[ale] wireless security

Brian MacLeod nym.bnm at gmail.com
Wed Jan 15 10:52:01 EST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 1/15/14 8:36 AM, Matt Hessel wrote:
> WPA2 AES only. (TKIP is broken)
> 
> Any other options security wise are trivial to bypass..  Like
> hidden network, or MAC filtering.
> 
> For the more secure option,  put the wireless network isolated from
> any of your wired devices, and set up openvpn to connect in once
> you join the wireless network.


I wholeheartedly agree with Matt's points here.  I will also add that
you should buy a router whose maximum connectivity is whatever the max
connectivity is at home (example: I have only G & N compatible
hardware at home, and I just bought a router with N, not any of the
AC* stuff).  Why?  Because the new technology is expensive right now,
and really won't buy you any advantage to your current equipment.
Save money now and update later when you can actually benefit, and the
cost of the tech has come down.

As to the "router OS" question -- what is it you are looking to
achieve?  While I have been long a user of DD-WRT/tomato compatible
hardware, I've reached a point where I don't need my router to do
anything BUT route.  Anything else I want to do, I can get various
small computers to do or even buy equipment whose design is biased to
the task at hand, rather than be reliant on a "trying to be
everything" router.  And most of the time, when I tried making my
routers all that they could be, I spent lots of time for little
benefit, and often introduced "mandatory reboots" in order to keep
things functional.

I don't want to have to reboot my router on any regular basis to
restore its core functionality.  Ever. (Reboot because of memory leaks
and various other needs, not for security updates; I get why those are
necessary)

Brian





-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQE4BAEBCAAiBQJS1q6hGxhoa3A6Ly9rZXlzZXJ2ZXIudWJ1bnR1LmNvbQAKCRD5
XCJY/q4Y6PBkB/0TSFVfxy9klYhd1oGdD8KnOgaCNnvHHNXxCqCdop35ZWasBhLY
8nB0zCLvAENKmMqqGTPqJNu2ozKqcBpv5dd/mJSePRZlWYIj0PmRK/FAP0MoftMh
7XmXL873Ql6t10X4/PCUg1z5kVXeD5mFumyUxU+Tx/NYS9vVPXM1ZB7gMXqXb+vQ
/g69zXIsPGCjkXtjjwjgTz0CqO8a8hJKugKZHec3pltUvWqlPMktFF1w3Zi7fTf+
g0PiGJ+zHTRCK8vLWN6XLNQNzDC+AMq1hrA7IXCdYEKHbMji+ghajP9O7miAskCV
yZ0X3slfE1TTWE4QyRxhzYm4t/6N8m5DAYFh
=KJPf
-----END PGP SIGNATURE-----


More information about the Ale mailing list