[NRAO]

Wireless Networking

The Ugly

  • SECURITY: WEP encryption now "trivial" to crack

  • Software to do this is widely available

  • Passive, watch for couple of hours (hard to detect such snooping)

  • Problem NOT encryption (RC4), but the implementation (STUPID!!!)

  • "War Driving" laptop crackers a huge problem for .COM, .GOV (.MIL?)

  • Fix to problem coming, but can't easily retrofit to hardware

  • For now: use SSH, SSL (https), VPNs to encrypt sensitive traffic

Wireless Networking - 2002-04-17
Pat Murphy