Wi-Fi

From Navas Wireless Wiki

Jump to: navigation, search
m (→Essential Wi-Fi Checklist: edit)
m (→Essential Wi-Fi Checklist: edit)
Line 41: Line 41:
|-
|-
| [[Image:CheckBox.gif]] || '''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]] words. (''See [[#What Makes for a Strong Password or Passphrase?|What Makes for a Strong Password or Passphrase?]]'') Write your passphrase on a label and stick it on the bottom of your wireless router so you won't forget it. (If someone gets to your wireless router, you are compromised regardless.)
| [[Image:CheckBox.gif]] || '''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]] words. (''See [[#What Makes for a Strong Password or Passphrase?|What Makes for a Strong Password or Passphrase?]]'') Write your passphrase on a label and stick it on the bottom of your wireless router so you won't forget it. (If someone gets to your wireless router, you are compromised regardless.)
 +
|-
 +
| [[Image:CheckBox.gif]] || '''Make your wireless [[wikipedia:Service set identifier|SSID]] unique'''. This helps avoid network collisions. A good way to do this is to use your address, phone number, and/or name for your SSID (making it easy for you to be contacted if something is wrong with your wireless network).
 +
|-
 +
| [[Image:CheckBox.gif]] || '''Don't bother with SSID hiding or [[wikipedia:MAC address|MAC address]] filtering'''. They ''don't do any real good'' (improve security) but they can ''cause you grief''. (''See [[#Wi-Fi Security Myths|Wi-Fi Security Myths]]'')
 +
|-
 +
| [[Image:CheckBox.gif]] || '''Turn off [[wikipedia:Universal Plug and Play|Universal Plug and Play]]''' (UPnP) in your wireless router. Because most consumer-grade wireless routers lack UPnP [[wikipedia:Authentication|authentication]] they are vulnerable to attack. (''See [[wikipedia:Universal Plug and Play#Lack of Authentication|Problems with UPnP, Lack of Authentication]]'')
 +
|-
 +
| [[Image:CheckBox.gif]] || '''Set a ''strong'' password''' on the administration interface of your wireless router. Again, [[wikipedia:Diceware|diceware]] is a good way to do that.
 +
|-
 +
| [[Image:CheckBox.gif]] || '''Turn off remote administration.''' If your wireless router supports remote administration, ''turn it off'' (unless you really know what you're doing).
 +
|-
 +
| [[Image:CheckBox.gif]] || '''On unsecured Wi-Fi use [[#VPN|VPN]]''' (Virtual Private Networking). Otherwise your wireless traffic can be ''snooped and compromised''. ''(See [[Wi-Fi How To#Secure Internet access in a public hotspot|Secure Internet access in a public hotspot]])''
|}
|}
-
 
-
<ul imagesrc="Image:CheckBox.gif">
 
-
  <li>'''Use [[wikipedia:Wi-Fi Protected Access|WPA]] security'''. If you don't
 
-
  do this, assume ''you will get [[wikipedia:Hacker (computer security)|hacked]]''.
 
-
  ''[[wikipedia:Wired Equivalent Privacy|WEP]] is essentially worthless''.
 
-
  Replace wireless equipment that doesn't support WPA. Seriously. (''See [[#Wi-Fi
 
-
  Security|Wi-Fi Security]]'')</li>
 
-
  <li>'''Use a ''strong'' WPA passphrase'''. A good way to do that is with [[wikipedia:Diceware|diceware]]
 
-
  words. (''See [[#What Makes for a Strong Password or Passphrase?|What Makes
 
-
  for a Strong Password or Passphrase?]]'') Write your passphrase on a label and
 
-
  stick it on the bottom of your wireless router so you won't forget it. (If
 
-
  someone gets to your wireless router, you are compromised regardless.)</li>
 
-
  <li>'''Make your wireless [[wikipedia:Service set identifier|SSID]] unique'''.
 
-
  This helps avoid network collisions. A good way to do this is to use your
 
-
  address, phone number, and/or name for your SSID (making it easy for you to be
 
-
  contacted if something is wrong with your wireless network).</li>
 
-
  <li>'''Don't bother with SSID hiding or [[wikipedia:MAC address|MAC address]]
 
-
  filtering'''. They ''don't do any real good'' (improve security) but they can
 
-
  ''cause you grief''. (''See [[#Wi-Fi Security Myths|Wi-Fi Security Myths]]'')</li>
 
-
  <li>'''Turn off [[wikipedia:Universal Plug and Play|Universal Plug and
 
-
  Play]]''' (UPnP) in your wireless router. Because most consumer-grade wireless
 
-
  routers lack UPnP [[wikipedia:Authentication|authentication]] they are
 
-
  vulnerable to attack. (''See [[wikipedia:Universal Plug and Play#Lack of
 
-
  Authentication|Problems with UPnP, Lack of Authentication]]'')</li>
 
-
  <li>'''Set a ''strong'' password''' on the administration interface of your
 
-
  wireless router. Again, [[wikipedia:Diceware|diceware]] is a good way to do
 
-
  that.</li>
 
-
  <li>'''Turn off remote administration.''' If your wireless router supports
 
-
  remote administration, ''turn it off'' (unless you really know what you're
 
-
  doing).</li>
 
-
  <li>'''On unsecured Wi-Fi use [[#VPN|VPN]]''' (Virtual Private Networking).
 
-
  Otherwise your wireless traffic can be ''snooped and compromised''. ''(See [[Wi-Fi
 
-
  How To#Secure Internet access in a public hotspot|Secure Internet access in a
 
-
  public hotspot]])''</li>
 
-
</ul>
 
== Wi-Fi Network Types ==
== Wi-Fi Network Types ==

Revision as of 21:19, 26 November 2008

Retrieved from "http://wireless.navas.us/index.php/Wi-Fi"
Personal tools