drive Failures, Web Browsers</a></li><li><a
href="http://chris.pirillo.com/how-to-optimize-network-management/" title="How to Optimize Network Management">How to Optimize Network Management</a></li><li><a
href="http://chris.pirillo.com/windows-security-software/" title="Windows Security Software">Windows Security Software</a></li><li><a
href="http://chris.pirillo.com/what-is-community/" title="What is Community?">What is Community?</a></li><li><a
href="http://chris.pirillo.com/protecting-your-privacy-and-security/" title="Protecting Your Privacy and Security">Protecting Your Privacy and Security</a></li><li><a
href="http://chris.pirillo.com/whats-your-favorite-bluetooth-device/" title="What&#8217;s Your Favorite Bluetooth Device?">What&#8217;s Your Favorite Bluetooth Device?</a></li><li><a
href="http://chris.pirillo.com/how-to-email-web-pages-to-yourself/" title="How to Email Web Pages to Yourself">How to Email Web Pages to Yourself</a></li><li><a
href="http://chris.pirillo.com/who-are-you-on-twitter/" title="Who Are You on Twitter?">Who Are You on Twitter?</a></li></ul> ]]></content:encoded> <wfw:commentRss>http://chris.pirillo.com/how-to-secure-your-wireless-network/feed/</wfw:commentRss> <slash:comments>39</slash:comments> <enclosure
url="http://blip.tv/file/get/L0ckergn0me-HowToSecureYourWirelessNetwork758.mp4" length="10213515" type="video/mp4" /> </item> <item><title>How to Handle Remote Tech Support</title> <description> &lt;em&gt;Using &lt;a href=&quot;http://www.gotoassist.com/chris&quot;&gt;GoToAssist&lt;/a&gt; is the easiest way to view and control another person's computer online. Use it to provide instant technical support to family, friends and customers. Start a session with just one click, and instantly connect with the other party. &lt;/em&gt; </description> <author>chris@lockergnome.com (Chris Pirillo)</author> <category>Partner</category> <pubDate>Mon, 13 Jul 2009 06:30:00 GMT</pubDate><link>http://gotoassist.com/chris/</link> <guid>http://gotoassist.com/chris/</guid> </item><item><title>Network Tools for Windows</title> <description>You need these network tools, no matter which operating systems and networks you have to support. &lt;a href=&quot;http://support.solarwinds.com/updates/New-Customer.cfm?ProdID=568&amp;campaign=ipmon_DL_lockergnome&amp;CMP=BAC-ipmonDL_lockergnome&quot;&gt;SolarWinds ipMonitor&lt;/a&gt;: Affordable Network Monitoring for SMBs. Get turnkey network, server and application availability monitoring with SolarWinds ipMonitor v9.0. This easy-to-use, reliable solution for SMBs delivers out-of-the-box availability monitoring so you always know exactly what's up with Active Directory, DNS, Exchange, FTP, Web, IMAP, MS SQL Server, and SMTP. &lt;a href=&quot;http://support.solarwinds.com/updates/New-Customer.cfm?ProdID=568&amp;campaign=ipmon_DL_lockergnome&amp;CMP=BAC-ipmonDL_lockergnome&quot;&gt;Download your free trial today&lt;/a&gt;. Or, try their &lt;a href=&quot;http://www.solarwinds.com/products/freetools/&quot;&gt;totally free tools&lt;/a&gt;! And, through 2/29, save 20% when you purchase &lt;a href=&quot;http://store.solarwinds.com/s.nl/sc.16/.f&quot;&gt;ipMonitor 9.0&lt;/a&gt;. </description> <author>chris@lockergnome.com (Chris Pirillo)</author> <category>Partner</category> <pubDate>Mon, 25 Feb 2008 06:30:00 GMT</pubDate><link>http://support.solarwinds.com/updates/New-Customer.cfm?ProdID=568&amp;campaign=ipmon_DL_lockergnome&amp;CMP=BAC-ipmonDL_lockergnome</link> <guid>http://support.solarwinds.com/updates/New-Customer.cfm?ProdID=568&amp;campaign=ipmon_DL_lockergnome&amp;CMP=BAC-ipmonDL_lockergnome</guid> </item> <item><title>Get Your Own Web Site</title> <description>Starting at just $3.99/month, web hosting from &lt;a href=&quot;http://www.godaddy.com/gdshop/default.asp?isc=cp2&quot;&gt;GoDaddy&lt;/a&gt; includes 99.9% uptime, 24/7 support and free access to GoDaddy Hosting Connection, THE place to install over 30 FREE applications sure to help you get the most from your hosting plan and Web site. Enter &lt;a href=&quot;http://www.godaddy.com/gdshop/default.asp?isc=cp2&quot;&gt;code CP2&lt;/a&gt; at checkout, and save an additional 10% on any order.
&lt;p&gt;Plus, as a friend of Chris Pirillo, enter code &lt;a href=&quot;http://www.godaddy.com/gdshop/default.asp?isc=chris7&quot;&gt;CHRIS7&lt;/a&gt;, that's C-H-R-I-S and the number 7, when you check out, and save an additional 10% on any order. Get your piece of the internet at &lt;a href=&quot;http://www.godaddy.com/gdshop/default.asp?isc=chris7&quot;&gt;GoDaddy.com&lt;/a&gt;.&lt;/p&gt; </description> <author>chris@lockergnome.com (Chris Pirillo)</author> <category>Partner</category> <pubDate>Mon, 25 Feb 2008 06:30:00 GMT</pubDate><link>http://www.godaddy.com/gdshop/default.asp?isc=cp1</link> <guid>http://www.godaddy.com/gdshop/default.asp?isc=cp1</guid> </item><item><title>VMware and Parallels for Virtual Machines</title> <description> It doesn't matter if you're running on Windows or Mac OS X - every power user needs either &lt;a href=&quot;http://send.onenetworkdirect.net/z/13766/rn_a32755/&quot;&gt;Parallels&lt;/a&gt; or &lt;a href=&quot;http://send.onenetworkdirect.net/z/17081/rn_a32755/&quot;&gt;VMware&lt;/a&gt; (or both). There's never been an easier way to test software without destroying your primary operating system's stability. Think of how many times you wish you could press a 'reverse' button on your computer. Plus, there's no easier way to try new Linux distributions - see what all the fuss is about. Run Windows in OS X, run Linux in Windows, but the best way to do either is with &lt;a href=&quot;http://send.onenetworkdirect.net/z/17081/rn_a32755/&quot;&gt;VMware&lt;/a&gt; and/or &lt;a href=&quot;http://send.onenetworkdirect.net/z/13766/rn_a32755/&quot;&gt;Parallels&lt;/a&gt;. </description> <author>chris@lockergnome.com (Chris Pirillo)</author> <category>Partner</category> <pubDate>Mon, 25 Feb 2008 06:30:00 GMT</pubDate><link>http://chris.pirillo.com/2008/02/19/parallels-or-vmware/</link> <guid>http://chris.pirillo.com/2008/02/19/parallels-or-vmware/</guid> </item><item><title>Coupons for Online Shopping</title> <description>&lt;p style=&quot;color: red&quot;&gt;This feed is fueled by Lockergnome &lt;a href=&quot;http://www.lockergnome.com/buy/&quot;&gt;Online Shopping and Coupon Codes&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;
Before you shop next time, see if we have &lt;a href=&quot;http://coupons.lockergnome.com/&quot;&gt;a coupon&lt;/a&gt; first.
&lt;/p&gt; </description> <author>chris@lockergnome.com (Chris Pirillo)</author> <category>Partner</category> <pubDate>Sat, 12 Jul 2008 07:56:13 GMT</pubDate><link>http://coupons.lockergnome.com/</link> <guid>http://coupons.lockergnome.com/</guid> </item> </channel> </rss><!--
This site's performance optimized by W3 Total Cache:

W3 Total Cache improves the user experience of your blog by caching
frequent operations, reducing the weight of various files and providing
transparent content delivery network integration.

Learn more about our WordPress Plugins: http://www.w3-edge.com/wordpress-plugins/

Minified using memcached
Page Caching using memcached
Database Caching 19/61 queries in 0.150 seconds using memcached
Content Delivery Network via maxcdn.chris.pirillo.com

Served from: 192.168.20.61 @ 2009-11-24 06:05:00 -->