Marvin said:
OK, totally confused about how secure wireless connections are now.
If one has a new laptop with the latest mobile chip, antivirus and firewall, etc. together with a wireless router, does this mean that this set up is vulernable to hackers? Does this mean that the wireless connection is not secure? If this is the case, how can one take precautions to secure the wireless connection?
Advice from you techies out there would be helpful.
Code:
+--------------------+ +---------+ +------------------+
| Internet |-----+ router | + Wireless + | Your Wireless PC |
| Lots of bad guys | +---------+ + +------------------+
+--------------------+ +
Bad guys within
100 meters (depending on equipment
and what your house is
made of)
Your PC at the same risk from all the bad guys on the net as it always has. What wireless has done is add an easily accessible network close to you. Anyone within the range of the wireless network (or anyone who moves into range) has access to this network. Compared to the numbers of bad guys on the internet there are almost no bad guys with in range of most WiFi networks. This does not mean you are less vulnerable just that there are fewer people with in 100m of your house then there are on the internet.
If your security is only on your router, then someone within range, who wants to do bad things, will have a very easy time.
If you have a software firewall, and have kept up with the latest security updates and patches, you are fairly safe from a direct attack weather it comes from a wireless or a wired connection.
What is not safe is your data. Anyone can view your unencrypted traffic. If you don't want your neighbours to read your email, or know you post on PERB, then you need to secure your WiFi.
Easy things to do:
1) Don't broadcast your Wireless network name (SSID)
2) Use WEP. It's practically useless, but it's a speed bump and it might stop the casual bad guy.
3) MAC address filtering. Most wireless routers allow you to input a list of MAC addresses you can filter on. This will slow down a bad guy as they have to wait for some traffic to steal your MAC address. Another speed bump
Harder things:
VPN: If you can set up a VPN and use it to encrypt all traffic over your WiFi that would be the best. This can get very technical and may not be worth your time.
It all depends on the risk you want to take. If you are on a farm you probably aren't worried. Downtown Vancouver would be a different story.