[ale] wpa_supplicant on hidden SSIDs

[Brian MacLeod]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 9/27/13 11:02 AM, Alex Carver wrote:

> Not a long time, I know.  But long enough that I'll notice you.  I
> know the pitfalls but I'm making the decision that my traffic
> habits would make it difficult for anyone but an extremely
> determined person to get past the lower level security.  Someone
> would have to spend a considerable amount of time every day war
> driving my place to catch me on wireless.  Enough time that I will
> certainly notice the effort (or at the very least having captured
> you on camera multiple times).


I don't know the camera situation, and how often those get reviewed.
If you have that kind of time, then you are welcome to do so, and
welcome to spend time doing things on your wireless that equally do
nothing for security.

My suggestion would be to not bother, do WPA2, _AND_ set up a VPN
server between your wireless and wired networks.  Use of the wireless
requires a connection to the VPN box via revocable self-signed
certificates.  That box then does the routing of verified clients, and
anything unverified gets exactly squat.

That would do real verifiable security, allow you to learn something
very useful (because we're quickly finding that we need skilled VPN
operators now), rather than trying to find network devices that will
allow you to leave your SSID hidden and still be easily connectable.

But that's my suggestion.

Brian





-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQE4BAEBCAAiBQJSRcAPGxhoa3A6Ly9rZXlzZXJ2ZXIudWJ1bnR1LmNvbQAKCRD5
XCJY/q4Y6Ms1B/9Hwowaj/6p2Bt42ADCSuHa+ZtaxaSdHoVrMn8do06Q5L85q3RU
DeUXP0Tvs+QBaTloz8byvT8jWsN1QPmo2wN6k1Rh4qHY7Z36f9ZBplOGBQMgJJM9
TWRu0HjWrxAMq8aPVqfRjZwh61m1UCI1RbJ4ExW4RBC45P3B9OFV0F+yylc7N0Nt
NEgiLNN5z8xZKjZpTJ3WOl3E/Do6FYdz+DByuz08DzHNZHTjBYoSf7s13+rkhcip
riAduKnSbcU0VqE4jQn4IxKf/DqDARxzYQpvXEloxc+PpBU2O09PeUSZpoM/xNta
pZIRZJTfdlo6QCEjR/aRZjhCc4CS6H17IEwc
=fsx/
-----END PGP SIGNATURE-----