- Joined
- Nov 22, 2001
- Location
- The great USA!
Great sticky, found this info very useful, thhanks.
Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!
Another weakness, is that your generally trusted, laptop-wielding brother/sister/cousin/mother/friend/roommate/etc. can - ignorantly or maliciously - give away the PSK. Or someone can look in his/her computer (or yours, for that matter) for it. Not that it's a huge issue anyway with MAC filtering and some paranoia, but I thought it would be worth mentioning.TalRW said:Wi-Fi Protected Access Preshared Key (WPA-PSK) (Encryption)
...
Weaknesses: While the encryption itself is virtually uncrackable the pass key a user selects can be prone to dictionary attacks. Attackers could possibly capture packets with a packet sniffer and use brute force and dictionary attacks. To overcome use "strong" passwords consisting of random letters, numbers, and characters as well as long as possible (63 charchters maximum). Use cut and paste to put passwords into devices. Do not use phrases as this is easier to crack through brute force than random characters.
[/list]
Alpha_One said:Another weakness, is that your generally trusted, laptop-wielding brother/sister/cousin/mother/friend/roommate/etc. can - ignorantly or maliciously - give away the PSK. Or someone can look in his/her computer (or yours, for that matter) for it. Not that it's a huge issue anyway with MAC filtering and some paranoia, but I thought it would be worth mentioning.
SinsFeelNatural said:This is going in my bookmarks until it gets a sticky. Good work so far!
Maybe stick in links for the major router manufacturers if the user needs more specific information.
http://www.ivisit.com/help/reference/routers-urls.html
Wi-Fi Protected Access Enterprise (WPA2) (Encryption)
What it does: WPA2 is similar to WPA-PSK but is intended for corporate environments. WPA2 uses a server to authenticate each user so that each user has a individual WPA key.
Why use it: Not needed for most home users. A business would want to use this for two main reasons. Firstly if a business was using WPA every end user would have the same password and key and could then spy on other users on the network. Secondly ex-employees who knew the key could gain access to the network with standard WPA-PSK. With WPA2 you can simply remove the ex-employee from the authentication server.
Silversinksam said:I'll add a couple noteworthy tidbits of info:
Here's the Default Router Password Database
http://www.routerpasswords.com/
Second, with drive-by-pharming being possible, changing your router password is just one of those things that is on your must do list.
http://www.cbronline.com/article_news.asp?guid=B2D823D1-D77D-471F-96B2-0DED432A0CA2