February, 2004

Volume 3, Issue 2

• Wireless Security
• Tech Alert!
• P4 Power! Prescott and P4EE are here!

• ASI Centrino Wireless Update
• Xtreme G Brief
• 8x DVD Burner Comparison

Introduction

In recent years wireless networking has been expanding across the country at an unbelievable rate. It seems as though wherever you go these days you can simply pay a small fee for, or buy a product which entitles you to, a limited use of somebody else's bandwidth. This is a wonderful service which is more than welcome in many places such as hotels, airports, bus stations, and even coffee shops. Anyone who is willing to pay the price can simply plop down their notebook, punch in the correct access key, and they are instantly able to access the internet, their e-mail, chat, and anything else that can be accessed through the provider's service.

With the simplicity, convenience, and low cost of wireless networking today many small companies and private households are also joining in on the wireless game. The problem comes in when the wireless network that you're using is not secured and uninvited guests begin stealing your bandwidth, and possibly even your data. How can you prevent this from happening? What about your computer firewall, isn't that going to protect you from unwanted hackers and bandwidth thief's? The answer to this is unfortunately, no. With a wireless network, by the time a user finds a way into your access point, they are already on the inside of your firewall and unless you take steps to prevent this, you would never even know that they are there.

Recent studies have shown that 60-80% of wireless networks do not even contain the most basic level of security. This is partly due to the manufacturers making such a simple plug and play product. You bring it home, plug it in, type your ISP username and password and everything works! Why take the time to change anything? Hackers who indulge in "war-driving" or "war-chalking" are always happy to see this question go unanswered. By simply driving around in their car with a laptop and a wireless card, or by walking down the street with a handheld pc with 802.11 capabilities, they are constantly scanning and marking down open access points and networks with little or no security.

The hardware website www.arstechnica.com recently did an article on "war-flying", where they took a brief flight over the bay area in a small plane and with nothing more than an amplified antenna and a wireless card in their laptop, they picked up almost 500 access points. They estimated that only 30% of these had been secured. You could easily tell from the names on the majority of the access points which were picked up, that their users had simply plugged them in and went on with their day, taking no time at all to provide basic security functions to them at all. While the average hacker isn't necessarily interested in your family photo downloads, they may be interested in other personal data that may be exposed, or they may even just be looking for a free pipe to the internet where they are free to exploit your bandwidth for such things as e-mail bombings, sending malicious programs, or simply downloading to their heart's content.

Wireless Security Basics

For the most part, all of the things that you'll need to secure your network from prying eyes are already built into your Access Point, or Wireless Router. If you have an older Wireless product you may need to download a firmware update from the manufacturer, this is generally both simple and free. Please review the following 6 steps to see if you may be missing something that will keep your wireless network and your data a bit safer.

1) Set up WEP (Wired Equivalent Privacy) on your Access Point or Router. The standard these days is to use 128-bit encryption which is supported by all current hardware. WEP encrypts all data which is being sent between the wireless client and the Access Point. If your data is not encrypted, it can be literally grabbed out of the air by someone using one of many sniffer programs which can be easily be found on the internet. Setting up WEB is as simple as going into your Access Point or Routers management software and selecting the key that you want to use for the client and the host to work from. If you have trouble coming up with an appropriate key, there are key generators available on the internet for free, but if someone is trying to break into your network, they may have the same code generator as you do... better to be safe by coming up with your own access key.

2) Change your default password!  This may seem like a no-brainer, but you would be surprised at how many people currently have Access Points and Routers with the passwords "password, admin, default, NetGear, etc..." you get the idea. You should also take a moment and turn off Remote Management in the software. The only one making administration changes on your hardware is you, and there's really no reason why you would need to do it remotely.

3.) Turn off SSID (Service Set IDentifier) Broadcasting. Let me give you a quick hint on this one... If a hacker comes across your network and it has a standard SSID name, then it's pretty much a sure bet that they aren't going to have much trouble getting by whatever security, (if any), that you've put into place. Anyone who is taking the time to go out looking for a network knows that a SSID of "Linksys" will probably be followed by default passwords on it's hardware. Likewise for "default" (D-Link), "Wireless" (Netgear), and "tsunami" (Cisco). 

4) Following up the previous entry, you should also change your SSID. Even if you turn off broadcasting, it's widely known what wireless SSID's are in use by the majority of people who use them. It only takes a moment to change the SSID, and it will frustrate anyone looking for the default names.

5) Enable MAC Address Filtering. By associating friendly MAC addresses on your system you prevent any strays from receiving IP Addresses by the DHCP service of your network or hardware simply by being in range. The MAC address of your networking hardware is bound to your machine and is not easily mimicked.

6) Disable DHCP. If you don't want to go through the trouble of associating MAC addresses with your wireless hardware, you can always simply disable DHCP and manually assign the IP's to the wireless clients. In a small network this would probably be a simpler task and can be easily managed. Remember that when you are inside your own network you are not forced to use default network IP addresses. While the most common IP range used in private networks is 192.168.1.xxx, you're not bound to this and by changing it you make it even more difficult to crack your network.

Safe at Home?

While you'll never be 100% safe from hackers, taking these steps will deter the casual drive-by sniffers and the nosey neighbors who are too cheap to pay for their own DSL or cable modem service. Just as your home will never be completely burglar-proof... it's much more secure when you don't leave the front door open.

Current ASI Whitebox notebook customers will be happy to know that Intel has released a new wireless product to upgrade their connections. The standard 802.11b wireless card which is an available option on all Centrino notebooks can now be replaced with a new Tri-Band model, the Intel® Pro/Wireless 2200BG Network Connection.

Performance
  Throughput speeds of up to 54Mbps are now available (802.11a), while retaining 802.11b interoperability. The new card supports 802.11a, 802.11b, and 802.11g with ease. Using Intel® PROSet utility software allows you to create multiple profiles to quickly and easily switch between settings as you move between different access points.

Security
  As with the previous line of Intel® Wireless cards, industry standard security is fully supported. Your data is protected with 64-bit WEP and 128-bit encryption and is also compatible with third party security enhancements from companies like Cisco.

Features

See You Next Month!