Comments on: The FBI Hyperlink Honeypot, and what you can do to stay safe http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/ Life. Liberty. Property. Defending individual freedom and liberty, one post at a time. Wed, 22 May 2013 18:26:11 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: Quincy http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54901 Quincy Wed, 02 Apr 2008 01:10:15 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54901 Scooby –

As long as the WPA network has a secure key, i.e. greater than 20 characters and not composed of dictionary words, you’ll be fine with that setup.

]]> By: Scooby http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54864 Scooby Tue, 01 Apr 2008 16:11:05 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54864 What about MAC filtering, no SSID broadcast, and WPA? Is that safe? I ask because that’s my setup at home.

]]> By: Quincy http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54688 Quincy Sun, 30 Mar 2008 04:09:28 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54688 Nitro –

A hard-wired LAN and NAT router are absolutely the best way to go if you can run the cable, both in terms of security and performance. That said, a WiFi network with WPA and a strong key is plenty trustworthy.

tarran –

The weakness of MAC address filtering has not been widely publicized, as far as I know, though it certainly should be. A lot of people still believe MAC address filtering and turning off SSID broadcasting are adequate security measures.

My first rule of security is always assume everyone has access to everything you’re sending and receiving. Address filtering never follows this rule because anyone who has access to your traffic can see the address. In the case of MAC address filtering, the combination of WiFi packet sniffers and MAC address spoofing lead to a trivial crack.

]]> By: Nitroadict http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54654 Nitroadict Sat, 29 Mar 2008 18:17:08 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54654 Last I checked, LAN & a NAT worked pretty well. I don’t worry as much since switching to Ubuntu, but I should probably read up on making my own separate linux firewall box out of cheap parts…

]]> By: tarran http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54645 tarran Sat, 29 Mar 2008 17:30:43 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54645

MAC address filtering is too easily defeated to be relied upon.

Damn, now I am really embarrassed. I should have known that…

]]> By: Nitroadict http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54636 Nitroadict Sat, 29 Mar 2008 15:40:02 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54636 This is exactly why WI-FI is not the smartest way to use @ home on a computer that’s constantly on. The only devices that I feel comfortable using WI-FI with is gaming consoles, as typically they are not fully fledged computers that house sensitive information.

LAN is and always will be the best way to go; at least until something similar to LAN makes the rounds.

]]> By: Quincy http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54629 Quincy Sat, 29 Mar 2008 14:47:50 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54629 tarran –

MAC address filtering is too easily defeated to be relied upon. All it takes is someone using a packet sniffer to find some ARP packets, which contain the MAC address, and then spoofing said MAC address to gain access.

Like WEP, it does offer a layer of security, but only a trivial one. I absolutely don’t recommend that it be relied upon in place of WPA encryption.

]]> By: tarran http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54620 tarran Sat, 29 Mar 2008 13:06:23 +0000 http://www.thelibertypapers.org/2008/03/28/the-fbi-hyperlink-honeypot-and-what-you-can-do-to-stay-safe/#comment-54620 I am surprised that they left out a very important part of wireless security: MAC address filtering – only permitting the access point to only communicate with specific wireless cards.

Put this in place, and even your unencrypted network is safe from the dreaded war-driving pervert.

]]>