Slashdot Mirror


'Wi-Foo' Author On Trends In Wireless Security

prostoalex writes "Konstantin Gavrilenko from British security firm Arhont, co-author of Wi-Foo: Secrets of Wireless Hacking, recentlly reviewed on Slashdot, answered some of my questions on the current state of wireless security, market conditions for security experts and future trends, such as upcoming 802.1x and 802.11i standards."

6 comments

  1. Best Quote by Lord+Grey · · Score: 2, Funny
    Best quote from the interview:
    ... What's your assessment of the tools available for Windows family of OSs?

    Frankly, we try to limit the amount of interaction with MS Windows OS family to "only when it is really necessary".

    With any luck at all, the sun will become a relatively small, burnt cinder before that happens.
    --
    // Beyond Here Lie Dragons
  2. Wireless Security? by Anonymous Coward · · Score: 0

    That works about as well as a prison cell without bars. You can ask the criminals nicely to stay in the cell, but they really can do what ever they want. Wireless communications is like giving the whole world in on your communciations and saying, "Hey my security is so good you can just take a look and see for yourself." Right?

    1. Re:Wireless Security? by tupps · · Score: 4, Insightful

      I beleive that a wireless connection to a network should be treated exactly the same way as an internet connection.

      Therefore if you are a business and want to give your users access to the entire internal network they should be going through a VPN, the same way an external employee sitting at home would.

      At the end of the day the connections are the same, you don't know who might be connecting, and you can't trust anything you send/recieve on the network.

      --
      Go out and get sailing!
    2. Re:Wireless Security? by JAD+lifter · · Score: 1

      To extend the prison metaphor, wouldn't the encryption that you use be the bars?

  3. wi-fi security... by zxflash · · Score: 1

    Good read, the near future should bring some pretty amazing advances to Wi-Fi security (look forward to AES)

    Wi-Fi Security

    --

    All the torrents you could want.
    1. Re:wi-fi security... by random_culchie · · Score: 1

      Its already here.
      WPA uses AES (implimented using the Rinjdeal or however its spelt,algorithm). FYI there was nothing seriously wrong with the encryption in WEP. RC4 is a strong algorithm.
      However the poor key exchange and flawed generation of Initilisation vectors within WEP are the cause of the flaws. The algorithm itself is solid.
      For all intents and purposes WEP would be just as insecure if it used AES insted of RC4.