UN Advised on Wireless Insecurity

otisaardvark writes "There's an article on the BBC about how the UN is being briefed on the problems of wireless networks. Predictable conclusions - security is mainly compromised through human, not technological factors."

Comments

Re:Why is it insecure

[John Fulmer]

>For example, are the data links insecure--I dont
>think so as most are now 128bit encrypted, right?

128-bit encryption without knowing the cryptographic algorithm used is meaningless as a definition of crypto strength, especially if the encryption is badly designed and broken; both of which are true for 128-bit WEP. Do a google search on it and you'll find the papers that describe the vulnerablility, and the tools to exploit it.

WEP is what hapens when non-crypto people design crypto.

Here's a starter link Look at the '802.11 Encryption" section

I'm no expert...

[Boss, Pointy Haired]

But surely if you want to provide wireless capabilities on your corporate network you put the access point in a DMZ and have users come in via a VPN, just as if they were working from home and connecting over the "public" Internet.