Re: [Thinkpad] Wireless security (& MS: base firmware)

From: STeve Andre' <andres_at_msu.edu>
Date: Wed Apr 02 2003 - 02:05:59 EST

The state of wireless security is a true horror at the moment,
but it is possible to do things correctly, although it takes some
effort to do it right.

Completely abandon any thoughts of using *ANY* of the
currently existing "security: features associated with a
wireless system. They all suck, to put it bluntly.

The only thing you can do for a wireless system is to
wrap the connection up in an encrypting layer, such that
all traffic going over the wireless card is tunneled. Do that,
and anything you do over the card is completely secure.
Don't do that, and you have something which anyone with
even moderate skills can defeat.

Win2K can use VPN's, which could be established between
two machines. That would be the right way to go for two
systems. I haven't done that yet, but I expect to be doing
soon.

--STeve Andre'

On Tuesday 01 April 2003 20:02, Andrew Webber wrote:
> I finally got my Microsoft Wireless Notebook Kit set up.
>
> My configuration is a wired desktop PC connected to the base
> station, and a TP600 (original 266MHz although I don't know if it
> matters) using the MS wireless PCMCIA card.
>
> On security for the ThinkPad, I was going to enable wireless
> security on the base station, but some online reading made me think
> it was more (totally?) secure to use MAC filtering and only allow
> the two existing cards access. Am I right in thinking this really
> does eliminate the need for WEP in this case? (And when would you
> use WEP?)
>
> I also have a problem upgrading the base station's firmware, I've
> downloaded the file from MS's site but when I attempt to update the
> firmware, I get "Installation was unsuccessful. Make sure you have
> the correct file, and then try again." Looked at the MS
> troubleshooting site but all it suggests is to download again. So
> I'm stuck at firmware v1.00.072 (July 30/02). No apparent problems
> but I know this version is way out of date.
>
> Any advice on these questions?
>
> Thanks!
>
>
> andrew [awebber@wwwebbers.com]
> ------
> For PGP public key, send email with "send public key" as subject
> Photo albums at www.andrew-webber.com/~photos/gallery
>
>
>
> _______________________________________________
> Thinkpad mailing list
> Thinkpad@stderr.org
> http://stderr.org/cgi-bin/mailman/listinfo/thinkpad

_______________________________________________
Thinkpad mailing list
Thinkpad@stderr.org
http://stderr.org/cgi-bin/mailman/listinfo/thinkpad
Received on Wed Apr 2 02:12:24 2003

This archive was generated by hypermail 2.1.8 : Fri May 26 2006 - 16:00:37 EDT