Slashdot Mirror


Time To Cut the Ethernet Cable?

coondoggie writes in with a Network World piece that begins "A range of companies with wireless LANs are discovering that 50% to 90% or more of Ethernet ports now go unused, because Wi-Fi has become so prevalent. They look at racks of unused switches, ports, Ethernet wall jacks, the cabling that connects them all, the yearly maintenance charges for unused switches, electrical charges, and cooling costs. So why not formally drop what many end users have already discarded — the Ethernet cable? 'There's definitely a right-sizing going on,' says Michael King, research director, mobile and wireless, for Gartner. 'By 2011, 70% of all net new ports will be wireless. People are saying, "we don't need to be spending so much on a wired infrastructure if no one is using it."' ... There is debate over whether WLANs, including the high-throughput 802.11n networks, will be able to deliver enough bandwidth." Cisco, which makes both wireless and wired gear, has a spokesman quoted calling this idea of right-sizing a "shortsighted message from a wireless-only provider. It's penny-wise and pound-foolish."

496 comments

  1. I can think of a few by SCHecklerX · · Score: 4, Insightful

    - security
    - bandwidth
    - interference/reliability ... etc.

    1. Re:I can think of a few by JWSmythe · · Score: 1, Redundant

          Dammit, you beat me to the first post.

          At least we said the same thing. You said it in a few words. I said it in an essay. :)

      --
      Serious? Seriousness is well above my pay grade.
    2. Re:I can think of a few by EastCoastSurfer · · Score: 5, Interesting

      Bingo!

      Because of security concerns my employer does not and will never have (that I can see) wireless access to the network.

      It's just too large of a security risk when you have any sort of sensitive information floating around.

    3. Re:I can think of a few by MightyMartian · · Score: 1

      Yup. Where I work, we deal with a considerable amount of very sensitive information. There are, of course, ways to deal with that via encryption, but then again, I've got a few miles of network cable, so why would I go that much trouble?

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    4. Re:I can think of a few by Anonymous Coward · · Score: 5, Funny

      security

      But if I'm on wireless, I can just turn my screen closer to me so those evil hackers can't see my credit card password! If I have a cable, I can't move! Therefore, wireless is far more secure.

      bandwidth

      What are you geeks talking about? I can get my emails and download the internets perfectly fine while I watch the teevee!

      interference/reliability

      Oh yeah? What about cats? If my cat chews through the cable, then I'm out for a week while I wait for the cable guy to come fix it! That doesn't sound very reliable to me! Cats can't chew through the wireless!

      And I thought you nerds were supposed to be smart!

    5. Re:I can think of a few by Anonymous Coward · · Score: 1, Insightful

      Exactamundo.

      We tried ditching ethernet a couple years back, and boy, lemme tell ya - ever try transferring a 300 meg CADD render over Smoke Signal? It's not pretty.

    6. Re:I can think of a few by MrNaz · · Score: 5, Insightful

      Wireless is great for end users and other "last yard" applications, but I don't see WiFi ever overtaking wired networks for anything else. Cables will always be faster (I'm comparing *tomorrow's* cables, with *tomorrow's* wired networks, so sit down and put your trousers back on) than WiFi, and far more reliable due to greater resilience against interference and other environmental factors. It also has a smaller attack surface area, so for security sensitive applications, the additional physical constraints may be a benefit.

      Yes, I think that office floors and other last-hop from switch to user applications could become completely wireless, but let's not get carried away. Anyone who says "we don't need wired ethernet any more" is short sighted and simply trying to attract attention. Wired ethernet will always have a place trunking the WiFi hotspots and carrying bulk data.

      --
      I hate printers.
    7. Re:I can think of a few by pyite · · Score: 1, Insightful

      Sure, if you know nothing about security. Why does everyone think wired is so secure? I would say well implemented wireless networks are more secure than the average wired network. This is because well implemented wireless networks have strong authentication (e.g. client side certificates) and encryption whereas most wired networks do not have these things.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    8. Re:I can think of a few by Seta · · Score: 1

      I don't think they make sarcasm tags big enough for your post.

    9. Re:I can think of a few by JWSmythe · · Score: 5, Funny

          You've just made a serious breech of Slashdot protocol. You shouldn't post AC, when your comment would be modded funny..

          As I'm sitting here, I'm getting comments from the peanut gallery.

          On the wireless Internets, there are no tubes, so there are no tubes to get clogged. Therefore wireless is muchly superior.

          Ahh, how I still love Senator Stevens and his amazing insight into the functionality of that there interwebtubenets.

      --
      Serious? Seriousness is well above my pay grade.
    10. Re:I can think of a few by MrNaz · · Score: 4, Funny

      Holy crap dude!

      Somehow, in your case, "don't feed the trolls" just doesn't say it...

      --
      I hate printers.
    11. Re:I can think of a few by fuzzyfuzzyfungus · · Score: 4, Insightful

      It is certainly possible(and easy) to implement wireless security wrong or not at all; but the notion that "wireless=fundamentally insecure" seems dubious at best.

      After all, we generally trust encryption, in the form of SSL, VPNs, and the like to safely carry data across the public internet, a known cesspool of hostility and attackers. It isn't clear why it would be any less safe when dealing with the pool of possible attackers that exists within(assuming good antennas) a few kilometers of your site. Plus, since wireless is known to be vulnerable, people generally try to secure it. Unless your physical security is tight, I'll almost certainly have a much easier time sneaking in and plugging in than I will trying to break WPA or better. WEP absolutely blew, but the bad old days are (mostly) over.

    12. Re:I can think of a few by lowen · · Score: 5, Interesting

      RFI.

      As CIO at a radio astronomical observatory with instruments receiving in the 2.3GHz band, I can say that we prohibit WiFi here completely. We went as far as running shielded Cat5e and Cat6, and building the data center into a screened room to reduce the RFI. Ferrite beads on all cabling going into and out of the data center are installed as well.

      Wired Ethernet is the only thing working here.

    13. Re:I can think of a few by Reapman · · Score: 5, Insightful

      Seriously? More Secure?

      If you want to break in at a "physical" level between two wireless connections you just have to be sitting in radio range. Which may, or may not, even be in the same building. To break into a wired connection at the same level you'll have to attach some vampire clamps or whatever somewhere which means a physical break, physical access to the network.

      as for client side certs there is nothing preventing wired from having this, and in fact a lot of secure installations do. Just because Wireless has some fancy WPA stuff that most people should enable doesn't make it more secure, if anything it's a nice warm blanket for people to have.

      A Hardened Wireless connection will always be less secure then a Hardened Wired connection. One sends signals throughout the air one through a small cable.

      Whew managed to do that without mentioning OSI once

    14. Re:I can think of a few by ObsessiveMathsFreak · · Score: 5, Insightful

      Just updated to Ubuntu 9.04 on the laptop. First thing that went wrong was the wireless card. Drivers gone and no connection. Wired ethernet on the other hand, worked flawlessly. No driver issues, no compatibility errors, nothing. It worked likely a keyboard. There's a lot to be said for the maturity of ethernet cables.

      There's also a lot to be said for the reliability of cable, or rather, the unreliability of wireless. Yes, it is convienient to give devices wireless connections, but signal quality is a huge issue with location, time and simple randomness all coming into play in ways cable simply does not have trouble with. For me, a typical ping over wireless goes something like this (below numbers are made up from memory)

      PING 10.100.1.1 (10.100.1.1) 56(84) bytes of data.
      64 bytes from 10.100.1.1: icmp_seq=1 ttl=62 time=4.35 ms
      64 bytes from 10.100.1.1: icmp_seq=2 ttl=62 time=3.67 ms
      64 bytes from 10.100.1.1: icmp_seq=3 ttl=62 time=3.56 ms
      64 bytes from 10.100.1.1: icmp_seq=4 ttl=62 time=4.45 ms
      64 bytes from 10.100.1.1: icmp_seq=5 ttl=62 time=1500 ms
      64 bytes from 10.100.1.1: icmp_seq=6 ttl=62 time=3.02 ms

      Whereas the equivilent wired ping times, for a device in the same room would be

      PING 10.100.1.1 (10.100.1.1) 56(84) bytes of data.
      64 bytes from 10.100.1.1: icmp_seq=1 ttl=62 time=1.35 ms
      64 bytes from 10.100.1.1: icmp_seq=2 ttl=62 time=1.37 ms
      64 bytes from 10.100.1.1: icmp_seq=3 ttl=62 time=1.56 ms
      64 bytes from 10.100.1.1: icmp_seq=4 ttl=62 time=1.05 ms
      64 bytes from 10.100.1.1: icmp_seq=5 ttl=62 time=1.41 ms
      64 bytes from 10.100.1.1: icmp_seq=6 ttl=62 time=1.02 ms

      A wireless connection is a tradeoff of human convenience for machine efficiency. When it comes to web browsing, email and even watching youtube videos, it's more or less worthwhile for most users. However, when you get to things like voip, bittorrent and online games, wireless connections begin to sag under the weight of your demands.

      --
      May the Maths Be with you!
    15. Re:I can think of a few by Captain+Splendid · · Score: 4, Insightful

      Umm, hello? Businesses downsizing their ethernet equipment requirements is a good thing. Means the market's going to get flooded with good, cheap gear that we're all going to buy because we're the kind of people who can be bothered to run cable all over our houses.

      --
      Linux, you magnificent bastard, I read the fucking manual!
    16. Re:I can think of a few by Chabil+Ha' · · Score: 3, Interesting

      A company I worked for tried cutting the cord and replacing everything with dumb terminal-like laptops, only to discover that the infrastructure couldn't handle so many simultaneous connections. It was a complete failure because the wireless density and capacity just could not support everyone going wireless.

      Besides, what they forget to address is this thing called sunk cost. You've purchased that hardware and infrastructure. You're not going to get any $$$ by replacing everything with wireless anyway.

      --
      We're all hypocrites. We all have hidden parts, it's the contrast between them that make us more a hypocrite than others
    17. Re:I can think of a few by Sobrique · · Score: 4, Interesting

      Why does everyone think wired is so secure?

      Because I can hook onto your wireless network from the car park.

    18. Re:I can think of a few by Anonymous Coward · · Score: 5, Funny

      Why would you to post your IP addresses on Slashdot?!?! Everyone is going to hack into your network now!

    19. Re:I can think of a few by abigor · · Score: 3, Insightful

      Let me be the first to say that you have a really cool job.

    20. Re:I can think of a few by Anonymous Coward · · Score: 2, Funny

      Whew managed to do that without mentioning OSI once

      Well, almost...

    21. Re:I can think of a few by Amouth · · Score: 1

      true but it's allot easier for me to prevent/notice/stop the guy in the wiring closet than the guy with a pringels can in his car in another parking lot.

      --
      '...if only "Jumping to a Conclusion" was an event in the Olympics.'
    22. Re:I can think of a few by Anonymous Coward · · Score: 0

      It's not even his IP address! It's mine!

    23. Re:I can think of a few by Moryath · · Score: 5, Informative

      Steps to break a wireless network:

      #1 - Pull up to parking lot.
      #2 - Sniff advertised name of network
      #3 - Put up your AP, set name to clone network's name
      #4 - Record authentication attempts
      #5 ...
      #6 - Profit!

    24. Re:I can think of a few by Anonymous Coward · · Score: 0

      More secure you Jackass! You can put the same level of security on a wired connection as a wireless, but the fact your data is floating about in the air means that anyone can grab it. The fact that to join a wired network you need physical access to it means by locking the door you're already pretty safe. Even if you lock the door with a wireless connection you're no safer as the door doesn't matter to the signal, but does to a hacker.

    25. Re:I can think of a few by supernatendo · · Score: 1

      Sure, if you know nothing about security. Why does everyone think wired is so secure? I would say well implemented wireless networks are more secure than the average wired network. This is because well implemented wireless networks have strong authentication (e.g. client side certificates) and encryption whereas most wired networks do not have these things.

      One eetsy beetsy problem with your theory, when you have wifi, the attacker can attack FROM WITHIN your network!

      Attacking from outside a network takes a significantly larger amount of time. client side certificates do jack BTW. They are easily faked.

      Wired is significantly more secure especially if the internal wired connection is seperated from the iNet. There is no way to make wireless as secure or more secure or even remotely as secure as wired...

      It is true that being wired does not ensure security, but to say that this fact automatically makes wireless just as good is very misleading.

    26. Re:I can think of a few by Anonymous Coward · · Score: 0

      Let me be the first to second that :)

    27. Re:I can think of a few by sigipickl · · Score: 1

      ...
      - Unlicensed spectrum is prone to interference and incredibly easy to DOS by simply firing up another AP.
      - Your connection on any given AP is only as fast as the weakest, slowest connection on the same AP.
      - limited frequency range limits AP density
      - supporting wireless in the enterprise is about the biggest headache one can give themselves.
      - iphones.

      --
      Never trust anyone who takes pride in being called a 'geek'....
    28. Re:I can think of a few by plague3106 · · Score: 2, Insightful

      Well, the problem with me totally securing my home network is that half of my wireless clients don't support the most secure method; WPA2-EAS. So instead I end up using the "shared key" approach, which although is AES, it still leaves a hole in that the key doesn't change, so it becomes possible to get.

    29. Re:I can think of a few by sabernet · · Score: 0

      http://en.wikipedia.org/wiki/Private_network

      I double dare you to 'hack' his network with those IPs.

    30. Re:I can think of a few by DoofusOfDeath · · Score: 2, Interesting

      RFI.

      As CIO at a radio astronomical observatory with instruments receiving in the 2.3GHz band, I can say that we prohibit WiFi here completely. We went as far as running shielded Cat5e and Cat6, and building the data center into a screened room to reduce the RFI. Ferrite beads on all cabling going into and out of the data center are installed as well.

      Wired Ethernet is the only thing working here.

      Out of curiosity, would fiber have been easier/cheaper than all that shielded Cat5e/6 cable?

    31. Re:I can think of a few by Stray7Xi · · Score: 4, Insightful

      Sure, if you know nothing about security. Why does everyone think wired is so secure? I would say well implemented wireless networks are more secure than the average wired network. This is because well implemented wireless networks have strong authentication (e.g. client side certificates) and encryption whereas most wired networks do not have these things.

      And tell me how that stops me from jamming the wireless frequency bands. Security isn't just confidentiality, it's also protecting yourself from DoS.

      You can implement strong authentication on wired connections as well. Really what you're saying is "Wireless is more secure because it's so insecure at physical layer that we had to implement proper network security"

    32. Re:I can think of a few by Anonymous Coward · · Score: 0

      You lose.

      (Whoosh!)

    33. Re:I can think of a few by wpiman · · Score: 4, Informative

      If you can get access to a wired network; then you can plug in a WAP with your own encryption. Most companies don't question who is roaming around.

    34. Re:I can think of a few by Anonymous Coward · · Score: 0

      sure, but you either didn't read the parents post, or are simply trolling.

      he said a well implemented wireless network is more secure than the average cable network. which I would have to agree with.

      There's nothing stopping someone coming to my company's office at night, putting clamps on the outside of the building where the network connects to the building and listening in.

    35. Re:I can think of a few by BoberFett · · Score: 2, Funny

      Whoosh!

    36. Re:I can think of a few by furby076 · · Score: 2, Funny

      Whew managed to do that without mentioning OSI once

      But...but you did.

      --

      I do not support "The Man". I also do not support your irrational stupidity
    37. Re:I can think of a few by Spatial · · Score: 2, Funny

      Ha, that was so easy! What a di

      *NO CARRIER*

    38. Re:I can think of a few by SkyDude · · Score: 2, Funny

      Sure, if you know nothing about security. Why does everyone think wired is so secure?

      I don't know about everyone, but to get to my wired network, you'll have to come through a door, a window or a skylight.

      If you feel lucky, punk, our security is provided by Smith & Wesson, so go ahead - make my day.......

      --
      == First cross river, then insult alligator.
    39. Re:I can think of a few by supernatendo · · Score: 1

      No, its mine! LOL!

    40. Re:I can think of a few by Anonymous Coward · · Score: 0

      In my environment wireless is forbidden also. It really depends upon the sensitivity of the data that you are protecting. If you are only doing general web surfing, wireless is fine. Some data has enough sensitivity that it should only be transmitted over fiber optic to reduce the risk from emanations. Think your wireless signals only travel a few hundred feet? It travels much further (http://developers.slashdot.org/article.pl?sid=03/08/06/2153238). IIRC, the current distance record of 150 miles was set at Defcon.

    41. Re:I can think of a few by Anonymous Coward · · Score: 0

      Any length of wired cable acts as an antennae to some degree, therefore can be monitored wirelessly.

    42. Re:I can think of a few by supernatendo · · Score: 1

      Here hack this one! 192.168.1.255 or this one! 255.255.255.255 or this! 127.0.0.1

    43. Re:I can think of a few by Reapman · · Score: 1

      Your right he did, but that still doesn't validate anything he said. He was IMPLYING something that is not true. It would be like me saying that my SmartCar can kick the crap out a Vette... assuming the Vette has the engine removed. So what?

    44. Re:I can think of a few by pyite · · Score: 1

      as for client side certs there is nothing preventing wired from having this, and in fact a lot of secure installations do. Just because Wireless has some fancy WPA stuff that most people should enable doesn't make it more secure, if anything it's a nice warm blanket for people to have.

      Please re-read my original statement. I said "well implemented wireless networks are more secure than the average wired network." I am not arguing that the same security can be applied to wired networks. My point is that it's more likely to be found on wireless networks.

      A Hardened Wireless connection will always be less secure then a Hardened Wired connection.

      And I never claimed otherwise.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    45. Re:I can think of a few by CodeBuster · · Score: 1

      Excuse me for saying so, but I think that your employer may be a bit out of date with the technology that is currently available. The state of wireless security 10 years ago (i.e. WEP) might have might that a legitimate policy, but things have definitely changed for the more secure in recent years, even the US Military uses wireless now in war zones; would they do that if it could not be made secure? The CCMP standard (with AES encryption) is now widely supported in newer wireless networking gear (hardware upgrade costs are trivial in most cases compared to the security benefits) and provides substantial security (i.e. an attacker is more likely to enter the building in disguise and plug something into your Ethernet network or use social engineering instead of trying to brute force your wireless keys. If you are worried about the laptop(s) being lost or stolen and the key recovered from the pilfered HDD then you might want to look into TrueCrypt for full disk encryption or perhaps a commercial solution from PGP which supports central IT administration tasks and key management (for encryption naïve users).

    46. Re:I can think of a few by The+Moof · · Score: 1

      And in situations where the network is not connected to the Internet, going wireless opens an entire new set of attacks. Now, instead of requiring physical access to the network, anyone "just passing by" can start poking at your network trying to gain access. I find it difficult to believe that people are more willing to break in to connect to your network that attempt to jump on from the coffee shop next door.

      While encryption is a good layer of security, physical access restrictions shouldn't be thrown completely out the window. Wifi's fundamental insecurity comes from anyone within radio range being able to attack your network. It essentially puts your whole network into the DMZ.

    47. Re:I can think of a few by TimothyDavis · · Score: 1

      Whew! I thought we were going to need to have a bailout plan for the Ethernet cable industry. Fortunately RAO industry will keep these companies alive!

    48. Re:I can think of a few by pyite · · Score: 1

      client side certificates do jack BTW. They are easily faked.

      You clearly have no idea what you're talking about and you've completely discredited yourself with this statement. How, pray tell, can you fake a client certificate? If you could, the whole premise of secure e-commerce goes out the window. You would have to possess the private key for the root or issuing CA to do this.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    49. Re:I can think of a few by Anonymous Coward · · Score: 3, Informative

      1. Apparently you don't know why the pairs are twisted.
      2. The very little incidental radiation from the signal cannot be reliably read as far away as a Wifi signal can.

      Learn a thing or two or stfu.

    50. Re:I can think of a few by JediTrainer · · Score: 4, Insightful

      #5 - realize that the (hopefully) smart network admin placed the AP outside of the internal network. Users connecting still use VPN as if they're external, so you can't sniff anything useful.

      --

      You can accomplish anything you set your mind to. The impossible just takes a little longer.
    51. Re:I can think of a few by pyite · · Score: 1

      Really what you're saying is "Wireless is more secure because it's so insecure at physical layer that we had to implement proper network security"

      That's pretty much exactly what I'm saying. People zero in on wireless being insecure, but you can walk in to many, many companies, sit down at an open desk, plug in a laptop and have access to plenty of stuff you shouldn't.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    52. Re:I can think of a few by pengipengi · · Score: 1

      I totally agree!

      More wlan to "Don't touch! It works for me!"-people who doesn't know anything about security.

      That means more hotspots for me, and everyone else with handheld units and laptops = more free internet.

      That means a win-win-situation, less cables and more internet!

    53. Re:I can think of a few by Reapman · · Score: 1

      My apologies if I misinterpreted. However I wouldn't recommend opening up with something like "Sure, if you know nothing about security. Why does everyone think wired is so secure? " if you don't feel that Wireless is more secure then Wired.

      If you have to make a comparison between two things, but you give one of them a handicap (well secure vs average), and then say the other one is better, that's a poor comparison.

      I guess I would never recommend wireless if security was the #1 concern.

    54. Re:I can think of a few by kheldan · · Score: 3, Insightful

      I don't agree with that, at least not in the long view. In the short view equipment might become more ubiquitous and inexpensive, but if it became an industry-wide trend then manufacturers would build fewer models and units and the price would most likely go up, not down, in the long run, especially for the home user who only needs to buy one or two ethernet switches and a few cables. Luckily I also don't believe that this is going to be a trend; we can't do everything over WiFi, nor should we try; it would be a debacle.

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    55. Re:I can think of a few by Hurricane78 · · Score: 1

      Additionally, what again is *the point* of having it wireless?

      Some cable lying around?

      Oh teh horrorxorz!

      I will keep my cables the way they are, until cheap modular bus systems come out to reduce the amount of cabling.
      I don't think I will ever need wireless anything at home or at work, except for a normal IR remote control.

      If I'm at the park, listening to Internet radios, or in some bar/café, I can use my mobile phone's Internet flatrate for 10€ a month.

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
    56. Re:I can think of a few by Anonymous Coward · · Score: 4, Funny

      Yeah, unless you combine the signal wire with a grounded pair. It would work even better if you twisted the pairs together. Hell you wouldn't even need shielding! Man, I could make a fortune with this unshielded, twisted pair idea...

    57. Re:I can think of a few by kildurin · · Score: 1

      >> Here hack this one! 192.168.1.255 or this one! 255.255.255.255 or this! 127.0.0.1 127.0.0.1. How dare you invade the mans home!!

    58. Re:I can think of a few by Jaqenn · · Score: 5, Funny

      Sir, we've traced the ip address, and its in your own house! The killer is in your house right now! Run! Run!

      --
      You are awash in a sea of fiercely stated opinions. Obvious exits are: 'File->Quit', 'Reply', and 'Page Down'.
    59. Re:I can think of a few by Chris+Burke · · Score: 3, Informative

      Assuming we're talking a modern encrypted network, #5 is going to be hard to work out. The handshake algorithm is no longer vulnerable to replay attacks, so I'm not sure what you plan on doing with your recorded authentication attempts.

      --

      The enemies of Democracy are
    60. Re:I can think of a few by dargaud · · Score: 4, Interesting

      Exactly. At home I've had wireless for a decade. But now with the ubiquity of wireless ADSL modems, there are about 15 hotspots within range and I can't get a stable connection anymore. I can't wire the rental appt I'm in, so I'm using ethernet over electric wires and it works great. Wireless is already dead for people who live in dense urban environment.

      --
      Non-Linux Penguins ?
    61. Re:I can think of a few by Anonymous Coward · · Score: 0

      I am using 127.0.0.1 on my home PC. Come and get me!

    62. Re:I can think of a few by postbigbang · · Score: 1

      And your employer is a twit.

      There are several very reasonable schemes for wireless connectivity that are very difficult to crack, and they cost, well essentially NOTHING.

      However, while you're not looking, I'll take my single board computer, plug it in under your cubicle drawer, and retransmit everything back to my recorders, so that I can crack things open at my leisure.

      Since you probably don't encrypt anything, or use LMhashes for passwords, it ought to be a cinch.

      Sarcasm aside-- your employer is a Luddite.

      --
      ---- Teach Peace. It's Cheaper Than War.
    63. Re:I can think of a few by jafiwam · · Score: 5, Insightful

      Well there are other aspects. If you are not the IT guy, you may get one semi-legit answer when some real answer lies underneath.

      For example;

      Luser: "I want wireless" IT: "No, it's too insecure"

      The REAL reason; "no, we do not have a proper policy about computers from home, and your dumb ass will doubtless bring in an infected laptop."

      Or: "What, do I look like I have time to help you troubleshoot sitting on the crapper (in a metal box), nor do I want to listen to you bitch about how fast it is and explain simple high-school physics to your retarded ass for failing to understand why the microwave screws up your download."

      Wired connections help IT police what goes on on the network. Wireless hurts that to a large degree. EVEN IF it's properly secured, I don't always want to finger-fuck whatever garbage the Lusers may want to try to connect with (looking at YOU iPhone).

      So, if you got told "no for security reasons" and you are not in the IT department, they probably think you are too dumb to deal with a wireless card not to be a persistent pain in the ass.

      Also, if you have any type of government audit, you have to deal with ignorant auditors that also have old beliefs about wireless networks. IT DOESNT MATTER what you may know about wireless if you deal with one of those bozos.

      All of this stuff can quickly make wireless a net-negative for the IT folks around you and get the thing rejected "for security reasons".

    64. Re:I can think of a few by Captain+Splendid · · Score: 2, Interesting

      in the long run

      Exactly. Lucking into a bargain situation has nothing to do with the long term. By your scenario, once prices have risen, I'm already sitting on a small mountain of cheaply-obtained networking gear which will keep me set for life.

      Also, your assumption is faulty. Another way to deal with less demand on equipment is to reduce prices. Wired is already cheaper than wifi, so a better way to compete would be to lower prices some more.

      --
      Linux, you magnificent bastard, I read the fucking manual!
    65. Re:I can think of a few by pyite · · Score: 1

      If you have to make a comparison between two things, but you give one of them a handicap (well secure vs average), and then say the other one is better, that's a poor comparison.

      It's not a poor comparison, it's a real world comparison. People are more likely to properly secure wireless networks than wired networks. That's my main point.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    66. Re:I can think of a few by dargaud · · Score: 5, Interesting

      Let me be the first to say that you have a really cool job.

      Let's see if I can best that... C;-)

      In Antarctica we can't use CAT cables because their dielectric properties change at extreme cold temperatures (-80C) and they run like crap. The cables also turn to raw spaghetti and break at the slightest touch.

      So we use wireless (absolutely no interferences there !), or fiber, which doesn't change properties with the cold. Usually both as a backup in case a snowmachine runs in a cable (we can't put them in the 'ground' or they would disappear under the accumulated snow over a few years, so we place them on rows of low poles).

      --
      Non-Linux Penguins ?
    67. Re:I can think of a few by neoform · · Score: 5, Funny

      #5 is going to be hard to work out. The handshake algorithm is no longer vulnerable to replay attacks, so I'm not sure what you plan on doing with your recorded authentication attempts.

      I use them as pickups lines at bars. So far, hasn't worked very well though.

      --
      MABASPLOOM!
    68. Re:I can think of a few by Captain+Splendid · · Score: 1

      Aww, diddums! I replied to P instead of GP by mistake, and an AC get his knickers all in a twist! So fragile...

      --
      Linux, you magnificent bastard, I read the fucking manual!
    69. Re:I can think of a few by jonbryce · · Score: 4, Insightful

      You are still going to need ethernet to connect all the wireless access points together.

    70. Re:I can think of a few by Anonymous Coward · · Score: 0

      Amen! Can I be your b****?

    71. Re:I can think of a few by Anonymous Coward · · Score: 0

      Is your boss aware that an unshielded ethernet cable is like a big antenna transmitting? I am not saying it is easy or cheap, but if you only need to snoop, with the right equipment, it is possible (range is rather limited though). So I hope you have multiple layers of security besides relying on a cable.

    72. Re:I can think of a few by squallbsr · · Score: 1

      Except for companies who don't have wireless and monitor the air waves for rouge access points. Makes securing your wireless network easier if you have no wireless network to secure!

      --
      Sleep: A completely inadequate substitution for Caffeine.
    73. Re:I can think of a few by squallbsr · · Score: 1

      Cats are evil, your post is proof of that!
      </sarcasm>

      --
      Sleep: A completely inadequate substitution for Caffeine.
    74. Re:I can think of a few by ebh · · Score: 1

      That's a pretty big "if".

    75. Re:I can think of a few by Anonymous Coward · · Score: 0

      Seriously? More Secure?

      If you want to break in at a "physical" level between two wireless connections you just have to be sitting in radio range. Which may, or may not, even be in the same building. To break into a wired connection at the same level you'll have to attach some vampire clamps or whatever somewhere which means a physical break, physical access to the network.

      as for client side certs there is nothing preventing wired from having this, and in fact a lot of secure installations do. Just because Wireless has some fancy WPA stuff that most people should enable doesn't make it more secure, if anything it's a nice warm blanket for people to have.

      A Hardened Wireless connection will always be less secure then a Hardened Wired connection. One sends signals throughout the air one through a small cable.

      Whew managed to do that without mentioning OSI once

      Yeah, I'm gonna have to go ahead and disagree with you there, security has little to do with medium. We hear of security breaches all the time, they all happen on wired networks.

    76. Re:I can think of a few by Anonymous Coward · · Score: 0

      Can you dispense with the "Umm, hello?"? It's so smart-assy and adds nothing positive to your point.

    77. Re:I can think of a few by TubeSteak · · Score: 1

      Besides, what they forget to address is this thing called sunk cost. You've purchased that hardware and infrastructure. You're not going to get any $$$ by replacing everything with wireless anyway.

      Hilarious!
      Do you even know what a "sunk cost" is?
      Because you follow it up with two sentences that show you don't.

      In economics and in business/finance, it is a cost that you will never get back.
      As a result, sunk costs are ignored by rational people when making future plans.

      I encourage you to read the wikipedia article on sunk costs

      --
      [Fuck Beta]
      o0t!
    78. Re:I can think of a few by squallbsr · · Score: 1

      I'd love to have those low and consistent wireless ping times at my house. Wireless all but stops working around 5pm in my neighborhood - too many of those multiple frequency spamming cheap (donkey) APs being run by the neighbors.

      --
      Sleep: A completely inadequate substitution for Caffeine.
    79. Re:I can think of a few by Anonymous Coward · · Score: 0

      security

      But if I'm on wireless, I can just turn my screen closer to me so those evil hackers can't see my credit card password! If I have a cable, I can't move! Therefore, wireless is far more secure.

      bandwidth

      What are you geeks talking about? I can get my emails and download the internets perfectly fine while I watch the teevee!

      interference/reliability

      Oh yeah? What about cats? If my cat chews through the cable, then I'm out for a week while I wait for the cable guy to come fix it! That doesn't sound very reliable to me! Cats can't chew through the wireless!

      And I thought you nerds were supposed to be smart!

      The evil hackers don't need to stand behind you to see your login credentials.

      Browsing your facebook account is not the same as working through various corporate portals running a multitude of web services.

      Our corporate offices don't allow pets, so cats chewing cables do not apply.

      Did you give any thought to what you wrote before you posted?

    80. Re:I can think of a few by JWSmythe · · Score: 1

          Have you ever tried to gain access to a wiring room?

          Sometimes a fake telco badge and a clipboard will do it. Sometimes you only need to ask.

          I've never gone into a wiring room for illegal purposes. They've always been legitimate, for companies that need me to do work. I don't think I've ever identified myself to building management, other than to say "Hi, I need to get into the wiring room to hook up some phone lines, can you show me where it is?"

          The only exception was a building close to One Wilshire. Very secure buildings tend to be a different story. Even still, it can be done with a little social engineering.

          If you don't like that point, buy a crappy white van and some orange cones. Find the manhole cover marked "TELCO". Park with the back of your van there at 3am, put your orange cones out, pry the cover out, and have at it.

          Your building may be secure, but somewhere up stream isn't.

      --
      Serious? Seriousness is well above my pay grade.
    81. Re:I can think of a few by squallbsr · · Score: 3, Interesting

      I can attest to that, mostly because my neighbors have those multi-frequency spamming "super" access points.

      Wireless pretty much doesn't work between 5pm and 9pm upstairs in my house.

      --
      Sleep: A completely inadequate substitution for Caffeine.
    82. Re:I can think of a few by tinkerghost · · Score: 3, Insightful

      Exactly. At home I've had wireless for a decade. But now with the ubiquity of wireless ADSL modems, there are about 15 hotspots within range and I can't get a stable connection anymore.

      The last wireless network I installed in an apt showed 4 'Lynksys' networks available plus a few secured & a few more unsecured with actual names. Given what I've seen, I wouldn't be surprised if 20% of apartment dwellers are using the wrong wireless connection.

      As dargaud pointed out, saturation is becoming a significant issue in residential areas - most apartment buildings outside of the slums are already having interference issues, a situation which is only getting worse as people continue to push for a wireless life.

    83. Re:I can think of a few by Attila+Dimedici · · Score: 1

      Sure, if you know nothing about security. Why does everyone think wired is so secure? I would say well implemented wireless networks are more secure than the average wired network. This is because well implemented wireless networks have strong authentication (e.g. client side certificates) and encryption whereas most wired networks do not have these things.

      So, let me get this straight: People should switch to wireless because they don't securely implement their wired connections, and properly configured wireless connections are more secure than improperly configured wired connections. Yes but which is more secure; a wired connection that has no security except default settings, or a wireless connection that has no security except default settings?

      --
      The truth is that all men having power ought to be mistrusted. James Madison
    84. Re:I can think of a few by moseby · · Score: 2, Insightful

      For you IT folks that will get burnt if you don't do the right thing, consider this....

      WIFI is considered an FCC part 15 device, and as such is a secondary user of the wireless spectrum. If a primary user parks a transmitter next to your office building and cranks it up to much higher power levels than you are allowed using his primary allocation privileges, he can legally irradiate your business back to the stone age.

      While you may whine and complain, send checks to lawyers, call your congressman, etc. you will still be off the air for long enough to become unemployed.

    85. Re:I can think of a few by Wisconsingod · · Score: 2, Insightful
      We nerds are smart, here are the answers to your problems

      security

      The security issue is once you press send. With wired the password is shielded from the hackers eyes by the thick plastic cover wrapped around the wires. With wireless it's like attaching it to the tail of an airplane and taking it throught he sky. Point for Wired

      bandwidth

      Think of the old can-string phones. If you and a friend were in different rooms and talked quietly, you couln't hear. if you talked into the can, it was better sound quality. It's the same for music from the internet, the quaility is better when transferred over wires. Point for Wired

      interference/reliability

      WE ARE GEEKS, WE DON'T HAVE CATS (point for all geeks)

    86. Re:I can think of a few by JWSmythe · · Score: 1

          The obligatory question is.... are you hiring? :)

      --
      Serious? Seriousness is well above my pay grade.
    87. Re:I can think of a few by Anonymous Coward · · Score: 0

      Umm, hello?

      Bite my pasty white ass!

    88. Re:I can think of a few by maraist · · Score: 1

      I'll counter your argument with more of the same.. You argue that the 'average' wired network is insecure.. Then you use the argument that you have an unsecured wire to your building - which I would argue is NOT average.. What percentage of the worlds wired networks are building-to-building? Most, instead will have a switch in a secure room of each floor. There, of course, IS a wire to the building - going to your ISP. But you have that in both wired and wireless networks (with the possible exception of campus building-to-building wireless).

      With the switch secure, it's relatively easy to track down where an infiltration came from - is there a new MAC address in the switch? When did it arrive, which port => trace down the wire.

      I'm not a big windows guy, so I don't know how the lepers of the world survive, but on a Linux network, being on the internal network itself only gives you access to the internet. You can't actually access most services (other than DHCP, DNS and NAT), as all servers and desktops are sufficiently firewalled by and/or use secured connection points (ssh, rsync -e ssh, scp, NFS over ssh, LDAP permissioning). Certainly you could DOS the network. But that doesn't seem very useful - and again, this would be easy to track down.. Identify the local IP with all the connections, find it's mac, track down the switch port.

      --
      -Michael
    89. Re:I can think of a few by Anonymous Coward · · Score: 5, Funny

      An Internet walks into a bar and yells "SYN!"

      Moments later, someone replies "ACK!" followed shortly by "You've got male!"

      You may or may not see what I did there.

      ...I'll get my coat.

    90. Re:I can think of a few by Anonymous Coward · · Score: 0

      You win.

      (You got the joke.)

    91. Re:I can think of a few by maraist · · Score: 1

      But if anything is hogging bandwidth, or pounding local machines (such that /var/log/security catches the events), then you're bound to get caught at some point. Either that or you should fire your sys-admin.

      --
      -Michael
    92. Re:I can think of a few by Anonymous Coward · · Score: 0

      Just updated to Ubuntu and the wireless started acting wonky.. now that couldn't be Ubuntu's fault by any chance, could it?

    93. Re:I can think of a few by Wintermute__ · · Score: 1

      If a company's security is that bad on the wired network, what makes you think they'll magically wise up and properly implement their wireless? I'm guessing "Linksys" and no encryption is just as likely there.

    94. Re:I can think of a few by Helix666 · · Score: 2, Funny

      Yeah, those red access points really do stand out quite a bit. Although, could you imagine the trouble you'd have if they painted them beige or something like that?

      --
      Oh, the irony... "Anonymous Coward: If you have nothing to hide, you have nothing to fear!"
    95. Re:I can think of a few by EvilBudMan · · Score: 1

      We actually have a weird situation where we have excess wireless capacity, but our wires are filled. Buy extra AP's to address that future need seems cheaper than having cable pulled these days.

    96. Re:I can think of a few by pyite · · Score: 1

      So, let me get this straight: People should switch to wireless because they don't securely implement their wired connections, and properly configured wireless connections are more secure than improperly configured wired connections.

      That's great except I never said anything about switching to wireless. In my opinion, wired connections are far more useful. I don't know why all the comments to my post are putting words in my mouth. You use words like "proper" and "improper" which is great, but ignores the reality that most companies just leave wired access completely open. It's silly to talk about the insecurity of wireless when wired networks are rarely locked down like they should be.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    97. Re:I can think of a few by richmaine · · Score: 1

      Edwards AFB, where I worked before retirement, had similar issues of concern about interference with aircraft test telemetry. They even prohibited wireless keyboards and mice. While the prohibition obviously was not 100% effective, I'm told that a few violators would not cause problems, but that they didn't want the many thousands of wireless units that they would see without the prohibition.

      For related reasons, there is no cell phone competition on base. They have exactly one provided who they have a contract with. My cell didn't happen to work with that provider.

    98. Re:I can think of a few by Jeremy+Erwin · · Score: 4, Funny

      We don't need wires for privacy. We have WEP, which provides equivalent security, wirelessly. Stop living in the past.

    99. Re:I can think of a few by Dragonslicer · · Score: 1

      but you can walk in to many, many companies, sit down at an open desk, plug in a laptop

      Network security may not be that company's biggest problem.

    100. Re:I can think of a few by pLnCrZy · · Score: 2, Interesting
    101. Re:I can think of a few by pyite · · Score: 1

      If a company's security is that bad on the wired network, what makes you think they'll magically wise up and properly implement their wireless? I'm guessing "Linksys" and no encryption is just as likely there.

      From what I've seen, most companies are scared about the security of wireless so they put more effort into properly securing it, all the while blatantly ignoring the security holes associated with wired networks. I'm not saying this is a good thing, it just seems to be par for the course.

      A default SSID and no encryption is a whole different issue and not one I'm speaking about.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    102. Re:I can think of a few by Cheech+Wizard · · Score: 1

      It's not a poor comparison, it's a real world comparison. People are more likely to properly secure wireless networks than wired networks. That's my main point.

      Where do you get the data that validates your statement that people are more likely to properly secure wireless networks than wired networks?

    103. Re:I can think of a few by webmarin · · Score: 1

      Can you say "mesh"? I knew you could!

    104. Re:I can think of a few by RollingThunder · · Score: 1

      Depends what useful is.

      If you just want to screw with them, by making them lock on to your AP where they can't do anything, then it doesn't matter what the topology is. It's kind of hard to get them to plug in to your false network jack, though.

    105. Re:I can think of a few by JWSmythe · · Score: 1

      Your times are terrible. :)

          I just ran the same test. One was from my laptop (wireless). One was from a wired machine. Both are on the same physical network. On the wireless side, I'm showing 54Mb/s "Very Good" signal.

      Ping statistics for 10.0.0.1:
              Packets: Sent = 50, Received = 49, Lost = 1 (2% loss),
      Approximate round trip times in milli-seconds:
              Minimum = 1ms, Maximum = 1238ms, Average = 112ms

      --- xx.xx.xx.xx ping statistics ---
      50 packets transmitted, 50 received, 0% packet loss, time 48987ms
      rtt min/avg/max/mdev = 0.654/0.697/0.784/0.038 ms

      --
      Serious? Seriousness is well above my pay grade.
    106. Re:I can think of a few by pyite · · Score: 1

      Where do you get the data that validates your statement that people are more likely to properly secure wireless networks than wired networks?

      It's admittedly a combination of anecdotal knowledge as well as information from the large networking vendors about what they typically see their clients doing. I'd love there to be a proper study on it, but it's unlikely people are going to admit that their networks are insecure and they know it.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    107. Re:I can think of a few by L0stm4n · · Score: 1

      This won't work on a PEAP( very common ) setup. If the AP doesn't present a valid certificate the client wont attempt authentication.

      --
      superman runs linux
    108. Re:I can think of a few by BrokenHalo · · Score: 5, Insightful

      You are still going to need ethernet to connect all the wireless access points together.

      Exactly. More to the point: for all those desktop machines out there, I see no purpose to flooding the air with wireless signals when the machine is essentially nailed to the desk and not going anywhere. You might just as well enjoy the faster, more secure connection.

      Wireless is a great way of conveniently dealing with portable devices like laptops and so forth, but nobody can deny that congestion is going to be a real issue if we do away with ethernet.

    109. Re:I can think of a few by Anonymous Coward · · Score: 0

      Red access points?

    110. Re:I can think of a few by Anonymous Coward · · Score: 0

      We do not generally trust encryption to hold up to a determined attack. We generally assume it wont! I include most encryption in this, but certainly the kind used for SSL and most VPNs.

      The fundamental fact is that if the attacker has no access to the network he cannot begin to circumvent your encryption. If you use only wires he must have physical access, which you can control with walls, guns, etc.. If you use wireless you may be unable to prevent him from having 'physical' access.

      Security is layers. First, get past the gate, then the guard with the gun, then the lock on the door, then find an ethernet port, then identify some hosts, then try to crack them. You have a limited time before someone notices your unathorized access to the network. You have even more limited time before someone notices your unathorized presence in the building.

      If you move to wireless you throw away at least four layers of security. Why would you want to throw away four layers of security? You'd have to be saving a [b]lot[/b] of money or be dealing with data without much value.

    111. Re:I can think of a few by Anonymous Coward · · Score: 0

      A) You can too wire your rental, you just have to be willing to patch a few holes when you move out.

      B) Move to 802.11a or 802.11n where there are 12 non-overlapping channels (about 60 numbered channels), fewer users, and less signal penetration (which is bad for people in big houses but good in apartment buildings).

    112. Re:I can think of a few by Attila+Dimedici · · Score: 1

      You seem to be saying that a default installation of a wireless network is as secure as a default installation of a wired network. The other option is that you are saying that if you don't make any effort to secure your network, it is not secure. That's sort of like saying that if you don't eat, you'll starve to death.

      --
      The truth is that all men having power ought to be mistrusted. James Madison
    113. Re:I can think of a few by Tony+Hoyle · · Score: 1

      WEP? lol.

    114. Re:I can think of a few by pub_tib · · Score: 1

      Remind me of "bitchchecker" the hacker! I bet he could hack him! Slashdot Post

    115. Re:I can think of a few by COMON$ · · Score: 1
      Well i was gonna say rain HAVOC by slamming a building with interference...by the time they found the interference source millions of dollars of damage would be done...

      The problem with wireless in my opinon isnt the security, that can always be improved, it is the noisy nature of the medium...

      --
      CS: It is all sink or swim...oh and did I mention there are sharks in that water?
    116. Re:I can think of a few by COMON$ · · Score: 0

      Until you realize your VPN is using SSL which has recently become trivial to hack.

      --
      CS: It is all sink or swim...oh and did I mention there are sharks in that water?
    117. Re:I can think of a few by idontgno · · Score: 1

      You can make MONDO money if you make the wires color coded, but in an obscure and almost-impossible-to-distinguish fashion, so that people who try to make their own terminations FAIL repeatedly and have to hire YOU to do it. That's definitely the ??? step right before sweet, sweet Profit!!!

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    118. Re:I can think of a few by Anonymous Coward · · Score: 0

      Wow, could it really be that easy? Is there a way to see if someone is doing this right now?

    119. Re:I can think of a few by QuantumRiff · · Score: 1

      In my office, they have 6 48 port blades in a big chassis switch filled with ports. All are plugged in, so around 300 of them.. I have 65 users on this floor, some servers, printers, etc.. over the years, people have re-arranged, moved, whatever, and they never wanted to take away the network ports, just added more when they ran out. I have been trying to convince them they would save a ton of money by getting 1 24-port gigabit switch, and a few Wireless N AP's. not to mention the backup battery would last for DAYS, and the AC would run a ton less. (and it would be much easier to manage then dealing with 300 wires in a patch panel. Its a mess. 24 ports would be more then enough for a few PoE devices, printers, servers, etc.

      --

      What are we going to do tonight Brain?
    120. Re:I can think of a few by EastCoastSurfer · · Score: 1

      What kind of companies do you deal with? I've never worked at a company that did not require badged/fob access to the building. After that I've experienced varying degrees of additional security from very little to your laptop must be pre-registered for the segment it is plugging into or the entire segment gets taken off the network.

      If you are just walking randomly into companies and plugging into their network then they have a lot more problems than network security.

    121. Re:I can think of a few by fluffy99 · · Score: 1

      Actually, you'd be surprised at the capability of the wireless defense and surveillance equipment. With 4 "sensors" located through a small to medium campus (some double as WAPS) you can geolocate any wireless source. They don't even have to connect. You know right away if someone sets up a new printer that has wireless. You see wireless PDAs. You see all the laptops that are broadcasting.

      I think wireless can be almost as secure as wired, with the assumption of proper vpn software and encryption (which can be easily done on wired). It will never be as reliable or immune to outside interference though.

    122. Re:I can think of a few by PitaBred · · Score: 1

      Hell, most laptops ship with gigabit ethernet cards any more. How fast is Wireless N now? And how ubiquitous is it? Is there a gigabit wireless on the horizon? Compare today's wired to tomorrows wireless, and wired is still faster.

    123. Re:I can think of a few by the_other_chewey · · Score: 1

      Why does everyone think wired is so secure?

      Because I can hook onto your wireless network from the car park.

      Onto mine? No you can't.

      Or if you can, you have broken strong public key encryption, and I'd be very interested in reading your paper.

    124. Re:I can think of a few by Phroggy · · Score: 3, Insightful

      Until you realize your VPN is using SSL which has recently become trivial to hack.

      This is false; the linked article even says so (it cites SSL as an example of how MITM attacks can be prevented).

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    125. Re:I can think of a few by supernatendo · · Score: 1

      Man-in-the-middle attack

      Apache-SSL 1.3.28+1.52 and all earlier versions permit a client to use real basic authentication to forge a client certificate.

      BTW, this has been patched, but there are still vulnerabillities...

    126. Re:I can think of a few by Thraxen · · Score: 1

      Everything you listed is still more difficult, and more risky, than simply being in range of the wireless network.

    127. Re:I can think of a few by godefroi · · Score: 1

      You live near different wireless networks than I do...

      --
      Karma: Poor (Mostly affected by lame karma-joke sigs)
    128. Re:I can think of a few by Thraxen · · Score: 1

      "Unless your physical security is tight, I'll almost certainly have a much easier time sneaking in and plugging in than I will trying to break WPA or better."

      But this still entails a huge risk. You would be much more likely to find yourself in handcuffs and on your way to jail by attempting unauthorized physical access to a building. This is a huge deterrent even if the security once inside is easier to crack. Hell, why not argue that you should simply break into the server room?

    129. Re:I can think of a few by Changa_MC · · Score: 2, Informative

      Then he picked the wrong term, but his point still stands. Maybe he should've said that they failed to consider existing physical capital: You've already got the network, discarding the sunk cost means that using it is now free.

      --
      Changa hates change.
    130. Re:I can think of a few by Anonymous Coward · · Score: 0

      ...I'll get my coat.

      I think that would be best..

    131. Re:I can think of a few by Bigjeff5 · · Score: 1

      I would say well implemented wireless networks are more secure than the average wired network.

      So wireless only wins when you compare a well implimented network to a moderate to poorly implimented wired network? If we compare a well secured wired network - with encryption, strong authentication, no default settings, and all unused ports physically disabled, even the most secure wireless network doesn't come close to the security of the wired network. Even with high security it barely manages to match the security of a wired network, for the simple limitation of physical access. The weakest link for wireless is the physical access. Most wired networks don't have encryption and strong authentication because they don't NEED encryption and strong authentication because it is already sufficiently difficult to access. For those that require a step up, strong authentication is generally what is chosen, and is sufficient in 90% of cases. Wireless, however, requires very very strong encryption for even the most simple tasks because it is simply insecure by its very nature.

      Every scheme is breakable, given enough time, effort, and cleverness. There are techniques which require no valid authentication at all, and attack physical limitations (like memory) of the hardware itself. Cheap equipment is especially vulnerable, but expensive equipment won't save you necessarily either.

      That is why one of the primary principles of network security is to restrict physical access to the network. For wireless, all you can do is obfusticate the signal as much as possible with encryption techniques and authentication methodologies. That level of security isn't even required on 99% of networks, because they can be secured physically. It would be rather simple to impliment strong encryption and handshakes on a wired network if necessary though, and some very secure networks do.

      Plus, the simple fact remains that vampire clamps and the like don't work on much more than co-ax, and the time it takes to splice Cat-5 or better should send alarm bells all throughout the system. Unused ports on switches and routers can be completely disabled, making hacking such a device impossible without re-setting it. If you've configured your device correctly it simply will not be able to access the network on a default configuration. So you've killed a network segment, and now alarm bells are going out all over the place...

      It's absurd to say wireless could ever be as secure as wired, because every technology that can be used to secure a wireless signal is easily adapted to a wired signal, with all of the inherant wired advantages on top of that.

      For an example, take two numbers: 100 and 0. Add 100 to each number 10 times and see which one is higher. The number that gets to start with 100 will always be higher than the one that starts at 0, no matter how much you add to it. Wired security gets to start at 100, where wireless is stuck at 0, and all the advances in wireless are easily added to wired.

      See why wireless can never be secured more than wired can be?

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    132. Re:I can think of a few by luigi517 · · Score: 1

      wow dude...you, uh really need to chill out a little there, try it, it makes life alot more fun

    133. Re:I can think of a few by supernova_hq · · Score: 1

      Agreed. The statement should be change to "We don't need wired ethernet for employee workstations anymore". Wireless (especially N) is more than fast enough for your average office employee (excluding possibly graphics and video artists). The place where wired is still needed is at the backbone (inner-office) and to/from the servers.

    134. Re:I can think of a few by Anonymous Coward · · Score: 0

      While you have some interesting factors you're working with there, I can never imagine having to work up there. I need a social life and such.

      ...

      Yeah. I know. It's Slashdot. No social lives and such.

    135. Re:I can think of a few by Inglix+the+Mad · · Score: 1

      Because a good switch will be able to tell the MAC address of the computer plugging into it is not authorized, record the attempt, and turn off the port.

      --
      People say the road to hell is paved with good intentions. Why? Is there any shortage of bad ones?
    136. Re:I can think of a few by supernova_hq · · Score: 4, Funny

      Hell, most laptops ship with gigabit ethernet cards any more.

      What do you call that, a half-negative...?

    137. Re:I can think of a few by Anonymous Coward · · Score: 0

      Do you live in an apartment complex where you can sit and see about 20+ APs all stepping on each other channel wise?

      *I DO* and while wireless is OK at best here, getting good through put is a pain. (And yes, I monitor what channels are all overloaded and move accordingly but that only last so long.)

      Do you have a one piece unit that

      "Oh yeah? What about cats? If my cat chews through the cable..."

      Your cat can still chew through the cable running your dsl/cable modem. Moot point other than it is one less cable to chew through.

      Proper training of cats is in order if they are chewing cables.

      (why does Nat'l lampoons Christmas vacation come to mind?)

      Sheesh! I can't believe you just let your cats just run around like little heathens without supervision! I bet you're the type to let them in the cat nip just whenever they feel like it!

      Kittah must haz Tymeowts!!! ;-)

    138. Re:I can think of a few by Anonymous Coward · · Score: 0

      rouge
      1. A red or pink cosmetic for coloring the cheeks or lips.

      rogue
      3. Operating outside normal or desirable controls: âoeHow could a single rogue trader bring down an otherwise profitable and well-regarded institution? (Saul Hansell).

    139. Re:I can think of a few by Anonymous Coward · · Score: 0

      Psst! I'll give you the three IPs of the computers on my network. Feel free to do with the addresses.

      127.0.0.1
      127.0.0.3
      127.0.0.6

      Let me know how that goes. Why, I'm willing to bet the security is just as good as that on your own computer/network :)

    140. Re:I can think of a few by drewvr6 · · Score: 1

      Yes. Cats must be removed from the picture. Mine have committed treasonous acts of sabatoge against my cables more than once!!! I tried with a dog but found he was double crossing me for leftover cat treats.

      --
      Now we see the violence inherent in the system.
    141. Re:I can think of a few by Anonymous Coward · · Score: 0

      But the ethernets are only used 10-50% of the time!

      Furthermore, I've realized that I only use my car 2% of the time, so from now on, I will only walk everywhere.

    142. Re:I can think of a few by teg · · Score: 2, Interesting

      But now with the ubiquity of wireless ADSL modems, there are about 15 hotspots within range and I can't get a stable connection anymore.

      I recently bought a new Apple Airport Extreme to solve this - by being able to use both 5.0 GHz and 2.4 GHz at the same time. 5.0 GHz is a lot less crowded - for the time being, there's just above 30 wireless networks in the 2.4 GHz range, and just me in the 5.0 GHz. A dual band router allowed me to take advantage of that, while not rendering useless the equipment I've got that can't use 5.0 GHz.

    143. Re:I can think of a few by norminator · · Score: 1

      But you still have to get inside the building to do that, which was the previous poster's point.

    144. Re:I can think of a few by Cruciform · · Score: 2, Funny

      You're in Antarctica? You must really love Linux. :P
      Some people just put a penguin sticker on their computer or buy a tshirt.

    145. Re:I can think of a few by Hognoxious · · Score: 1

      They probably assume a wired network is already secure enough, provided they don't leave the doors open.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    146. Re:I can think of a few by Cruciform · · Score: 1

      Wow. I just connected to his IP and he has the exact same taste in porn that I do. Except for that folder of midget porn. I'd never collect anything like that.

    147. Re:I can think of a few by norminator · · Score: 1

      Sounds like a job for Cosmo Kramer!

    148. Re:I can think of a few by pyite · · Score: 1

      See why wireless can never be secured more than wired can be?

      I'm not an idiot, so you don't need to try to explain your point as if I am an idiot. I never make the argument that we should all use wireless. All I said that is people often take the time to secure wireless networks while completely neglecting their wired security, assuming that their physical security is adequate.

      This is a naïve approach to security as most people's physical security sucks. It just so happens to leave them in a position where sure, their wireless network is authenticated and encrypted, but their wired network (which can be accessed by a visitor or the cleaning person who works nights) is wide open.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    149. Re:I can think of a few by galego · · Score: 1
      so I'm not sure what you plan on doing with your recorded authentication attempts.

      I was thinking of sampling and using them like Dr. Dre, Vanilla Ice and others. One or two hits and I could retire early. There's gotta be a golden one in there somewhere with all that traffic!

      --

      Que Deus te de em dobro o que me desejas

      [May God give you double that which you wish for me]

    150. Re:I can think of a few by groovemaneuver · · Score: 1

      - security - bandwidth - interference/reliability ... etc.

      ... and PXE booting for network installs, imaging, and deployment

    151. Re:I can think of a few by pyite · · Score: 1

      A client certificate is pre-installed via a known secure method which makes man-in-the-middle attacks moot.

      The Apache vulnerability is not related to the issue at hand (e.g. 802.1x with EAP-TLS). Vulnerabilities can exist in all sorts of security mechanisms. The advantage with client certificates is that as soon as you know of a vulnerability, you can fix it and publish a Certificate Revocation List that would prohibit potentially compromised certs from being used on the network.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    152. Re:I can think of a few by thsths · · Score: 1

      >Wireless (especially N) is more than fast enough for your average office employee

      For one, yes. But a whole office sharing the bandwidth, or even a whole building? Remember that you only get a maximum of 2 or 3 independent channel on wireless, and with N you can forget even that.

      For light office workers or for semi-nomads with laptops and off-line storage this may work, but for many computer users it would just be a big step backwards.

    153. Re:I can think of a few by LanMan04 · · Score: 1

      There are a ton of people who still use WEP.

      --
      With the first link, the chain is forged.
    154. Re:I can think of a few by LanMan04 · · Score: 1

      Just curious, do you work for Raytheon (RPS)?

      --
      With the first link, the chain is forged.
    155. Re:I can think of a few by galego · · Score: 1
      but the notion that "wireless=fundamentally insecure" seems dubious at best.

      I would say "Wireless=More Attack Surface" ... Some might say fundamentally *less* secure because of that fact. A key factor in security is reducing attack surface to only what is necessary for the required/intended of the functionality.

      Yes ... people should take more care in operating wired networks as well.

      --

      Que Deus te de em dobro o que me desejas

      [May God give you double that which you wish for me]

    156. Re:I can think of a few by pyite · · Score: 1

      Because a good switch will be able to tell the MAC address of the computer plugging into it is not authorized, record the attempt, and turn off the port.

      Where did people start getting the idea that MACs are both secret and immutable? I can sit down at a desk with port security (Cisco's terminology) turned on, look at the back of your PC and read the MAC printed on most PCs near the serial number, and then tell my laptop use that MAC. I unplug your PC and plug in my laptop and your switch doesn't know the difference. Nice try, though.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    157. Re:I can think of a few by Chris+Burke · · Score: 1

      There are also a ton of people who don't secure their APs at all...

      Which as a practical matter means that many wireless networks are trivial to break into, yet is irrelevant to a security-minded person wanting to know if their own wireless network will be secure.

      --

      The enemies of Democracy are
    158. Re:I can think of a few by Paul+Pierce · · Score: 1

      I think DoS is the best wired vs. wireless security issue. I have ACLs, encryption, and authentication on my wireless connections; how many people have encrypted wired traffic out there?

      You can 'sniff' encrypted traffic all you want. The one thing you can not truly protect against is DoS on the wireless side.

    159. Re:I can think of a few by rezalas · · Score: 1

      Steps to break a wireless network:

      #1 - Pull up to parking lot. #2 - Sniff advertised name of network #3 - Put up your AP, set name to clone network's name #4 - Record authentication attempts #5 ... #6 - Profit!

      While many people may be attempting to "gimp" wired network security to "win" the argument, people are also doing the same to wireless. A secure wireless network is going to use the same layered approach that a wired network uses for security.

      1. You will be looking for rogue transmitters and APs in the area of your network as a security measure, and be able to identify if someone is attempting to transmit from the parking lot. That is a good indicator that you need to send security out to a car.
      2. You won't advertise your SSID on a secure wireless network, so this won't work. You'll be using a 512bit encryption scheme or better, as well as MAC filters.
      3. This will be picked up by your regular network scans, and since you aren't broadcasting SSID data, you'll identify it fairly quickly. Also, you will probably have a lamb transmitter as bait for someone who knows enough to attack you but not enough to know its a trap.
      4. You won't see people attempt to authenticate to you, because you won't have the right IDs and won't be able to decode the encrypted and signed data even if you somehow dupe a system to logging to you. Also, since you are sitting in the parking lot, you probably wont have as good a transmit level as the real transmitters, and properly tuned wifi cards don't hop APs easily.
      5. ... yeah, 1-4 are invalidated so ... lets leave it...
      6. You can't really profit with the fat amount of nothing you just got. Unless you kidnapped the security guard who wanted to know why the fuck you are sitting in his lot with a laptop and a wifi antenna sticking out your window.

      While I do understand that WiFi isn't perfect, you have to understand that NO medium is ever perfect. For 90% of all companies out there a properly configured WiFi network is well within budget and the capability of their network admin. For the other 10% wired might the be only way to go (and I completely understand and agree with this!) But really, the majority of people that you have to worry about couldn't hack their way out of a paper bag, let alone into a secure wireless network. The most threat many of these companies will ever experience is going to come from employees internally anyway, in which case wired or wireless won't even matter.

    160. Re:I can think of a few by d3matt · · Score: 1

      Out of curiosity, would fiber have been easier/cheaper than all that shielded Cat5e/6 cable?

      Fiber is cheaper by the foot, but the connectors are extremely expensive.

      --
      I am d3matt
    161. Re:I can think of a few by rezalas · · Score: 1

      The smart thing to do is just not broadcast your SSID in the first place.

    162. Re:I can think of a few by azrider · · Score: 1

      Yes, it is convienient to give devices wireless connections, but signal quality is a huge issue with location, time and simple randomness all coming into play in ways cable simply does not have trouble with.

      Then there's the odd consultant (dealt with this multiple times) that thinks that the higher gain, the better (1 watt amp + 18db antenna). Aside from this being totally illegal (48db EIRP vs 36db legal max), the pattern looks like a frisbee, rather than an overstuffed creme doughnut. This is great for rooftop to roof top, but sucks for wide area (I've gone 5 miles on 36db).

      --
      And ye shall know the truth, and the truth shall make you free.
      John 8:32(King James Version)
    163. Re:I can think of a few by rezalas · · Score: 1

      I don't think its really a fair comparison anyway. The point isn't to ask if the mediums are better than each other, the question that is more appropriate is "Are wireless networks ready for full-time use in most networks". The answer honestly is yes, because they already exist in most networks successfully. Once you have a wireless network connected to your primary network, then you have no reason to not switch over completely as you obviously feel secure enough to have an AP already.

    164. Re:I can think of a few by Sir_Lewk · · Score: 1

      Har har har

      On the plus side, probably one of the funnier spelling nazi comments I've seen in a while. ;)

      --
      "linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)
    165. Re:I can think of a few by LanMan04 · · Score: 1

      "When running from a bear, you don't have to be the fastest, just faster than the slowest guy."

      I understand exactly what you mean.

      --
      With the first link, the chain is forged.
    166. Re:I can think of a few by jonbryce · · Score: 1

      For a large building with thousands, or even tens of thousands of people in it? I'm not there would be enough bandwidth to cope with it.

    167. Re:I can think of a few by Anonymous Coward · · Score: 0

      exactly! wireless is the least secure method for attaching to a network and even the best methods today are crackable. if someone comes out with a new method, it will only be a matter of time before that becomes crackable.

      anyone vesting all their profits on wireless is doing a very poor job of research.

    168. Re:I can think of a few by zoefff · · Score: 1

      You do have the cooler job, but I can't say I envy you.

    169. Re:I can think of a few by Fjandr · · Score: 1

      The statement should be change to "We don't need wired ethernet for employee workstations anymore".

      Absolutely not agreed. Wireless is fine for most consumer applications. If a station is tied to a desk, however, there is much to be gained from a wired network that wireless cannot yet provide. The higher the density of endpoints in any given area the more problems wireless has, whether you're talking about connectivity, troubleshooting, or security. If you want a stable network that's (relatively) easy to rebalance as needed, wired takes the cake hands down. That's not even touching the bandwidth issues...

    170. Re:I can think of a few by Animaether · · Score: 1

      some call it "evolution of the English language"

      I call it "devolution of the English language"

      http://englishplus.com/grammar/00000187.htm

      It seems to be gaining popularity anymore, though.
      *cringe*twitch* /nokarma

    171. Re:I can think of a few by Obfuscant · · Score: 1
      1. You will be looking for rogue transmitters and APs in the area of your network as a security measure, and be able to identify if someone is attempting to transmit from the parking lot. That is a good indicator that you need to send security out to a car.

      I'm a licensed amateur radio operator with an HSMM system in my car. You send security out to my car, parked on a public street, and if they do anything more than smile and wave I'll get the cops on site to hand out assault charges faster than you can say "unlicensed operations must not interfere with and must accept interference from licensed users of the spectrum".

      Now, if I was trying to cut into your WIRED network, you could have the cops come arrest ME. See, the difference between wireless and wired isn't that hard to understand, now is it?

    172. Re:I can think of a few by murraj2 · · Score: 1

      Well, I don't know about cool, but you certainly have the colder job.

    173. Re:I can think of a few by GeodesicGnome · · Score: 1

      "Always" and "Never" must be taken with a grain of salt in arguments about technical futures. In the medium term future, convenience will trump other issues that might keep wireless out of most company office environments.

      At my company, wifi allows us to connect our laptops in meeting rooms that don't have ethernet ports. We can also keep working while waiting for the exec prima donna who called the meeting but can't manage to be on time. As new rooms are divided off or joined together, IT doesn't have to rewire everything.

      At home the "fiber to the wall" in my new home meant fiber to a little box on the side of the house where the DSL hardware was housed with a little 8-hr APC UPS. Rain getting into that box, bad connectors, etc. kept taking down my connection and requiring me to wait for a tech to come to the house. I now use Clearwire and have a wireless connection between the box sitting on my desk and the Clearwire tower a couple miles away. So far it has been MUCH more reliable. I only use ethernet for that "last yard" to my Clearwire box. It's much slower now, but more trouble free. Just my own experience. Your milage may vary.

      Cable gives you speed and some greater security, but at the cost of pulling cables all over and being at the mercy of connectors that can get old and break. Then you are under your desk or up in the ceiling trying to find the problem.

      That said, I would normally use a cable connection if available and if I had a good quality cable that was long enough to allow me to place my workstation where I want it. But I am getting very tired of having to deal with the tangle of power and ethernet cables to all my various equipment.

    174. Re:I can think of a few by Anonymous Coward · · Score: 0

      What about WiFi in the 5GHz band? Any instruments receiving that?

    175. Re:I can think of a few by Chris+Burke · · Score: 1

      Hm, well, that's really not what I meant at all. I meant that if you properly secure your wifi network with WPA2, then you are pretty damn secure, irrespective of what anyone else is doing (or not doing) to secure theirs. It's not about diverting attackers to easier targets, it's about being secure in the face of an attacker determined to get into your network via electronic means.

      --

      The enemies of Democracy are
    176. Re:I can think of a few by wiredlogic · · Score: 1

      If security matters all drops will be locked down to a specific MAC and the network monitored for any unauthorized MACs. Where I once worked they were very diligent about this and an IT guy would be there within minutes if anyone plugged in unauthorized equipment.

      --
      I am becoming gerund, destroyer of verbs.
    177. Re:I can think of a few by rezalas · · Score: 1

      Your license doesn't allow you to attempt to hack a network, and when the police show up (because security will have called them already) and notify them of the felony you might be committing, the restraining order is all I'll need to have your license pulled :) People have done time for this in the past, and no cop is stupid enough to fall for the license BS.

    178. Re:I can think of a few by PitaBred · · Score: 1

      I call it an itchy spacebar and lazy proofreading ;)

    179. Re:I can think of a few by RobertLTux · · Score: 1

      and then there is my (completely theoretical) Gigahertz range multichannel jammer that can scramble your wireless
      connections from "down the street" combine that wiht a little SE or wardriving and bingo

      you can run a wired connect in a conduit with rf shielding very easy but somehow shielding whole rooms??

      --
      Any person using FTFY or editing my postings agrees to a US$50.00 charge
    180. Re:I can think of a few by pbhj · · Score: 1

      Don't show them this http://www.scientificamerican.com/article.cfm?id=hackers-can-steal-from-reflections about using reflections viewed with a telescope to see screen images.

      Nor about the gathering of keypress data from radio signals of keyboards or from indirectly viewing a CRT monitor on a dull surface.

      No windows and Faraday cubicles is the only way to go ...

    181. Re:I can think of a few by Anonymous Coward · · Score: 0

      ...and let ME say that you have a really cold job.

    182. Re:I can think of a few by kirillian · · Score: 1
      I was helping my fiance and her roommate set up their wireless network in their apartment. Not counting the wireless router that I was configuring, there were 8 different wireless SSIDs being broadcast.
      • 4 of them were completely unauthenticated (with names like: linksys, etc...meaning they probably never bothered to set up their router at all).
      • 2 of them were WEP
      • 1 was secured only with a username/password
      • (1) only one seemed to be secure

      Just a random sampling of wireless networks. Obviously, there is no need to point out that the networks which did NOT broadcast an SSID would not have even shown up in Vista's wireless network list (I was using the roommate's laptop to configure the router).

      Just a random sampling of wireless networks available in a single apartment building. It should also be noted that all 8 had strong signals, and the building was located at least 100ft. from any other habitable building, so, it's certainly possible that all of the networks were being broadcast from inside the apartment building.

    183. Re:I can think of a few by EastCoastSurfer · · Score: 1

      Excuse me for saying so, but I think that your employer may be a bit out of date with the technology that is currently available.

      Not really. All offices already have multiple wired connections. Going wireless doesn't buy anyone anything except to add one more potential security hole.

      All HDs are already encrypted with a TrueCrypt type of product.

    184. Re:I can think of a few by Anonymous Coward · · Score: 0

      Obscure and impossible-to-distinguish? You must be color blind. Either that or using the wrong manufacturer of cable.

    185. Re:I can think of a few by digitalunity · · Score: 1

      I used to work in an office with about 220 employees. Approximately 40 of them were laptop users and I can say from experience that wireless just doesn't make any sense for a large group of users in a confined space.

      Network congestion was a real problem with so many people trying to share the same AP. I'm sure there could have been more efficient ways to divvy up the bandwidth, such as assigning people into groups to use different AP's, but that would be a pain in the ass.

      Ethernet still wins on most metrics that matter, including bandwidth, latency and security.

      --
      You can't legislate goodness. Let each to his own destiny, by will of his freely made choices.
    186. Re:I can think of a few by digitalunity · · Score: 1

      Not to throw another monkey wrench in this or anything, but a lot of corporate users are using Checkpoint VPN software which to my knowledge is all based on PKI.

      --
      You can't legislate goodness. Let each to his own destiny, by will of his freely made choices.
    187. Re:I can think of a few by Anonymous Coward · · Score: 0

      this is a point i have tried to make to many people for whom i have set up networks for and yet man insist wireless is simply better, personally i think its unreliable and irritating and should be avoided whenever possible.

    188. Re:I can think of a few by CantGetAUserName · · Score: 1

      Because to even get at my wired network you need to break into the premises, that's why.

      Also, 54Mb/s (or whatever the standard's up to this week) isn't too great when it's shared between 40 people. With wired, they get 1Gb/s. Each. (Yes I know, up to the limits of the server they're connecting to, factoring in that you can't get 100% utilisation ove the link, etc, etc, etc)

      Ad

      --
      Semper en excreta sumus solum profundum
    189. Re:I can think of a few by Bigjeff5 · · Score: 1

      Most (and by most, I mean the vast majority) wireless networks don't use WPA2, which has yet to be broken (beyond brute force, which can be mitigated). Even worse than that, the last statistic I heard was that most networks that are secured are secured with WEP key encryption (couldn't find a recent stat, but most networks I see are WEP or WPA/TKIP). WEP is so breakable, it's about as bad as taking the front door of your house down and then putting up a sign that says "Un-authorized access prohibited" in place of it. It's rediculously insecure.

      WEP has been insecure for years, and WPA PSK and WPA/WPA2 TKIP have both been broken, how long will WPA2's AES encryption hold out? It's already breakable with brute force, it just takes a while, and the only real defense is a long, complex key. How long until that is untenable? Or some flaw in the implementation itself is found?

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    190. Re:I can think of a few by Darinbob · · Score: 1

      Forget the company and the IT department: most users are too clueless to know not to connect to the wrong access point. Many have computers set up to automatically connect to the nearest AP, so they can continue to work on their presentations at Starbuck's, the hotel lobby, the airport, the train, the parking lot, etc.

    191. Re:I can think of a few by DMUTPeregrine · · Score: 1

      That depends upon the site. If you got nice big channels installed cable runs are easy. If your building has bad properties for wireless propagation you'll need lots more access points, and the cable runs to them. Also, wired switches are cheaper than wireless APs. Thus, in some cases, it may be cheaper to go wired. Especially for Desktop machines.

      --
      Not a sentence!
    192. Re:I can think of a few by julesh · · Score: 1

      You are still going to need ethernet to connect all the wireless access points together.

      Well, sure, but if that's all you're doing with it, you're unlikely to be bothered if the cost of a 16-port switch is suddenly in the $5,000 dollar range, 'cause you aren't going to need many of them.

    193. Re:I can think of a few by kelnos · · Score: 1

      I'm already sitting on a small mountain of cheaply-obtained networking gear which will keep me set for life.

      That's assuming state-of-the-art doesn't vastly outstrip the performance of your "set for life" equipment in the next 20 years.

      As someone who works for a company that sells wired and wireless networking equipment, I've come to realise just how unreliable WLAN equipment is. I have three computers at my desk right now, two of them laptops. Everything is wired.

      On the other hand, at home, I'm always wireless. Go figure.

      --
      Xfce: Lighter than some, heavier than others. Just right.
    194. Re:I can think of a few by fullmetal55 · · Score: 1

      I know i'm late to the party here, but I have to ask you one question...

      Do you REALLY think that that admin's who have poor security on their wired networks are going to become smarter and have strong security on their wireless networks?

      The unsecure wired networks of the world are run by people who are either lazy or less worried about break-ins. either through false optimism in security through obscurity or "why would they attack us we have nothing worth stealing" those are the same mentality of people who would use WEP as the only security on their wireless networks. People who implement strong security on wireless also are the kind who implement strong security on their wired networks. even simple security of keeping wiring closets locked and unused ports unpatched.

      Chapter 1 of any security book I've read is always, ALWAYS about physical security to the site, without a lock on the door all other security measures are just a matter of time to crack. wireless negates that initial step of security. physical security is no longer an obstacle that needs to be compromised. they skip that step right to step 2 and start with the hacking other forms of security.

      To me relying on wireless security is like relying on the club and removable faceplate on your car stereo to prevent your car being broken into. (leaving the door unlocked) Now those things along with a locked door, increase the chance of the thief moving on to the next target. thus making you less of a target.

      Also what about uptime? I've never seen a wireless network with very good uptime. especially with sustained connections. if the move to all wireless removing all wires is a good thing, what about server uptime? It also leaves you wide open for other kinds of DOS attacks, I'm pretty sure it wouldn't be all that difficult for someone to build a box that transmits excessive garbage radio signals that's capable of disrupting wireless communications. Heck EMI from my 9 year old CRT TV makes my wireless on my PS3 drop out when it's only 15 ft away from the AP...

      It's a little harder to disrupt a wired network in that way.

    195. Re:I can think of a few by Anonymous Coward · · Score: 0

      You will be looking for rogue transmitters and APs in the area of your network

      That doesn't help against rogue transmitters off-site, for example at a cafeteria which is frequented by many employees, or near the home of an employee. If an employee takes his laptop off-site, you can not prevent connection attempts to these rogue access points.

      You won't advertise your SSID on a secure wireless network

      Yes, you will. It is unavoidable. What you mean is that you will not broadcast the SSID in beacon frames. That just breaks things and doesn't help security, because all other frames still have the SSID in the clear. In fact, it causes Windows clients to broadcast the SSID: They can't know if they're near their network without the SSID in the AP beacons, so they have to actively scan for it. Thus turning off the SSID in the beacon frames reliably causes all your laptops to continuously identify themselves as devices with access to your network.

      MAC filters

      That's annoying, but no real obstacle to an attacker. MAC addresses can be changed to fit the expectations of the network, like all other addresses.

      You won't see people attempt to authenticate to you, because you won't have the right IDs

      Correct, but only if you do not rely on public certificate authorities or at least configure the clients to only accept specific certificates. Otherwise an attacker might use some other certificate issued by the CA. The admin must understand how PKI works to create a secure system.

      Anyway, the recorded authentication attempts will still not be reusable, so the attacker can only play man in the middle right then and there, as long as he can forward the traffic to the expected network, which means he needs access to the network. Since gaining access was the point of the exercise, the attempt ends here... except if the network uses an unsafe authentication protocol inside an anonymous outer tunnel.

    196. Re:I can think of a few by fyrewulff · · Score: 1

      Not broadcasting a SSID is about as useful as painting over your address number on the outside of your house/building.

      --
      "We need to get over this notion, that, for Apple to win... Microsoft must lose." - Steve Jobs, 1997
    197. Re:I can think of a few by ribo-bailey · · Score: 1

      Surely you jest.

    198. Re:I can think of a few by seifried · · Score: 1

      Desktop sales are down, laptop sales are up, most companies I know issue a laptop as the desktop machine (because then you can work pretty much anywhere).

    199. Re:I can think of a few by rezalas · · Score: 1

      That is a fairly baseless comparison considering you know the addresses of the homes surrounding you, whereas you have no clue what the SSID is. If you don't know what the SSID is, you can't spoof it. You might as well say that buying a new car is as useless as breathing to obtain oxygen. It makes no damn sense.

    200. Re:I can think of a few by fyrewulff · · Score: 2, Funny

      No, because people can still see your network (house). SSID being turned off is like standing outside your painted-over-address house and yelling "I'M NOT HERE".

      --
      "We need to get over this notion, that, for Apple to win... Microsoft must lose." - Steve Jobs, 1997
    201. Re:I can think of a few by rezalas · · Score: 1

      The idea isn't to hide the existance of the network, it is to hide the details. In this, hiding the SSID does the job just fine when coupled with other security measures.

    202. Re:I can think of a few by anonymousNR · · Score: 0

      yeah better stay away from him he has got a goatse link in his signature.

      --
      -- It is the mark of an educated mind to be able to entertain a thought without accepting it. -- Aristotle
    203. Re:I can think of a few by Ungrounded+Lightning · · Score: 1

      We don't need wires for privacy. We have WEP, which provides equivalent security, wirelessly. Stop living in the past.

      Absolutely!

      "Wired Equivalent of Privacy" is about as secure as running Ethernet lines from your switch out to all the nearby parking places and mounting an RJ jack at each one.

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    204. Re:I can think of a few by Ungrounded+Lightning · · Score: 1

      Surely you jest.

      Yep. The poster jests.

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    205. Re:I can think of a few by notNeilCasey · · Score: 1

      Is the ability to use both frequencies available only on the newest models? I have a lot of 2.4GHz interference where I am (Manhattan) which I have bypassed by using my Airport Extreme in 5GHz 802.11n/a mode. This is great for my main box and my laptop, but it means that my phone can't connect to my network anymore (It doesn't support 802.11a either). My Airport Extreme is about 2 years old, it's the one that has 802.11n but only 100Mbps Ethernet. Am I out of luck?

      My Airport Extreme has the following radio options:

      • 802.11n (802.11b/g compatible)
      • 802.11n only (2.4GHz)
      • 802.11n (802.11a compatible)
      • 802.11n only (5 GHz)
    206. Re:I can think of a few by barzok · · Score: 1

      Cables will always be faster (I'm comparing *tomorrow's* cables, with *tomorrow's* wired networks, so sit down and put your trousers back on) than WiFi

      802.11g is 5X faster than my RoadRunner connection, and I don't do heavy file transfers on my "internal" network. This is typical for most home users. Cables may be faster than wireless, but once I hit that cablemodem, there's no difference.

    207. Re:I can think of a few by mrbcs · · Score: 1

      green, green, orange, blue, blue, orange, brown, brown
      white one first
      canuck
      obvious?

      --
      I'm not anti-social, I'm anti-idiot.
    208. Re:I can think of a few by DaemonDazz · · Score: 1

      Nice :)

      -VK5LBJ

    209. Re:I can think of a few by DaemonDazz · · Score: 1

      Not quite, the blue pair is polarity reversed compared to the others:

      w/green, green, w/orange, blue, w/blue, orange, w/brown, brown

    210. Re:I can think of a few by tyrione · · Score: 1

      Hell, most laptops ship with gigabit ethernet cards any more. How fast is Wireless N now? And how ubiquitous is it? Is there a gigabit wireless on the horizon? Compare today's wired to tomorrows wireless, and wired is still faster.

      They don't ship with cards. They ship with it built-in.

    211. Re:I can think of a few by COMON$ · · Score: 1
      well there used to be a paragraph in there regarding the ssl attacks as of recent, however I was just referencing MITM, I assumed you would look it up. Here is a better article.

      http://www.securityfocus.com/brief/910 or better http://securitytube.net/SSL-MITM-Attack-Over-Wireless-video.aspx SSL MITM attacks were recently (first quarter 2009 is when I found out) declared a simple attack.

      --
      CS: It is all sink or swim...oh and did I mention there are sharks in that water?
    212. Re:I can think of a few by Anonymous Coward · · Score: 0

      Wikipedia:
      IEEE 802.11n is a proposed amendment to the IEEE 802.11-2007 wireless networking standard to significantly improve network throughput over previous standards, such as 802.11b and 802.11g, with a significant increase in the maximum raw (PHY) data rate from 54 Mbit/s to a maximum of 600 Mbit/s. The current state of the art supports a PHY rate of 450 Mbit/s, with the use of 3 spatial streams at a channel width of 40 MHz[1]. Depending on the environment, this may translate into a user throughput (TCP/IP) of 110 Mbit/s.

      "Cables will always be faster (I'm comparing *tomorrow's* cables, with *tomorrow's* wired networks, so sit down and put your trousers back on) than WiFi"

      Even if you compare today's cables with today's WiFi, it's still much faster to use cables. Show me a wireless connection, even an experimental one, that you can run a terabit of data through per second (Fiber optic and DWDM are the keywords here).

    213. Re:I can think of a few by E1v!$ · · Score: 1

      Going back to a hub architecture
      Cancer..

    214. Re:I can think of a few by Anonymous Coward · · Score: 0

      How is what you said different from what he said?

    215. Re:I can think of a few by Anonymous Coward · · Score: 0

      You really don't know much about wireless networks, do you! If it goes over the air someone can hack it. They can break wired connections too, but because of physical barriers, wiretapping has always been harder than eavesdropping. It just is. I don't need security on my lan (its just me with two or three other computers). With wifi (and I have one), a single person *NEEDS SECURITY*!

    216. Re:I can think of a few by DaemonDazz · · Score: 1

      I said that in the first line of my reply. What he said is

      w/green, green, w/orage, w/blue, blue, orange, w/brown, brown

      Which has the blue pair with reversed polarity.

    217. Re:I can think of a few by Anonymous Coward · · Score: 0

      Yeah, apartment building security isn't really the topic of this article. The only data these people have that are worth keeping secret are the videos in which they have sex with their engaged roommates, but let's face it, you'll find out sooner or later anyway.

    218. Re:I can think of a few by Anonymous Coward · · Score: 0

      What he said is:

      green, green, orange, blue, blue, orange, brown, brown
      white one first

      That seems to me to be a way to remember which wire goes to pin 1, not that the first occurrence of each colour should be the white wire. Most people know the coloured and white wires alternate.

    219. Re:I can think of a few by Anonymous Coward · · Score: 1, Funny

      That's just careless. What if some passer-by wanders by and hops on your wireless connection?

    220. Re:I can think of a few by Winckle · · Score: 1

      Yeah it's only on the newest model.

    221. Re:I can think of a few by lowen · · Score: 1

      Fiber is used for all interbuilding links, and some intrabuilding links where the length is over 100m. The Cat5e/Cat6 is to the workstation.

      We have about 75 strand miles of fiber in the ground now, linking a dozen or so buildings with 100Base-FX and 1000Base-SX/LX. A couple of random OC12 ATM multimode links round it out, since those are too long for 1000Base-LX even with mode-conditioning cords, but the bandwidth needed to be more than 100Mb/s.

      We even have singlemode fiber to the two 26 meter radio telescopes' feed enclosures, for RF transmission and control, but that's mostly for lightning resistance.

    222. Re:I can think of a few by lowen · · Score: 1

      The formaldehyde absorption line at 4829.66MHz is pretty close to the low end of the UNII band at 5180MHz; even with only 40mW of power at that frequency, and taking into account the pattern, gain, and sidelobe rejection of the antennas, it is possible to desense the front end, filling in the absorption feature.

      If it were an emission line (such as hydrogen at 1420) it wouldn't be as big of a deal. For instance, the methanol line at ~12GHz isn't impacted quite as much by Ku band geostationary satellites as you might think; however, the second harmonic of the upper range of the 802.11a spectrum (5.8GHz) is too close for comfort.

      See http://www.astrosurf.com/luxorion/radioastronomy-lines.htm for a small list of interesting spectral lines.

    223. Re:I can think of a few by lowen · · Score: 1

      Not at this time, unfortunately.

    224. Re:I can think of a few by Anonymous Coward · · Score: 0

      Bingo!

      Because of security concerns my employer does not and will never have (that I can see) wireless access to the network.

      It's just too large of a security risk when you have any sort of sensitive information floating around.

      SECURITY: It's called a VLAN. I have over 70 on the network that I manage. Look it up. Cisco IOS makes it easy as possible....

    225. Re:I can think of a few by Strider-BG · · Score: 1

      Except almost no one implements "hardened wired connections". Do you run crypto on your wired network? Do you require 802.1x auth on your wired network? Do you you encase all the cabling in pressure-alarmed conduit? Do you perform Functional Compartmentalization where network access is limited on a per-user basis? Almost no one does these things - most of them are non-trivial to do with wired networks. All I have to do is pay a janitor a few bucks to plug something into a wired port and bingo, I have full network access.

      Wireless on the other hand has auth and crypto built in so while sniffing is trivial, if you're running 802.11i it doesn't matter. If you're worried about what happens when it reaches the AP, some wireless vendors keep the traffic encrypted all the way back to a controller in the Data Center. There are no crypto keys or user data on the AP so if someone were to steal it or gain access to the cable behind it they would only get encrypted data. Then add in some vendor's built-in ICSA firewall and you can easily perform Functional Compartmentalization on a per-user basis regardless of user location.

      The wireless world has moved on from the old WEP days regarding security. There is still the jamming DoS attack vulnerabilities but many people have mitigated or just accepted them in exchange for the huge productivity gains and cost savings.

    226. Re:I can think of a few by Anonymous Coward · · Score: 0

      Your real wrong here. I set up secure networks for companies. Yes SSL and VPNs are very safe. Why? They change their keys faster than you can break them. So running a cracking program against them is like pissing in the wind. On the other hand WPA and all other methods of encryption for wireless use a single passphrase that doesn't change or expire. so you might have to sit in the parking lot for a few hours but the network can be had. From the parking lot.

      Then you have the issue that wireless is a radio. They should call it "Radio Internet" then people might catch on that the signal and the data are floating around in the air for anyone to listen to just like an FM radio. Even from the parking lot.

      I'll almost certainly have a much easier time sneaking in and plugging in than I will trying to break WPA or better.

      Yea right. First you have to get past the guard. Then you need the access card and a PIN number. Then the "Man Trap" which you need the right finger print to get out of. Then the cameras are watching AND recording you ass.

      So you got that far and plugged into the network. You just set off the network monitor with a strange MAC address I know what port you are on and I have called the guard who has now put a .45 in your ear.

      So plugging in is easier?

      I do pen testing for a living. I find it such a joy to find a wireless access point on the network I am about to crack. I don't need to find access to the inside of the building or try to get around firewalls, VPNs and such. I've hidden APs on site so I could later come back from the parking lot.

      Ever heard of "Airsnort"? Great tool.

      When we do put in an AP for say Customers to access the Internet. They are physically segregated on a separate network going ONLY! to the public network. Its all those wires and switches that keep it safe. You can't access the company network from it. If the wire doesn't go there you can't get there.

      WPA and WEP only serve one use. The keep honest people honest and maybe a warm fuzzy feeling thinking you are safe.

      We once did an audit for and Investment company. (Goddamn theives) The manager went into rant he didn't need it. That he took care of the network security and it was safe. (He was asked what training he had and he said none. He had read NetworkWorld every month.)

      Yes first place I looked there was an AP shining from the parking lot. Within 20 mins. I was in and within the hour I owned the network. The managers password was "IAMGod" I downloaded images of him and his boy friend in some "interesting" poses. I also downloaded the "Second Set" of books the company was using and 2 gigs of other company data. I did give the images ONLY to the manager who freaked out when he saw what I had.

      The corporate office REALLY freaked when they saw the second set of books and I told them that according to the SEC I was to report this.

      Then the banking bubble busted and they are no longer. I am glad to. I have never met a group of bigger assholes in my life.

    227. Re:I can think of a few by Zero__Kelvin · · Score: 1

      "Because I can hook onto an improperly secured wireless network from the car park.

      There, I fixed that for you.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    228. Re:I can think of a few by Reapman · · Score: 1

      "Do you you encase all the cabling in pressure-alarmed conduit?" Do you encase your wireless bits in pressure-alarmed conduit? Oh wait, you can't! What kind of argument is this? Oh and um you must realize it's quite trivial to lock down unused ports right? I can do intrusion detection, encryption, and locking down of the network to specific devices quite easily too. If your going to implement 802.1x on a wireless network why not do it on a wired network throw in some VPN encryption and gain the security of BOTH?

      I sense someones been going to a few too many tech presentations put on by salesmen... there isn't a security "feature" of wireless that wired doesn't already have an equivalent or better of. however the actual physical means of transporting the data can never ever be as secure. As long as the bits are floating in the air vs a cable it's over.

      Every technology has holes in security and vulnerabilities will be found, that's a given. I'd rather some guy have to go into a wiring closet and get his face plastered all over security cameras and possibly finger prints then have him take advantage of a 0-day flaw by just driving by my building. Wireless has it's uses, and in some places makes more sense, but to improve security? That's the best joke I've heard all month.

    229. Re:I can think of a few by Chabil+Ha' · · Score: 1

      we have excess wireless capacity, but our wires are filled

      And what magic gives network access to the APs?

      The marginal cost of the smaller upgrade in APs would be greater than running more line, because as network access demand increases, the additional marginal bandwidth your APs are going to provide won't give you the lift you need.

      --
      We're all hypocrites. We all have hidden parts, it's the contrast between them that make us more a hypocrite than others
    230. Re:I can think of a few by Helix666 · · Score: 1

      Thankyou, I do try. :)

      In fact, I'm very trying... ;)

      --
      Oh, the irony... "Anonymous Coward: If you have nothing to hide, you have nothing to fear!"
    231. Re:I can think of a few by dargaud · · Score: 1

      Well, no, I was working for either the french or the italian polar expeditions, but I changed job 2 years ago and am no longer associated with Antarctica. They still want me to go back there though, apparently having difficulty finding new recruits. I wonder why C;-)

      --
      Non-Linux Penguins ?
    232. Re:I can think of a few by Anonymous Coward · · Score: 0

      To cut down some BS.

      "You won't advertise your SSID on a secure wireless network, so this won't work."
      This is, as has been said before, rather pointless. If the attacker has any sort of skill it won't matter (and you don't need to protect yourself from the ones without skill).

      "You'll be using a 512bit encryption scheme or better, as well as MAC filters."
      Encryption is nice. MAC filters however are totally pointless as you only need to sniff the traffic to get a valid MAC address.

      "Also, you will probably have a lamb transmitter as bait for someone who knows enough to attack you but not enough to know its a trap."
      Baaah, bah. Uh?

      "Also, since you are sitting in the parking lot, you probably wont have as good a transmit level as the real transmitters"
      Who says you have to play nice and follow the regulations for output levels? Amps are pretty easy to build.

    233. Re:I can think of a few by EvilBudMan · · Score: 1

      I don't think demand will increase. Decrease is what we are seeing. Only stuff that breaks at this point will be replaced.

      There ain't no magic. We just have a wireless access point that could probably take 5 users at 50 meg per second or even 20 at 10 meg per second would be OK in this case AND we have it. The microwave can zap it though but that is about it. We are isolated.

      It works and is sunk cost. It's not being used. The wire is currently being used. I'm talking about buying a laptop the next time the a computer breaks. Then they can use either wired or wireless. It's handy to have a computer where the customer is going to be for sales purposes.

      That's about all I can say. Just saying wired vs. wireless vote: depends.

    234. Re:I can think of a few by bandmassa · · Score: 1

      price! You can buy a LOT of wire for the price of a wifi router.

      --
      "I hope you like Guinness, Sir. I find it a refreshing substitute for, er... food." Col. Jack O'Neil, SG-1
    235. Re:I can think of a few by Chris+Burke · · Score: 1

      The smart thing to do is just not broadcast your SSID in the first place.

      *shrug* While that's a sensible thing to do (and I do it), it will make no difference in your security if your network is properly secured, and it will not make up for any deficiency in your security if it isn't.

      At the end of the day, your packets are in the air. You don't *need* to spoof an SSID to see those packets, that just makes it easier. But either way, the wireless "channel" itself is insecure, and your wireless security must be predicated on that fact. With no security, or WEP, you're going to get pwned whether you broadcast SSID or not, and with WPA/WPA2 you're secure either way.

      So basically it's just to prevent the most casual of hackers (or innocent laptop set to 'wander' mode) from jumping on your unsecured network. That was my "security" for the month before I figured out how to get WPA2 working with my wireless card. Now it's on mostly just for completeness. I don't allow random computers on my network, so why would I broadcast the name?

      --

      The enemies of Democracy are
    236. Re:I can think of a few by Anonymous Coward · · Score: 0

      And the second thing that went wrong was your Intel graphics driver?

  2. wireless only? by JWSmythe · · Score: 5, Insightful

        What a pile of marketing crap.

        A network is tailored to the site and needs of the customer. Where they say 50% to 90% of a client's network ports are unused, does that mean that they've had users migrating from wired to wireless, or did they overpurchase on projected growth?

        Using this logic, oh my gosh, even my company must be going wireless. We have a few hundred unused 10baseT connections on our Catalyst 5500. Know why? Because we original projected them to be used for VoIP. When they finally settled on the VoIP provider, they insisted that we use their switches. We simply haven't pulled the extra cards, because we don't have blanks to fill the holes, and we can't find anyone in the office who would prefer to be on an 10Mb/s line, rather than a 100Mb/s line.

        WiFi is great and all. I'm on it right now as I write this. But, that doesn't mean it's the end all of networking. When I want true reliable speeds, I go to where there's a network jack, and plug in.

        At work, every desk is wired. There are AP's, but people use the wired jacks. Why? Because they appreciate the reliability. There's no random interference. No cell phone, microwave over, or transient event on another floor is going to disturb their connection. I appreciate that they use the wired connections. At any given point, I may have 4 or 5 users on wireless, and a few hundred devices on wired. I can wonder "are those wireless connections legitimate?" If a user has a problem, I'm looking at physical facts (is their cable plugged in. Did they damage the cable) rather than random environmental facts (Is there a thunderstorm? Did someone fire up a new yet not well shielded microwave two floors down?). I had to trace a wireless problem once, and it turned out to be a small portable radio in the corner of someone's office. It was turned off, but it was effectively blocking all RF for about 10 feet. Once I found it, I unplugged it, and the wireless problems there went away.

        Right now, I'm sitting at home, away from the office. There are a number of devices that are connected wirelessly. Why? Because I haven't run wires to the places that we may use it. The back porch, where I'm sitting right now, smoking and writing, doesn't have an ethernet drop. The PS3 doesn't have a drop, so it gets it's updates wirelessly. But every machine I depend on for work has an ethernet cable going to a Cisco Catalyst switch. Ask me why a connection goes weird on a wired port, and I can find the problem (it happens rarely, but ...) Ask me why my connection drops on the back porch and it's a little harder to find the answer.

        We had a problem on the back porch a while back. As it turned out, a neighbor just got DSL, and their AP was on the same channel as ours. Since I was closer to theirs, it interfered with the signal. I spend 20 minutes listening to channels to find the least used spectrum, and changed over. What happens when someone else comes up on that channel? I'll run out of channels eventually. But hey, it's ok, I can set up more AP's with more power, and drown them out. Then it's their problem, right?

    --
    Serious? Seriousness is well above my pay grade.
    1. Re:wireless only? by Moryath · · Score: 3, Insightful

      No shit.

      Upside of Wireless: no wire.

      Downsides of Wireless:
      - It is slower than Wired, unless you've somehow got an old 10-Mbit connection through the wall and an 802.11g AP in 30 feet of your location..
      - It is inevitably more finicky than wired.
      - It is inevitably more power-consumptive than wired.
      - It is much more vulnerable to interference - and JUST ABOUT EVERY HOUSEHOLD DEVICE puts out interference. I get a lousier wireless signal (yeah, I have an 802.11g station in my house because I have a laptop and Wii to hook through it) whenever someone turns on the washer or dryer, or the microwave. In both spectra that 802.11 specs use, there are "cordless phones" and cell phones interfering as well. And like parent poster said, if someone else sets up an AP on the same channel you use, even more problems can result.

      I ran a 100ft length of Cat6 from my gigabit switch upstairs, through the ductwork and into my living room, for a reason. Between the Xbox360, PS3, and my home DVR box, I'm not about to try to leave things to the unreliability of "wireless."

    2. Re:wireless only? by SoupGuru · · Score: 1

      I'm not sure what companies he's been to but the ones I've seen use the crap out of wired networking.

      I mean, my god, how big of a mess would it be to manage a 500 person company with 300 wireless users? I hard enough tracking down wired network gremlins...

      No, I think those companies that he's talking about exist in the fantasy world inside his head.

      --
      What doesn't kill you only delays the inevitable
    3. Re:wireless only? by Anonymous Coward · · Score: 0

      You hard enough English.

    4. Re:wireless only? by dkleinsc · · Score: 2, Interesting

      The entire article can be summarized as follows:

      "Buy wireless equipment now! Everyone else is doing it!"

      --
      I am officially gone from /. Long live http://www.soylentnews.com/
    5. Re:wireless only? by Amouth · · Score: 2, Interesting

      Wireless while nice isn't the end all be all UNLESS you licence the spectrum from the FCC and have the right to shut down any interferance.

      I recently had problems where i live.. in my house i can pick up 11 OTHER wifi networks.. several neighbors just switched over to N routers with that lovely mimo (yaeee lets eat channels because we can)

      anyways.. running my normall wrt45g at 5ft channels 4-10 are completely useless due to the amount of interferance from the neighboring networks.

      i ended up butting dd-wrt on it switching to chan 2 right next to the control chan for the n's and bosting the tx power from 70mw to 220mw

      now at 5ft works fine at 50ft it is useable - oustide the house i can't even see the network.

      oh and the wifi bridge to my garage with a cisco 800 wifi AP.. yea.. you should see the crap it is spewing out..

      any company that things relying on the 2.4ghz spectrum for actual reliable work.. i want their names.. in 6 months i will drop by and drop off a qoute to run hardwires

      --
      '...if only "Jumping to a Conclusion" was an event in the Olympics.'
    6. Re:wireless only? by Anonymous Coward · · Score: 0

      If a user has a problem, I'm looking at physical facts (is their cable plugged in. Did they damage the cable) rather than random environmental facts (Is there a thunderstorm? Did someone fire up a new yet not well shielded microwave two floors down?). I had to trace a wireless problem once, and it turned out to be a small portable radio in the corner of someone's office. It was turned off, but it was effectively blocking all RF for about 10 feet. Once I found it, I unplugged it, and the wireless problems there went away.

      Strangely enough, you can (rarely) get the same problems with unshielded CAT5. I once had a network printer die when they moved the cable path over an air-conditioning coil in the floor. Move the cable in another direction, and the problem went away.

    7. Re:wireless only? by Amouth · · Score: 1

      i figured it out - i think he ment to mention he is talking about cellphone providers..

      --
      '...if only "Jumping to a Conclusion" was an event in the Olympics.'
    8. Re:wireless only? by JWSmythe · · Score: 1

          That's a given of wiring networks. :) You can get the same problem running it over florescent lights in a drop ceiling. I've seen plenty that were run there, but I've only seen it cause a problem once. I complain about it a lot though, because it's bad practice.

      --
      Serious? Seriousness is well above my pay grade.
    9. Re:wireless only? by jafiwam · · Score: 1

      There are 44 wireless access points that I can detect from my apartment living room. One is a business across the interstate (DLOS).

      Only two are unsecured.

      At my last abode, there were only about 5 unsecured. One person bought a router with wireless and never used it, but was spraying interference all over the place. The SSID was a generic one, so I looked up the manual, logged in with the default password and shut off their wireless. It never came back, so I assume they used a wire and never noticed.

      NOT the type of crap I want to be dealing with trying to do actual business.

    10. Re:wireless only? by Amouth · · Score: 4, Interesting

      having fun with unsecured wifi.. a good freind of mine lived in college appartments. noticing plenty of unsecured networks in the appartment building he took a small linux box stuck 3 or 4 can't remember exactly wifi cards in it and set it up for his lan in a bridged mode to round robin route his local nat'ed lan.. for any single download it was normal cable modem speeds .. for bit torrent wow was that fast..

      he did that for 3 years.. kinda sad when you think about it

      --
      '...if only "Jumping to a Conclusion" was an event in the Olympics.'
    11. Re:wireless only? by fishbowl · · Score: 1

      "A network is tailored to the site and needs of the customer. Where they say 50% to 90% of a client's network ports are unused, does that mean that they've had users migrating from wired to wireless, or did they overpurchase on projected growth?"

      Or does it mean they laid off that much of the staff?

      --
      -fb Everything not expressly forbidden is now mandatory.
    12. Re:wireless only? by JWSmythe · · Score: 1

          I was quietly leaving that one off.. Layoffs are bad for morale.

      --
      Serious? Seriousness is well above my pay grade.
    13. Re:wireless only? by Reziac · · Score: 1

      This is true even with my ISP which is ALL fixed wireless. It's a one-man band and the owner loves to talk about his work... one of the problems he mentioned is an ongoing feud with another fixed-wireless company -- in some areas they keep drowning out each other's signals, because it's all grab-as-you-can, rather than owned spectrum.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    14. Re:wireless only? by ILongForDarkness · · Score: 1

      What a pile of marketing crap.

      A network is tailored to the site and needs of the customer. Where they say 50% to 90% of a client's network ports are unused, does that mean that they've had users migrating from wired to wireless, or did they overpurchase on projected growth?

      Exactly, or they purposely have more ports than people will use so that they can move computers around and still find a port in convenient reach.

      Wireless has good enough speed for email and casual browsing but it won't work for every company. At my work people are moving files around that are several gigabits in size. Start sharing even a wireless n connection with a room full of people and your life would start to suck quickly.

    15. Re:wireless only? by godrik · · Score: 1

      No guy you are wrong. Wireless is the futur, the Ethernet 2.0 CAN'T YOU SEE?

  3. Not time yet by Maclir · · Score: 5, Insightful

    Until I can get 1G bps that cannot be easily hacked into - wire has a future.

    1. Re:Not time yet by Anonymous Coward · · Score: 0

      "Easily hacked into" is only true of WEP. Anything post-WPA with a long, random key is as secure as anything (since the sun will burn out before a brute force attack finds the key). But yeah, if you're copying large files around the network, even 802.11n is a poor substitute for gigabit ethernet.

    2. Re:Not time yet by owlstead · · Score: 1

      That's not entirely the case. In a large operation you'll have to keep that key safe over tens or hundreds of users, many who will have devices they want to connect (illegally or not). How do you know the key hasn't leaked? You are of course right about the brute force attack, but there are other things to consider.

    3. Re:Not time yet by spinkham · · Score: 1

      We're not sure about that yet. WPA-AES is designed to be bulletproof, but WPA-TKIP is only a really good band-aid on a really bungled protocol. There have been only minor cracks in WPA-TKIP so far, but it's far from certain that it will stand up forever...

      --
      Blessed are the pessimists, for they have made backups.
    4. Re:Not time yet by fuzzyfuzzyfungus · · Score: 1

      You'd be nuts to use pre-shared keys with more than a few users and devices. Any serious setup with use RADIUS or something, typically tied to the same LDAP backend that handles centralized login authentication and/or to smartcard certificates. That's a gigantic pile of complexity, and (sometimes vendor specific/proprietary) wrinkles and other horrors, which is why ordinary routers mean "WPA-PSK" when they say "WPA"; but it does address the "people writing the key on post-its and handing it out to visitors" problem.

    5. Re:Not time yet by Chabil+Ha' · · Score: 1

      What the heck are using 1Gps for?! You can't be watching high def content on that wire! You can't be moving multi-GB files in a few minutes, not hours! Luddite!

      Ethernet has a long, bright future ahead of it until wireless becomes more secure, less latent, and packs higher throughput. I ran CAT6 copper throughout my house just to do all the above things. Wireless? Just for the Internet connectivity for the lappy.

      --
      We're all hypocrites. We all have hidden parts, it's the contrast between them that make us more a hypocrite than others
    6. Re:Not time yet by Anonymous Coward · · Score: 0

      Remember: WEP means Wireless Equivalent.

      Wire itself is not so sure everyone believes...
      Think of some "cleaning personnel" or friend of a worker putting some computer/wireless device/whatever into an unused port one day (and removing it at end of shift/next day/...).
      Or - more menacing - putting some small device that logs everything into the cable to the server or the companie's CEO computer (working as a bridge).

      Sure, that's more easy to detect than a sniffer 3 blocks away, but who looks everyday that all ports that should be unused *are* and no "additional bridge" is in the network?

      For really secure wire you'd need to encrypt all that goes over it, e.g. with SSL. Do you?

      If you're paranoid or having a large installation you should use RADIUS anyway and then you can use VPN runnels if you really want for the wireless users :D

    7. Re:Not time yet by wastedlife · · Score: 1

      In a large operation, you should not be using pre-shared keys. That is fucking retarded and there is no reason for it. You should have some sort of LDAP anyway (Active Directory, OpenLDAP, whatever), so use WPA or WPA2 with RADIUS. Everyone uses their regular user login or a certificate to connect to the wireless. If you have a problem with users having insecure/stolen passwords, it is a user problem, not wireless. However, I still would recommend wired over wireless for the speed and reliability. Wireless is mostly nice for the workers with laptops that move around a lot, especially between buildings. It is also nice to have a isolated, guest wireless for when you have people from outside your company coming in to do presentations. For that, setup an Access Point on a different VLAN (or physically separate, if you are paranoid enough) with a preshared-key that is rotated often. No desktops should ever need wireless, ever.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    8. Re:Not time yet by beheaderaswp · · Score: 2, Informative

      That's a nice sentiment... And I agree.

      But I think the main point has to do with networking fundamentals. Wireless is a virtual shared media. All clients on a node share the same amount of bandwidth. 54Mb can start looking pretty slow with ten busy clients.

      Modern switched wired networks segregate traffic between nodes, rather than working as a broadcast type network (wireless/thinnet). So you have a massive performance advantage by using wired networks. A quality 24 port 100Mb switch has an theoretical aggregate capacity of 4800Mb assuming all ports are used to capacity in full-duplex mode (And the backplane can handle it), 2400Mb in half duplex mode, where as a 54Mb wireless network only has 54Mb which is split up between every node on the network. The math is a no brainer. Even with real world non theoretical numbers, the performance difference is staggering.

      Wired is the only way to go in a production environment with *supplemental* wireless access for roaming and mobile users.

      One of the other advantages of cat5/e is it's use of inductive reactance to mitigate EM interference. The gauged twist in the pairs increases signal quality, but also mitigates the collapse of EM fields (mostly from local lightning strikes) and the unbridled voltage they create (which is directed right into your network electronics and connected nodes). Proper grounding aside- it doesn't help if the voltage is already in the circuitry.

      Go 100% wireless in your office, and enjoy damage from all those wireless antennas picking up current from a collapsing EM field.

      Every spring, we lose a couple of laptops, one or two wireless nodes, and a wireless camera or two. It's always after a storm and it's never the wired equipment.

      --
      Another consultant who stuck it out.

      "We are the Priests, of the Temples of Syrinx..."
    9. Re:Not time yet by averner · · Score: 1

      1 Gbps should be enough for anyone?

      --
      Member of the 7 Digit UID Club
    10. Re: Not time yet by Anonymous Coward · · Score: 0

      Make that 10 gbps, because wired ethernet is up to 10 gigabits per second now, with 100 GIGAbits per second on the roadmap.

      That's twisted pair, too.

      Yeah, wireless is getting faster. But so is wired. And when I'm WIRED that bandwidth is ALL MINE.

      "Not time yet"?

      Hah!

      More like "Not time EVER".

      Because whatever technology that's used to improve wireless bandwidth can also be applied to wired bandwidth, which is inherently faster anyway.

    11. Re:Not time yet by jafiwam · · Score: 1

      In other words wireless comes with yet another shitload of back end and expense and pain in the ass when scaled up.

      Not really selling the concept there buster.

      Wires are probably already in place and fast enough and good enough, and the existing off the shelf switch... now you want to add all that shit? Just so someone can move their laptop around on the desk?

    12. Re:Not time yet by csnydermvpsoft · · Score: 1

      Every spring, we lose a couple of laptops, one or two wireless nodes, and a wireless camera or two. It's always after a storm and it's never the wired equipment.

      It sounds to me like you need a wireless surge protector. I'm sure Monster Cable makes one.

    13. Re:Not time yet by wastedlife · · Score: 1

      You would need all of that to setup good network security on the wired end as well, it is just that wireless has no physical security at all, whereas wired requires someone to be there and be plugged in. I'm also against the concept in the article, and the only uses for wireless that I find were stated in the previous post:

      Wireless is mostly nice for the workers with laptops that move around a lot, especially between buildings. It is also nice to have a isolated, guest wireless for when you have people from outside your company coming in to do presentations.

      It is pretty useless otherwise in an organization. And when the higher-ups want to push wireless, you need to explain to them the costs(including labor) of all that shit and tell them to compare it to the uses.

      Anyway, my original point was that if you ARE implementing wireless in an organization, you should already have the authentication in place with some form of LDAP, you just need to configure your APs and client machines to use it. No-one except home users should be using pre-shared keys, and even they may need to implement RADIUS if I understand a new law that was discussed here before.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    14. Re:Not time yet by MozeeToby · · Score: 1

      By the time you can have that, you'll be able to get 10G bps over a wired connection, what's more you'll probably need (or at least want) it as applications eat up more and more bandwidth.

    15. Re:Not time yet by Anonymous Coward · · Score: 0

      Until I can get 1G bps that cannot be easily hacked into - wire has a future.

      And the past - we'd all still be neanderthals if Galactica was wireless!

    16. Re:Not time yet by beheaderaswp · · Score: 1

      Um?

      A surge protector doesn't help you if the EM field collapses on the wireless antenna.

      At that point the charge created by the collapse goes directly *through* your electronics to the nearest ground. Which equals *poof* to your electronics.

      A surge protector will protect you through a clamp circuit if the surge comes through the outlet.

      --
      Another consultant who stuck it out.

      "We are the Priests, of the Temples of Syrinx..."
  4. WTF is right-sizing? by Allicorn · · Score: 4, Funny

    'There's definitely a right-sizing going on,' says Michael King, research director, mobile and wireless, for Gartner.

    Unfortunately, his idiotic terminology renders his words inaudible to me. :-/

    --
    OMG!!! Ponies!!!
    1. Re:WTF is right-sizing? by rolfwind · · Score: 1

      Right-sizing is usually the evolution of the word down-sizing on the euphemism treadmill:
      http://www.wordspy.com/words/rightsizing.asp

      I guess the guy is just using it wrong.

    2. Re:WTF is right-sizing? by SashaMan · · Score: 4, Funny

      As he works for Gartner, I would wonder if I had been transported to an alternate universe if he were spewing anything BESIDES idiotic terminology.

    3. Re:WTF is right-sizing? by DoofusOfDeath · · Score: 1

      'There's definitely a right-sizing going on,' says Michael King, research director, mobile and wireless, for Gartner.

      Unfortunately, his idiotic terminology renders his words inaudible to me. :-/

      What do you mean, "unfortunately"?

    4. Re:WTF is right-sizing? by Anonymous Coward · · Score: 0

      iawtc. "Gartner" is a word warning you that you're about to get really bad advice at really great expense.

    5. Re:WTF is right-sizing? by Darinbob · · Score: 1

      The word "Gartner" convinced me he had nothing worthwhile to say before I read it.

  5. What a bunch of Drivel.... by tekiegreg · · Score: 5, Insightful
    Wireless has it's pros, I have 3 laptops at home so all I use is 802.11n. But I can think of many reasons Ethernet will prevail.
    • Speed, I have yet to see wireless reliably hit 100mbps in any configuration. Sure some of the standards out there quote that speed but they must be in a clean room with no other radio interference or walls between them or their access point. Let's just forget about 1gbps+ speeds for now with Wireless
    • Security, even with the best security wireless has to offer, you're just a smidge more vulnerable than with Wired access. It may not be that much, but I've done work with the U.S. Millitary and I never recall seeing a WAP at a sensitive location...
    • Reliability, less noise on a wired line than a wireless connection, any time someone uses the wrong wireless phone and zap, your connection is zero....try that with a wire. For the love of god don't even think of putting a server on wireless...

    That's what I've got now and I'm sure more is coming...

    --
    ...in bed
    1. Re:What a bunch of Drivel.... by jo42 · · Score: 1

      Wireless 802.11 is great when you have less than a handful of machines around the house within 50-100 ft of the access point. And less than a handful of access points around you. Wireless 802.11 is a really bad joke when you have tens of machines and tens of access points. Wireless is also a total joke speed-wise when you try to transfer large files between two wireless machines.

      In a business, or a corporate environment, wired is the way to go with a few access points for the whiny upper-managements types and their laptops/notebooks/netbooks.

    2. Re:What a bunch of Drivel.... by JWSmythe · · Score: 2, Interesting

      > For the love of god don't even think of putting a server on wireless...

          Oddly enough, when 802.11g came out, we entertained the thought of adding new servers wirelessly. We were serious for the first ... umm ... 30 seconds. It would have been neat, and reduced cabling, but where we actually wanted them to work well, it wasn't an acceptable solution.

          I have put AP's in a rack before, but it was so I could fire up my laptop, and be assigned an IP. Sitting 6' from the rack, with clear line of sight, it wasn't really a good option, so we strung a cable from the closest switch to the workbench. Oh my gosh, like 20' of wire (to keep it out of the way). :)

      --
      Serious? Seriousness is well above my pay grade.
    3. Re:What a bunch of Drivel.... by Fross · · Score: 2, Informative

      I'll contest the security thing. Disclaimer: I work for a government agency and we're not allowed any wireless access either, for the same reason, but I'm not sure I agree.

      Wireless networks automatically have an extra level of protection over wired networks, their authentication. Wired networks do not require authentication just to receive a connection in the same way. So this is a toss up between physical access and security. A wireless connection may be vulnerable to attack from someone on the floor below with a tin of pringles and lax enough sysadmins to not notice someone unusual in, but a wired attack is more vulnerable to someone socially engineering their entrance. Get connected to a port, and it's like you broke the access point already.

      Suffice to say, both approaches have distinct vulnerabilities, and I'd not be comfortable to say one is definitely worse than the other. I think the security concerns around wifi are anecdotal, and the policies in place mostly due to the relevant organisations being monolithic and resistant to change.

    4. Re:What a bunch of Drivel.... by wastedlife · · Score: 1

      Yes, reducing 1 cable per server would have been worth that huge drop in speed and reliability. Now all you need is wireless power, wireless KVM, wireless management interface, and wireless eSATA/SCSI/FiberChannel storage connections and you can have a completely wire-free server rack...

      Yes I realize you are joking, but look at it like an extreme continuation of the article's premise. What good is a wireless net connection for a desktop when it has so many other cables? Wireless only makes sense if your machine is mobile, and you are actually mobile with it and don't just keep the laptop on your desk.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    5. Re:What a bunch of Drivel.... by Anonymous Coward · · Score: 0

      For about 3 months, me and my roommate did not have an internet connection, and we needed our server to be online, so we hacked 2 of our neighbors wireless and bridged the two with DD-WRT with two AP's and used Multi-WAN in Clarckconnect. Needless to say the connection was terrible but it worked.

    6. Re:What a bunch of Drivel.... by wastedlife · · Score: 3, Informative

      This is false.

      Wireless does not require authentication. It only has authentication if you configure it with WPA/WPA2 and RADIUS. This is called 802.1x or EAP. In fact, you can configure your wired switches with 802.1x and RADIUS and get the same result, no connection without authentication. Just because many places do not use 802.1x on their wired LAN doesn't mean it isn't there.

      Also, if the encryption is broken with wireless, I believe you can "listen" to the traffic from the other wireless clients and use that to steal information(I am almost certain this is the case with pre-shared keys, but I am not so sure with WPA/WPA2 RADIUS). With wired, even unencrypted, you can only listen to network traffic that is broadcast or directed to your MAC address. There are attacks where you can convince other computers that you are the router or you can DoS the switch into hub mode, but those attacks can be tricky to pull off and may depend on the network equipment used.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    7. Re:What a bunch of Drivel.... by JWSmythe · · Score: 1

          Actually, we were serious. For almost 30 seconds. :) It then broke down into an hour of laughing at the possibilities. :)

          Thank god it was a non-tech person who suggested it. I promised to entertain any idea. This one didn't just get rejected, it gave us plenty to laugh at.

          Assuming wireless did give you full advertised speed, we had another problem. An AP with a 100Mb/s uplink, and a couple dozen servers with 54Mb/s wireless connections were obviously a problem. Well, we had a GigE uplink, and frequently used the capacity. So, we'd have to set up an AP for each server, with each AP on a network port. In the end, it became very obvious to the non-technical person that we weren't going to do it, but we kept going on the idea anyways. :) ... and then you could bridge in the next rack ... and resell service to other customer racks ... and put a high power transmitter on, and a high gain antenna, and bounce the signal off the moon to service China!

          Trust me, it got worse as we went on. :)

      --
      Serious? Seriousness is well above my pay grade.
    8. Re:What a bunch of Drivel.... by maraist · · Score: 1

      I'm still a huge proponent of desktops (not enough horsepower in laptops for my work needs), but many of the business types about me have tremendous liquidity with their laptops. Instead of having you come to their office, they can bring their laptop to you to show the problem.. They bring their laptops into the conference room, etc. When using an external USB hub, then you only really have 3 wires to plug/unplug (external monitor(optional), power and USB hub(optional)). Plus their desk is cleaner, no external speakers, possibly no external keyboard (I still require a split-keyboard for carpel tunnel).

      Finally, for me to setup shop at home to continue development as lots of overhead. W/ a laptop (assuming one had enough horsepower), I could pick up on the subway, during dinner, etc.

      My point is that to the average business employee, the laptop yields added productivity that warrants the reduction in speed/security (including the possibility of lost data). Note w/ lost data, this is best-practices - Require strong passwords on the local machine.. Use a disk-encryption software like truecrypt. Ideally have a thumbprint for rapid recovery from screen-saver. Ideally, you're a large enough shop that you can simply ghost a secure configuration, and it takes less than an hour to configure a machine to replace a lost one or for a new employee. I've seen this done at big institutions, and have been somewhat impressed.

      --
      -Michael
    9. Re:What a bunch of Drivel.... by tekiegreg · · Score: 1

      No, they're less secure in the fact that I can sit there and sniff wireless packets all day without joining the network or even advertise that I'm out there, sure they're encrypted but unlike wired where I physically have to tap into a jack, wireless just needs to be in proximity. Something far easier to do.

      The best enryption techniques for wireless have proven to be unbreakable so far, but you're a smidge more vulnerable when I can listen, as opposed to when I can't listen. I can't attempt to decrypt a packet that isn't there...

      --
      ...in bed
    10. Re:What a bunch of Drivel.... by Glendale2x · · Score: 1

      My personal best with wireless was about 20Mb/s of UDP in one direction with iperf. Trying to xmit/rcv at the same time cut it down further, using TCP even more, etc. This is totally not a scientific result, just me playing around one day wondering how fast I could get wireless to go.

      --
      this is my sig
    11. Re:What a bunch of Drivel.... by Anonymous Coward · · Score: 0

      Wireless has it's pros, I have 3 laptops at home so all I use is 802.11n. But I can think of many reasons Ethernet will prevail.

      • Security, even with the best security wireless has to offer, you're just a smidge more vulnerable than with Wired access. It may not be that much, but I've done work with the U.S. Millitary and I never recall seeing a WAP at a sensitive location...

      That's what I've got now and I'm sure more is coming...

      You may not have, but ive seen and deployed a wireless SIPR network.

    12. Re:What a bunch of Drivel.... by greyhueofdoubt · · Score: 1

      >>but I've done work with the U.S. Millitary and I never recall seeing a WAP at a sensitive location...

      (I work for the DoD and have been around let's say)

      SIPRnet will never be wireless. The physical layer of wired SIPRnet is already highly secure, not to mention authentication protocols. Access to terminals, and even the rooms that house terminals, is very restricted.

      NIPRnet, on the other hand, since it is designed to carry data below secret-classification, can be connected to through wifi. The portable devices (such as laptops with repair tech data) must still connect via the same authentication/handshake as wired machines. And even on NIPRnet, you will not be able to plug in any computer and get a connection. Everything passes through comm and is scrutinized. I have a large, and as-yet unused, wifi access point right next to my office. At least one base in Iraq has a base-wide wifi network, but to be honest I don't know if it was connected to NIPRnet or the internet since I never used it.

      *the S and the N stand for secret and non-secret, for those unfamiliar with the 'nets.

      -b

      --
      No offense, but I've stopped responding to AC's.
    13. Re:What a bunch of Drivel.... by Anonymous Coward · · Score: 0

      I beg to differ, look up secnet 11 or 54.

      It may not say it online but its rated for up to TS.

    14. Re:What a bunch of Drivel.... by greyhueofdoubt · · Score: 1

      That may be; I'm just saying that operationally the SIPRnet stays physically separate from all other networks. Maybe in C&C facilities there is a need for ultra-secure wireless but I've never seen it. You need SIPRnet? You go into the locked SIPRnet room.

      -b

      --
      No offense, but I've stopped responding to AC's.
  6. What? by Hadlock · · Score: 1

    Yes, I'll give them that wifi is a great convenience, especially if you have multiple teenagers living in the house with their assorted laptops. It's perfect for web browsing and browsing the iTunes music store, but anyone who plays a lot of online games, or is simply a power user can tell you, nothing beats a wired connection to the matrix in terms of latency and data throughput. 802.11g (that's 90% of the market right) is still spotty with most consumer grade hardware beyond 20 feet. My netbook may never use it's eithernet port, but you can be damn sure my desktop is going to stay wired for the foreseeable future.

    --
    moox. for a new generation.
    1. Re:What? by jedidiah · · Score: 1

      The big thing in new construction was "media rooms". Soon it will be home networking.

      The current recession wont last forever and when it ends you will have homebuilders
      building new houses again and trying to come up with low cost easy to add extras that
      will pad their margins.

      Home networking is PERFECT for that. You even see this already in some of the less
      generic builders. You can get all sorts of crazy stuff and not just cat5/cat6.

      --
      A Pirate and a Puritan look the same on a balance sheet.
    2. Re:What? by Hadlock · · Score: 1

      Cat 5 is super easy to install. Most people I know who have lived in their homes for more than 5 years (and continue to plan living in them) have already wired their homes for cat5e in at least all of the bedrooms + kitchen, living room and home office. Most of the new homes in my area (Dallas) are usually sold with it installed already. Surround sound wiring at build time is still hard to find in the $350,000 range.

      --
      moox. for a new generation.
  7. I develop wireless networks for a living by stevedcc · · Score: 5, Insightful

    And as they say, people who know radio use wires.

    --
    todo - The developer's equivalent of confession: "Forgive me Father, for I have sinned..."
    1. Re:I develop wireless networks for a living by Icegryphon · · Score: 1

      Interesting quote.

    2. Re:I develop wireless networks for a living by ianalis · · Score: 1

      I'm with the wireless technology group and our group uses the most number of wires in the lab. Go figure :)

    3. Re:I develop wireless networks for a living by Phroggy · · Score: 1

      Sort of like how Slashdotters oppose electronic voting machines. We know how stuff works, and why it's a bad idea!

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    4. Re:I develop wireless networks for a living by Anonymous Coward · · Score: 0

      Yup.

    5. Re:I develop wireless networks for a living by Anonymous Coward · · Score: 0

      Thats ok. I have worked with NSA/DOD and you could not get me on wireless except to cruise the web in http mode (i.e. nothing that should be secured).

  8. Our company has got wireless laptop as standar by Anonymous Coward · · Score: 0

    And you know what ? Even if the wireless is availbale everywhere nobody use it as a standard. Firstly because you can't work 8h with a laptop without recharging it, so all coworker have a docking station. And instead of overusing the wireless, everybody from their docking station use a LAN port. Seeing how the room are open floor with 8 to 12 people, and wireless is a shared bandwidth it would also not be a good trade off. But if you are going to a meeting then it is OK for 1h or 2h. Even with desktop since that bandwidth is shared it would make no sense to go wireless only, especially if you already have the infrastructure and a FIX desktop. Just run a cable : not much cost.

  9. Too much interference by A5un · · Score: 2, Interesting

    My own anecdote, everytime I'm doing heavy transfer with 802.11, my wireless keyboard and mouse get wonky. Mind you, this is with my HTPC and the keyboard and mouse(pad) is a bit far away, but they both work flawlessly as soon as I throw in good ol' ethernet cable to the HTPC. So yeah, wired ethernet will be here for a while.

  10. No wire = big headache by mark-t · · Score: 5, Insightful
    Ever seen a $150 brick before?

    Try doing a firmware update on your router over wifi and you'll see why this proposal is a bad idea.

    1. Re:No wire = big headache by tekiegreg · · Score: 1

      Heh, I learned that one the hard way :-)

      --
      ...in bed
    2. Re:No wire = big headache by Jeff+DeMaagd · · Score: 1

      You also need the backhaul capacity, setting up wireless-only repeaters really raises the congestion. I also find that if I want a wireless network device, often the best way to do it is to hook it up to a wired network that has a wireless access point.

    3. Re:No wire = big headache by LanMan04 · · Score: 1

      TFTP to the rescue!

      --
      With the first link, the chain is forged.
    4. Re:No wire = big headache by noidentity · · Score: 1

      Ever seen a $150 brick before? Try doing a firmware update on your router over wifi and you'll see why this proposal is a bad idea.

      Whatever. I'm updating my WiFi's firmware right at this moment and having no pro

  11. Speed by pzs · · Score: 4, Insightful

    I'm guessing the bandwidth of wired connections will always be one step ahead of wireless. Since I regularly have to transfer multi-gigabyte files from network storage, I'll be sticking with whatever makes this process as fast as possible, thanks, even if that does disagree with the prognosis of these moronic "future trend" people.

    1. Re:Speed by Fross · · Score: 1

      I regularly have to transfer multi-gigabyte files from network storage

      That's some fancy words for talking about watching porn on your TV.

  12. Ethernet cabling at home by GargamelSpaceman · · Score: 1

    At home, I have 2 desktop computers. I have a wireless router that came with my ISP, but I shut the wireless functionality down, and connect directly to the ethernet ports.

    If I had a laptop, I might want to sit on the couch and compute, but I wonder what the bandwidth difference between wireless and cabled? I've used wireless and it seems zippy, but I've never done any serious downloading with it.

    Also, I'm on the fence about whether it's better security wise to close off your wireless router entirely as I have done, or open it up entirely so that any activity traceable to your ISP account will be attributable to anybody who happened to warjam the signal. I don't do anything much that's illegal, but if I did, I'd definately want plausable deniability. Would have to get a laptop and warjam my own signal, or better yet someone elses.

    --
    ...
    1. Re:Ethernet cabling at home by vux984 · · Score: 2, Informative

      If I had a laptop, I might want to sit on the couch and compute, but I wonder what the bandwidth difference between wireless and cabled? I've used wireless and it seems zippy, but I've never done any serious downloading with it.

      downloading something to or from from another PC on the lan? massive differences.
      downloading something to or from the internet? virtually no difference, the internet is the bottleneck.

    2. Re:Ethernet cabling at home by Anonymous Coward · · Score: 0

      Just keep it locked down until you plan on doing something illegal. It's not like the ISP or the police keep listings of who maintains an open AP. As long as you have an open AP when they come knocking (with a cleared-out log), nobody will be the wiser. (Not that the plausible deniability is going to be that much of a defence when they've confiscated all your computer equipment.

    3. Re:Ethernet cabling at home by pak9rabid · · Score: 2, Informative

      If I had a laptop, I might want to sit on the couch and compute, but I wonder what the bandwidth difference between wireless and cabled? I've used wireless and it seems zippy, but I've never done any serious downloading with it.

      In my experience transferring large files over the network, wired transfers at about 10 MB/sec (100 Mbit connection), vs about 2.5-3 MB/sec using the 802.11g wireless connection. My rule of thumb at home is if I'm doing light browsing on my laptop and want to be mobile, I just wifi it. If I need to do some serious data transferring it's wired all the way.

    4. Re:Ethernet cabling at home by JWSmythe · · Score: 2, Interesting

          Here's a little side note on that.

          With default settings from a few providers (who I won't name), if they have a 5 character SSID, it's trivial to find the key. It's just math. Well, more math than I'm willing to do, but there are tools line.

          For giggles, I left my laptop on with netstumbler running on the drive home from work the other day. Over 90% of the AP's were encrypted. About 90% of the encrypted had the default 5 character SSID. So, all these "protected" AP's really aren't.

          For proof of the concept, I know someone who tried the keys on a few AP's in his apartment building. The ones with a decent signal strength, he got in, and was able to sniff their traffic. Sure, they're encrypted, but they don't do per-client isolation.

          Your plausible deniability may be a defense in court (but most likely not). If caught for nasty stuff, you will end up in court either way though, so I wouldn't gamble on it. Use a neighbor's unencrypted AP for bad things, not your own. :)

      --
      Serious? Seriousness is well above my pay grade.
    5. Re:Ethernet cabling at home by Maclir · · Score: 1

      Agree - in a home environment, wireless is great. I have one, sometimes two laptops, plus the Tivo DVR - and all work fine. But my desktop, print server and web / game server are wires in with Cat 5. Fundamental rule - there is no "one size fits all" solution - you choose from the available technologies the one(s) that meet your needs the best.

    6. Re:Ethernet cabling at home by Anonymous Coward · · Score: 0

      Use a neighbor's unencrypted AP for bad things, not your own. :)

      No, use your neighbor's encrypted AP and clone his MAC when he isn't there. Once the authorities have a donkey to ride, they won't even bother looking around. His locked down AP, his MAC, case closed.

    7. Re:Ethernet cabling at home by wastedlife · · Score: 1

      One problem with downloading over the internet is with reliability, try downloading VMWare server over a wireless link. They give you a 1-time session key to download, so no resuming, and it is well over 500 MB.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    8. Re:Ethernet cabling at home by GargamelSpaceman · · Score: 1

      Ya know, that's a good point. I don't lock down my wireless, I actually shut it off.

      --
      ...
    9. Re:Ethernet cabling at home by GargamelSpaceman · · Score: 1

      It's true, that you'd want true sterility when committing a crime that would get 'the man' really pissed at you, but there are other things, things you could be sued for rather than prosecuted for, that it might be good to have some plausable deniability against. I'm thinking that with an open wireless AP ( or even one that was openable so you could claim you opened it when the activity occured or just recently shut it off ) and running a filesystem similar to rubberhose filesystem then you might be OK. What if, for instance you wanted to critisize Scientology, without the hassle of the inevitable litigation? Sure you'd win, but who wants to deal with courts and lawyers?

      I'm not sure if the fifth amendment extends to civil stuff anyway.. But couldn't you plead the fifth if you didn't know WHETHER the secret you are keeping was a crime? Until you had the advice a lawyer at least? I'm thinking that if the fifth doesn't extend to civil action then you'd have no right to consult a lawyer to determine if something was indeed a crime... That's why it would make sense for the fifth to extend to civil stuff, but then sense usually has nothing to do with it...

      I wouldn't trust Rubberhose or any such thing to be breakproof against the efforts of the government, but if there were ever a situation that cropped up where I could 'try' to depend on it to keep a secret, then I would depend on it and hope that it held up, as it might. It would give one a certain peace of mind to know that you were running rubberhose and owned an openable wireless ap. Go ahead and expose Tom Cruise as Xenu. You're armed with a reef of shit they'll have to wade through before they can even bother you.

      --
      ...
  13. practical limits? by Lord+Ender · · Score: 4, Insightful

    802.11N is awesome. It's faster than 100Mb ethernet even in real world tests. But does it scale well even in dense office buildings? In a cube-farm scenario, where there are computers every five meters in every direction in 3D space, is it really possible to get 100Mb speed?

    Security isn't there yet, either. Someone in the parking lot could still put up an access point which advertises itself as being part of your company network, and your users will connect to it. Doing it right is possible in theory (configure computers such that they will only connect to APs which have certificates issued by your company's PKI) but Windows doesn't allow you to lock down wireless in such a way.

    --
    A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    1. Re:practical limits? by Sique · · Score: 4, Informative

      And while you can have hundreds of parallel Gbit/sec cables running through the same building, each running at maximum speed, you can not have hundreds of parallel 802.11n-accesspoint each reaching maximum throughput at the same time.

      --
      .sig: Sique *sigh*
    2. Re:practical limits? by Anonymous Coward · · Score: 0

      Um.....I'm confused.

      Most 802.11N APs have only a 100Mbit ethernet connection....so how is 802.11N faster then 100Mbit ethernet?

      Even if it's wireless to wireless(2 devices on one AP), it's a shared spectrium space. So both wireless devices will only get 1/2.

      So yea, um comfused?????

    3. Re:practical limits? by wastedlife · · Score: 1

      Someone in the parking lot could still put up an access point which advertises itself as being part of your company network, and your users will connect to it.

      Not sure where you are getting your info from, but even Windows won't connect to insecure networks without you telling it to. Plus, if you configure the security for a network, it will not connect if the security is wrong or off on the access point.

      As far as speed and reliability goes, I definitely agree with you that wired is the way to go. 802.11 doesn't even have an official spec that works faster than 100 Mbps Ethernet, and even draft N will degrade rapidly as more clients connect (works more like a hub than a switch). Also, 1000 Mbps Ethernet is pretty much the standard now on workstations. I'd say it will be a long time before wireless reaches Gigabit.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    4. Re:practical limits? by Lord+Ender · · Score: 1

      "even Windows won't connect to insecure networks without you telling it to."

      Your confusion lies in the fact that you don't understand what the word "insecure" means in your above sentence.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    5. Re:practical limits? by Anonymous Coward · · Score: 0

      The only real way to lock down a building would be to have a FARADAY CAGE built into the structure of the buidling.

    6. Re:practical limits? by NVP_Radical_Dreamer · · Score: 1

      802.11N is awesome. It's faster than 100Mb ethernet even in real world tests. But does it scale well even in dense office buildings? In a cube-farm scenario, where there are computers every five meters in every direction in 3D space, is it really possible to get 100Mb speed?

      Security isn't there yet, either. Someone in the parking lot could still put up an access point which advertises itself as being part of your company network, and your users will connect to it. Doing it right is possible in theory (configure computers such that they will only connect to APs which have certificates issued by your company's PKI) but Windows doesn't allow you to lock down wireless in such a way.

      Don't forget that's 100mbps HALF duplex and shared amongst everyone using it. And even that's in a perfect world with no interference and no retransmits.

      --
      The best argument against democracy is a five-minute conversation with the average voter.

      - Winston Churchill
    7. Re:practical limits? by wastedlife · · Score: 1

      Then please post a link or shed some details on how you advertise an access point "as being part of your company network"?

      If your AP has a name that looks like it might be an open network that belongs to the company, and uninformed users attempt to connect to it, then there is a problem with users having too much control of their machines.

      If the AP has the same SSID as the company wireless, but a different or no encryption, they will not connect. The workstations will have been configured to connect to the company network using some form of EAP with RADIUS. They will not connect using anything else. They can be locked down this way using security policies, either group or local.

      If you try to configure the same security as the company wireless, your AP would need to be configured against the RADIUS server as a client with a shared secret. If you are able to get the shared secret and have your access point on the same IP address as another AP, or make configuration the RADIUS server, I'm afraid theres not much to stop you. At that point the network has been attacked to the point of wireless being the network admin's least concern.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    8. Re:practical limits? by maraist · · Score: 0

      There might be a compression component to the protocol (I know modems did). So this is guaranteed to be useless if transferring video/compressed files, and only marginally useful w/ binary files.

      --
      -Michael
    9. Re:practical limits? by PitaBred · · Score: 1

      I know my 5 year old laptop came with a gigabit ethernet card, and an 8-port gigabit switch is only $40 any more. Wireless will always be well behind wired in speed, and only get further away the more people you connect to each AP.

    10. Re:practical limits? by Lord+Ender · · Score: 1

      The Windows XP wireless software simply lacks the features to prevent MITM. The sort of configuration needed would be something like:

      "If you see our company's access points, always connect to them if they have valid certificates signed by the company's PKI. If you see them but they have invalid or no certificates, do not connect to anything at all. If you do not see our company's access points, let the user select which AP to use."

      If there's a way to do this, fill me in. Because otherwise, anybody could put up a fake AP and MITM away your company's credentials. Furthermore, preventing users from selecting APs under all circumstances is not on option, as wifi is now the standard means of getting online while at hotels and such.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    11. Re:practical limits? by wastedlife · · Score: 1

      Hmm, I see your point. If you configure it in group policy, it works like this:

      Computer can be set to not automatically associate to any networks, except those configured.

      Computer can be assigned preferred networks by the domain controller. These cannot be overridden, so the settings for those SSIDs cannot be changed. You configure the authentication, and by default it will validate the certificate of the RADIUS server. The user cannot change the configuration settings of that network, and they cannot connect to any access points with different security. They may try, but it will fail, assuming you configured your end correctly.

      So that still leaves "uninformed user connects to an open network that looks like it belongs to the company". The SSID has to be different, but the person doing the attack could change an I for a 1 or something that is difficult to detect. This can only be fixed by either preventing users from changing wifi settings, or informing the users. So there is a flaw here. One possible saving grace is that I do not think user-defined preferred access points can be connected to when within range of a domain-assigned access point. I've never tried giving a non-domain network preference over a domain network and do not have the chance at the moment.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
    12. Re:practical limits? by Lord+Ender · · Score: 1

      I'm a security guy, not an AD admin, so maybe you could help me clarify this: You're saying it's possible to configure (via GP) Windows to automatically associate to the company wifi whenever it is in range, rejecting association if there is no valid certificate? And when the company wifi is not in range, users would be allowed to select any AP from a list?

      I was told by our AD people this is not possible. Perhaps they just don't know how to do it? What happens if an AP with your company's SSID pops up, but uses no certificate?

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    13. Re:practical limits? by wastedlife · · Score: 1

      I am a network guy myself, and am only an MCSE in training. However, I am in the process of migrating a school district to WPA with EAP-TLS from WEP with EAP-TLS, deployed WPA with PEAP to another district (they did not want to deal with PKI), and am in the process of migrating and expanding the wireless of another district from WEP Shared to WPA/WPA2 with PEAP.

      The AP itself is not secured with a certificate. You secure the RADIUS server with a certificate from your PKI, and both the AP and the RADIUS server will be configured to talk to one-another with a shared-secret key. In AD group policy, you configure a wireless security policy. When you define preferred networks to connect to, the user cannot change the settings for that SSID. If you properly configure EAP-TLS or PEAP, the client will not connect if it cannot validate the RADIUS server's certificate, and the RADIUS server will not let the client connect if it cannot validate the client's certificate (EAP-TLS or PEAP) or AD credentials (PEAP, uses EAP-MS-CHAPv2 to autheticate).

      If the users have the rights to configure wireless settings, they can configure their own preferred networks, but cannot change the domain-supplied networks. Not even domain administrators can change that setting on the machine without assigning it through group policy. I am not sure, and can't check now, if users with proper rights can configure a non-domain network and give it higher priority. I'm also not sure if there is a threshold where they will switch to a non-domain network if it is closer than the domain preferred network.

      One main problem, and probably the reason your AD people said it is not possible, is that without Server Advance (or maybe it was Enterprise), you cannot automatically assign users a user certificate. So wireless would authenticate on the computer-level only(computer certificates can be assigned automatically, another group policy setting), or each user would have to manually retrieve and install their certificate on any machine they use in order to be able to connect to a wireless network requiring a user certificate. This is why many just use PEAP and MS-CHAPv2 to authenticate clients, but use the server certificate for the client to authenticate the server.

      --
      Said, "It's just like dice but it's got more sides And it tells me who lives and who dies"
  14. Power consumption: wired vs wifi by damn_registrars · · Score: 1

    I may be mistaken, but doesn't a system use less power on a wired network than on a wifi? That could make a good argument for keeping the wired networks around (along with the usual of course).

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:Power consumption: wired vs wifi by hey · · Score: 1

      It would be nice if laptops could power down the wifi port after a period of non-use.

    2. Re:Power consumption: wired vs wifi by Anonymous Coward · · Score: 0

      I have a Windows XP laptop that does power down the wireless port every minute. Even when it's fully in use. 10 seconds after each shutdown there is a friendly balloon in the bottom right corner informing me that a new wireless device has been found. This is all with 5/5 signal strength. I the end I pulled some more cat5.

    3. Re:Power consumption: wired vs wifi by Anonymous Coward · · Score: 0

      That's right, three are a subset of the other

    4. Re:Power consumption: wired vs wifi by JWSmythe · · Score: 1

      Mine isn't that bad, but I've seen it. Right now, it reports 48Mb/s "Very Good". Still, it disconnects randomly. Sometimes it doesn't want to talk to my AP any more. We have two here, and I'll find myself on the wrong one. I do different things between specific AP's, because of the machines that are physically attached to those segments. I gave up, and set one to manual, so I always connect to one, it just disconnects occasionally. I blame .... [spinning the wheel of excuses] .... solar flares.

      --
      Serious? Seriousness is well above my pay grade.
    5. Re:Power consumption: wired vs wifi by tepples · · Score: 1

      It would be nice if laptops could power down the wifi port after a period of non-use.

      You already can power off the radio on a lot of Wi-Fi devices. Some (such as the Acer Aspire one and PSP) put a switch on the outside of the machine; others (such as the ASUS Eee PC and Nintendo DS) handle it in software. Did you mean "disconnect from the AP after five minutes of no outgoing packets"?

    6. Re:Power consumption: wired vs wifi by godrik · · Score: 1

      well, most company do not even turn their 150Watt computer off for the week end. So I believe, the difference in power consumption is relevant for them. :) At home you usually use wireless because you don't want to have a wire, so there is no option.

    7. Re:Power consumption: wired vs wifi by Anonymous Coward · · Score: 0

      That's right, three are a subset of the other
      Wha? Wired versus wireless makes two. Somehow you claim that wireless is a subset of wired? Please extrapolate.

  15. Not a bloody chance by mrdoogee · · Score: 1

    As has already been said: Security, Bandwidth, and of course the obvious advantages of CSMS/CD over CSMA/CA.

    1. Re:Not a bloody chance by mrdoogee · · Score: 1

      Dammit. I hate this keyboard. It should have been "CSMA/CD" But you all already knew that.

    2. Re:Not a bloody chance by maraist · · Score: 1

      I've been arguing for wire mostly today, but I feel the need to qualify your assessment.

      Wired may have greater Security and Bandwith, but is less convenient. And more and more the security/BW is more than sufficient for most users, thus, the fact that a honda can do 90mph and a racecar can do 220mph is meaningless when you can't go over 85 w/o getting arrested. Therein the practicality of the honda v.s. the racecar is no-contest.

      And for the bandwidth issue, you're often limited by your ISP BW which is less than wireless. In an office where most local traffic are 5Meg word-files or maybe 20M worth of email-downloads, BW is no longer an issue.

      On the security side, certainly if you require pre-shared-certificates that aren't directly transmitted + pre-registered MAC-addresses, you can secure your network in wireless sufficiently.

      --
      -Michael
  16. What a great idea! by laejoh · · Score: 4, Funny

    I've already.#¼#éÃdj $Ã{sdNO CARRIER

    1. Re:What a great idea! by Anonymous Coward · · Score: 0

      ATDT*70,,

      Noob.

    2. Re:What a great idea! by MSDos-486 · · Score: 1

      hehehe

  17. Security by Anonymous Coward · · Score: 0

    Even if you have an unbreakable wireless network, I could still kill it by disrupting it. Wouldn't take much either.

  18. I can't wait to throw the wires out by Anonymous Coward · · Score: 0

    and replace them all with a mesh point-to-point selfguiding laser network.

  19. I'll go first! by santax · · Score: 1

    I agree, i'm cutting mine n

  20. More Advertising by gx5000 · · Score: 0, Offtopic

    'There's definitely a right-sizing going on,' says Michael King, research director, mobile and wireless, for Gartner.

    Why must we endure advertising on here ?
    There are so many reasons for Wireless to be a "Convenience" over a
    practical default it boggles the mind. I miss the good old days before the hype
    got the better or preogress....

    --
    End of Line.
  21. VoIP by mc1138 · · Score: 1

    I work for a company that has a fully integrated VoIP infrastructure, providing PoE enabled phones that jump to the desktop. We have no wireless to speak of either with no plans for a widespread implementation. I know you can go wireless with your phones, but do I really want to worry about a bunch of cordless phones?

  22. Wireless definitely has a future by Anonymous Coward · · Score: 0

    One of the best uses of a wireless router is to have it set up without a password in such a way that 1) it doesn't have actual internet access, and 2) every URL that's loaded via all possible domains leads to an offensive image hosted on your old box that was about to go to the dumpster.

    Other than that, I'm not really sure what other people are using it for.

    1. Re:Wireless definitely has a future by Sobrique · · Score: 1

      Oh I wouldn't put it that way. Wireless is a complementary tech to wired, not a replacement. Things like being able to actually move my laptop around the office and still get network access is very handy. Or indeed take it out into the garden. That's not to say it doesn't go back on the docking station, with the ethernet cable when I've finished, but it _is_ handy to have wireless network access in e.g. meeting rooms.

    2. Re:Wireless definitely has a future by JWSmythe · · Score: 1

          That's easy to do. Set up a Linux box as the only thing attached to the AP, set an iptables rule to redirect any :80 traffic to the machine, and then put a 404 error in to direct everyone to your offensive image.

          But that would be rude, and I'd never consider it. Except on Fridays. What day is today? :)

      --
      Serious? Seriousness is well above my pay grade.
  23. Can I have your switches, then? by jpedlow · · Score: 1

    Ok, when some vendor has a wireless router that can give each one of my workstations 1Gb/s, then we'll talk. But there's something to be said about having an INDIVIDUAL connection to each workstation, so we dont have to divide the total available bandwidth among our workstations. Also, even if we divided our workstations into the available wireless channels, we'd still have problems with bandwidth and interference. Oh, and interference? Turns out, the workplace I manage has cordless phones, microwaves, steel walls, concrete walls. I'd be really stoked to see a router that could reliably get through all of that for enterprise use.

  24. Hassle Free WiFi! by supernatendo · · Score: 1

    Sure! Get rid of Ethernet already and good riddance! Also don't waste money on any infrastructure that does anything more than WEP. Anything above WEP is just an over-priced feature. Especially since all of your employee's with laptops know the WPA2 Password anyways, and they are GREAT at keeping secrets! Oh and your controller simply relies on the registration of the MAC address and only people with no life know how to spoof those...

    Once you are totally wireless your network will be more advanced than the Pentagon! They are so old-school that they are still using physical cabling! Fiber optics yes but that is so 2005! Plus it is still such a hassle to have to plug in every single time! They wasted all of that tax-payer money when they couldve stuck with ethernet or just went WPA2 Wireless... Instead they keep muttering something about ethernet EMF emmissions or some such nonesense. Maybe they will finally become technologically savvy and switch to wireless too now that the stupid redneck Bush is out of office!

  25. 50-90% of hubs were probably unused pre Wifi by tekiegreg · · Score: 2, Insightful

    Think about it, most people tend to build large when building their networks to start. Or "Let's see we have a 4 port router for $x or an 8 port router for $x + $50, why don't we just buy the 8 port router and not have to come back later for another one as my network has only been growing?" I don't think WiFi changed this to any large extend as WiFi really has only liberated the laptops which never used many network jacks in the pre-wifi days to begin with...

    In conclusion I don't think that the advent of WiFi has anything to do with the loss of Network Jacks. If the jacks are looking emptier than before I'd think along the lines of:

    • You can do more with fewer servers these days, fewer network plugs in new organizations due to fewer servers
    • Employees tend to work at home more often now, eliminating the need for as many workstations
    • Your Employees may tend to have laptops, which even in the pre wifi Days weren't plugged in much to the network anyways (Modems or Floppy disks were the norm)

    And besides, who really cares how many jacks are open in your network....maybe you can disconnect a router or 2 and consolidate, save a watt or 2 of power at best.

    --
    ...in bed
  26. WHAT? by Archangel+Michael · · Score: 4, Insightful

    I know that a bunch of people are going to say "WTF" and all that, and I have to add my $.02 worth.

    What a CROCK of shit. While wireless is great for "casual" surfing and such, I sure wouldn't want it for anything other than that. And from experience, Wireless starts to really drop functionality as the number of users on the WAP goes up. More than about 5 or 10 devices being used on a WAP is just about useless (depending on usage). You might as well be on dialup at that point.

    I run into this kind of thinking all the time, and it drives me nuts. We have a guy throwing all sorts of wireless out on our campuses, and it sits mostly unused. And the wireless that IS used is almost useless because so many people are trying to use it at once it is slower old 10base hubs.

    Don't get me wrong, wireless has its place. My house is wireless, and I also have wired connections. I just wired my in-laws house (two computer household) because wireless was too slow for them and their needs. They now have gig wire network AND wireless in their house.

    Don't get me wrong, wireless has its place, as does wired lans. One has to know the needs, and design and engineer a system that suits the needs of those that are using it.

    --
    Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  27. Shared, not Switched by scubamage · · Score: 4, Insightful

    Wireless only runs in half duplex. That's reason enough to use wired.

    1. Re:Shared, not Switched by Andy+Dodd · · Score: 3, Informative

      Not only half duplex, but as you say in your post title (not the text), the resources are shared between all users within a physical area. Aggregate throughput drops quickly as the number of users on a WLAN increases.

      If we replaced our copper connections with WLAN at my company, the network would become effectively useless. Too many users.

      Another way to think of it is: For a typical user, even a 100Base-T wire to a switch will match even the latest and greatest MIMO high speed implementations (advertised 270-300, but in reality you'll be lucky to see 100 Mbps real world in a single direction).

      Once you go above 2-3 users, the switch connections win hands-down.

      Add gigabit into the mix (cheap nowadays) and wired wins by an even greater margin.

      --
      retrorocket.o not found, launch anyway?
    2. Re:Shared, not Switched by scubamage · · Score: 1

      Hams rock. Getting my license soon as I get my CCNA, I can imagine after passing all the ARRL certs getting a CCNA wireless cert will be a walk in the park.

    3. Re:Shared, not Switched by maraist · · Score: 1

      I love taking both sides of an argument...

      wireless network topology is no different than wired topology.. Namely there is a stated bandwidth, a stated congestion strategy, and the need to segment networks to provide local BW.

      Consider that switching is USLESS if all hosts connect to a common point (like a file-server, or the internet). Granted, you commonly have 50/50, so you get some parallelization.

      Namely, wireless has multiple channels.. So you put as many routers as you need in a given region (using only short-range modes), each on a different channel, and spacially separate such as to minimize interference. Ideally you can use dishes that direct radio-traffic in non-conflicting directions.. e.g. put 4 AP's in the center of the room facing outwards in different directions.

      You then specifically assign cube-farm A to SSID 1, cube-farm B to SSID 2, etc. Viola, pentuppling BW and concurrency.

      Just think back to thin-net and thick-net days. You had hubs and gateways (don't even remember hearing about switches back then). Granted you had a slightly different network topology issue.. Namely that w/in a gateway'd network, you had to bound the longest lag between any two possible points.. Even w/ the gateway, you had the issue of store-and-forward packet overflow. Man that was a fun homework assignment.

      --
      -Michael
    4. Re:Shared, not Switched by godrik · · Score: 1

      Consider that switching is USLESS if all hosts connect to a common point (like a file-server, or the internet)

      That is because the bottleneck is the network card (if not HD bandwidth) of the server and not the network. So you'll consider setting a second server up and then your argument fall.

      if the internet connection is faster than the internal network (connecting to fiber or something), switching still is useful.

      but, nice argument :)

  28. You funny Dr Jones by DigiShaman · · Score: 4, Insightful

    If you're an apartment dweller such as myself, you can forget about WiFi. The airspace is too crowded on all channels (1-11) which leaves me with dropped packets and a short range. Oh, and I have periods of total disconnect when my neighbor decides to use his/her circa 1980s microwave.

    Solution? I just run CAT5 along the floor baseboard from the router to my PC and PS3.

    --
    Life is not for the lazy.
    1. Re:You funny Dr Jones by WebmasterNeal · · Score: 1

      If you live in an apartment you shouldn't even need to purchase internet. Seems to me most of my neighbors are willing to give it to me for free :P

      --
      "During My Service In The United States Congress, I Took The Initiative In Creating The Internet." -Al Gore
  29. One word: by Franklin+Brauner · · Score: 2, Insightful

    Hotels.

    1. Re:One word: by Sique · · Score: 1

      All the hotels I was visiting recently had Wireless.

      --
      .sig: Sique *sigh*
    2. Re:One word: by supernatendo · · Score: 1

      I recommend you NEVER use hotel wifi unless you have absolutely NEVER used the laptop or ipod or netbook or PSP or DSi or whatever for viewing or transporting ANY personal information.

      Which means I never recomend the use of Free Wifi anywhere lol.

      Remove the Hdd and use a LiveCD, and for the love of pete do not go on any bank sites or put in any passwords on any social networking sites or email! Its the only way to know for sure.

      Also it makes me seriously wonder at the knowledgeably of people using Wireless cell phone internet...It is still just a radio signal folks!

    3. Re:One word: by caerwyn · · Score: 1

      With competent encryption this really isn't that big a deal- any reasonable system will prevent man-in-the-middle attacks, and once that's blocked and the whole stream is encrypted, there's not that much to worry about.

      --
      The ringing of the division bell has begun... -PF
  30. At home, I'll stick with wires by DomNF15 · · Score: 1

    I had just bought all the materials I need to wire my house up with cat6 and a gigabit switch, because I'm tired of getting kicked off of xboxlive when my wife decides to stream music over our shared wireless connection...

  31. 99% of the railroad tracks are unoccupied! by 140Mandak262Jamuna · · Score: 4, Insightful

    It is like the brand spanking new Harvard MBA starting to work for a railroad discovering, to his utter horror, that all the rolling stock in the railroad adds up to just 1/100 th of the track owned by the company. He smartly addresses the over inventory problem by tearing up and selling for scrap all the excess track!

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  32. Wireless electronics is like pipeless plumbing by MpVpRb · · Score: 1

    It works OK, and sometimes a little less than OK.

    If you REALLY need wireless, you put up with the limitations.

    But wired is always better.

    I see absolutely no reason for wireless where a computer sits on one desk all day. In that case, wired is better. If it is constantly on the move, wireless is necessary.

  33. Why should security be a reason? by Browzer · · Score: 1

    Bandwidth and interference/reliability are good enough reasons for me not to use WIFI when I don't have to.

    But, just because "security" is not (or weakly) configured out of the box, and a lot of users don't bother to read and learn how to configure their wifi device, why should security be a one of those reason (assuming WPA and higher) not to use wifi? Is there a new flaw with WPA (and higher? Yes I know about the TKIP weakness.

  34. Gartner by owlstead · · Score: 1

    It's from Gartner, so it's not true.

    I don't know if it's always the case, but the score is becoming increasingly worse. That maybe because I just see the "interesting" media releases from Gartner.

    But basically if I ever meet someone from Gartner that says I have to move right, you'll probably see me go straight, because I don't even trust them enough to predict I have to change direction.

  35. Until they by kannibul · · Score: 1

    Until they figure out how to implement Wireless PoE for VoIP Phone Systems...I don't see why anyone could say that wireless will replace copper.

    1. Re:Until they by Anonymous Coward · · Score: 0

      I'm there with you on that. We just installed 1200 PoE VoIP (Avaya - not my choice) phones. I just don't see the cables going away soon. Besides, the new PoE spec is supposed to power/charge our laptops and netbooks in the future.

  36. gaming? by Anonymous Coward · · Score: 0

    wired gaming = 90ms ping
    wireless gaming 400ms ping

    wireless has some work to do just yet.

  37. Wireless is only fine for casual use. PERIOD! by Chas · · Score: 4, Insightful

    This guy is a moron who's merely attempting to shill his crap.

    As others have already said.

    Wireless fails in a comparison of throughput.
    Wireless fails in a comparison of security.
    Wireless fails in a comparison of susceptibility to interference.

    If you're just sending e-mail and browsing por^H^H^the web, wireless is fine.

    If you're trying to maintain a sustained connection for things like database traffic, or a VPN connection, and being kicked in the balls by someone with electrified spiked boots is preferable.

    --


    Chas - The one, the only.
    THANK GOD!!!
  38. I am on a wifi-only network, and... by Anonymous Coward · · Score: 0

    ... I keep on pushing the powers that be to give me a cable, dammit. High packetloss, low availability is not my idea of a good uplink. And I'm not even in a developing country!

  39. where's the bandwidth going to come from by viralMeme · · Score: 1

    "A range of companies with wireless LANs are discovering that 50% to 90% or more of Ethernet ports now go unused, because Wi-Fi has become so prevalent"

    What happens when everyone moves to Wi-Fi and we end up with spectrum congestion

  40. When wireless becomes standard on desktop PCs by Alzheimers · · Score: 1

    This will only make sense when wireless becomes a standard throw-in option on Desktop PCs, the kind corporations order by the hundred from Dell or HP.

    Right now you're getting the on-board ethernet jack for (practically) nothing, and it's got one nice standard interface means plug-and-play is as easy as it gets. Compare DHCP to the wild and unpredictable mix of channels, SSIDs, WPA codes, and connection managers that wireless networking require and you'll see why corporate IT departments just don't want the headache associated with supporting wireless.

    If you know what GINA.DLL is and why Netgear sucks, then you'll appreciate why Ethernet will be around for a long time to come.

  41. Not entirely thought through by zigfreed · · Score: 1

    I question whether author buys batteries. One cable is typically cheaper than 8 AA batteries.

  42. I agree with Cisco, this is marketing trash talk by ljaszcza · · Score: 0

    In our business, wired predominates, we use gigabit ethernet for a bunch of reasons. 1) Reliability: We are in a old building, lots of steel and concrete. WiFi is a lot less reliable and a lot slower. I do use WiFi in places where we have mobile carts or where wire is hard to pull but WiFi remains a hassle. I see occasional dropouts, I have to put in and maintain multiple APs to cover poor signal regions. 2)Speed: We send many large files (medical images) during the work day. Gigabit wire handles these well, WiFi tends to choke. 3. Cost: Gigabit ethernet is built into every system/mobo, wireless is not. The concept of installing/maintaining all these APs and wireless cards is daunting in terms of my time and budget. Anyhow, this is just marketing spew from a marketing guy as far as I see. WiFi is complementary to our wired network, certainly not a replacement. I don't really see this changing in the next 2 years (2011) as quoted. Unless an outrageous new wireless tech comes out and is build into all business mobos/systems, in 2011 we will probably continue running predominantly wired ethernet.

  43. Or use all the 'empty' jacks to get rid of phone by JSBiff · · Score: 1

    My company got rid of their old analog phone system, and all the physical plant that required, by switching to Cisco IP phones. The network uses power-over-ethernet tech to power the phones, and the cisco switches and routers they use provide Quality of Service that makes sure the phone audio quality is superb. You can do phones over WiFi, but, cell phones are a better solution most of the time, so why bother?

    Plus, IP phones often offer a lot of features/services that aren't available (or are more expensive) with analog phone systems (like, for example, on our Cisco phones, I can lookup the phone number of anyone in the company by doing a name search in our Active Directory, right from the phone, then can have the phone dial the number automatically by selecting the name from the list on the LCD). Even if you have a separate digital network for phones, why bother having it separate (ok, well, if you already paid for it, it probably doesn't make sense to rip it out and buy IP phones, but I don't think it probably makes sense, nowadays, to have separate phone and data networks, if you are doing new installs)?

  44. Re:I can think of a few more by vlm · · Score: 1

    You forgot capacity.

    Obviously cube farms can never go wireless due to density. There is no way, no how, you can simultaneously run hundreds of personnel at densities approaching one per square meter. Way too much interference.

    So, just wire in more lower powered access points.

    You will never run wireless faster than the copper line to its access point. The staggering labor cost of slowing down the LAN cannot be adsorbed. So, the obvious solution is to buy something like micro-access points that only have a range of perhaps 7 feet, you know, like a patch cable, and then install one in every single cube. Then the users can be wireless. Of course it takes exactly the same amount of CAT5 in the walls to run all those APs. And of course once the bean counters figure out you've replaced a $1.50 1000M patch cord with a $150 10 meg access point that only works when its not being interfered with, you'll be unemployed. But, have fun while it lasts!

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  45. Not sure how reliable wireless will be by Maxo-Texas · · Score: 1

    Once the solar cycle hits it's next phase.

    People make their decisions based on what they see today and over the last few years.

    Cycles longer than 20 years tend to blind side them.

    Right now activity is so low that radio is breaking down (nothing to bounce off of).
    But in the future, activity will be much higher and interfere in the other direction.

    --
    She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
    1. Re:Not sure how reliable wireless will be by SagSaw · · Score: 1

      Right now activity is so low that radio is breaking down (nothing to bounce off of). But in the future, activity will be much higher and interfere in the other direction.

      WLAN's use frequencies around 2.4 GHz and 5 GHz. Under best case conditions, the ionosphere can only reflect radio waves with frequencies below 250 MHz. WLAN signals simple aren't going to refract off of the ionosphere regardless of solar activity.

      Even if some freak of nature allowed the 2.4 GHz or 5 GHz signals to refract off the lower layers of the ionosphere, the minimum path length (from the ground, straight up to the D-layer, and back to the ground) is around 100 km.

      --
      Come test your mettle in the world of Alter Aeon!
  46. Really? by beaststwo · · Score: 2, Interesting

    WiFi is a great way to invite people into your systems that you wouldn't let in your front (or back) door! I prefer to use at least as much access control to my network as I do to my home...

    1. Re:Really? by swillden · · Score: 1

      Even WEP provides more security than your front door does. WPA2 is vastly more secure.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  47. A "range of companies?" by Just+Some+Guy · · Score: 3, Funny

    A range of companies with wireless LANs are discovering that 50% to 90% or more of Ethernet ports now go unused, because Wi-Fi has become so prevalent.

    At this moment, the only wireless device on the WAP at my end of the building is my iPod. There are a whole slew of wired devices, though, from servers to desktops to printers.

    They look at racks of unused switches, ports, Ethernet wall jacks, the cabling that connects them all, the yearly maintenance charges for unused switches, electrical charges, and cooling costs.

    Uh-huh, because WAPs run on fairy dust and ponies' daydreams.

    --
    Dewey, what part of this looks like authorities should be involved?
  48. Electrical Outlets by Sir+Holo · · Score: 5, Funny

    Hey! I just realized that my office is only using 30% of our electrical outlets. What a waste!

    ...until we need to rearrange the office.

    1. Re:Electrical Outlets by godrik · · Score: 1

      that mean you do not need electricity. You should consider not using it anymore.

  49. Er... by Anonymous Coward · · Score: 0

    Have been using Ethernet cable always, using Wireless right now. First thing I notice is how my 1mb/s download speed is now 200kb/s tops, on the same network. Plugging the cable back in speeds are back up.

    Most people use wireless out of laziness, not actual need. Just because they opt-in for a worse experience does not make dropping support a proper move. Meh.

  50. Someone should forward this to Linksys/Cisco by Vliam · · Score: 1

    They apparently don't see the need for Vista64 drivers for WMP54G wireless cards.

    The Ralink driver work for a while. Then, for no apparent reason, get corrupted and begin causing blue screens.

    I've moved it to an XP box where it will work. I'll never buy another product from them though.

  51. forgot one by akb · · Score: 1

    latency

  52. More Grammar by Bill,+Shooter+of+Bul · · Score: 1

    Why must we endure grammar on here ?
    There are so many reasons for grammar to be a "Convenience" over a
    practical default it boggles the mind. I miss the good old days before the hype
    got the better or preogress or speling....

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
  53. This is dumb by bmajik · · Score: 1

    If you have a peice of endpoint equipment that you don't need to move, and you have the ability to run a wire to it, run the wire.

    It will be cheaper, it will be faster, and it won't have strange failures. It will require no configuration.

    I have had home wifi for a long time, but it has only ever powered laptops. If something doesn't move, it gets a wire.

    I run gig-E at home, with one machine running a bt client constantly. I burn DVDs over the network. I am trying to figure out how wireless-only wouldn't be a huge step backwards at my house.

    --
    My opinions are my own, and do not necessarily represent those of my employer.
  54. Why not? by furby076 · · Score: 1

    1) My laptop, running off my network via wireless-g, doesn't get the same performance/bandwidth as when I plug it in via cat5 cable.
    2) Security becomes a major issue. It's impossible to hack a computer connected via a cable unless you go through the intarweb or sit at the computer. Wireless? Someone sitting outside your home has another avenue to hack it.
    3) Plugging a cable into your computer takes all of 1 second and it works. Setting up your wireless, with appropriate settings, take a bit longer then that - plus it is more prone to failure (e.g. settings aren't saved or get corrupted or you are reformatting, etc"

    --

    I do not support "The Man". I also do not support your irrational stupidity
  55. WPA2 Enterprise is pretty darn secure. by Anonymous Coward · · Score: 0

    I am a CISSP, and network administrator for a sizeable government organization, including a law enforcement agency in Texas.

    WPA2 Enterprise with AES-CCMP encryption (at least 128 bits) and using a good encrypted authentication protocol like EAP-TTLS/EAP-MSCHAPv2 or PEAPv0/EAP-MSCHAPv2 for your Windows clients is pretty darn secure. It's at least as secure as your wired ethernet connections to your Windows desktop workstations.

    1. Re:WPA2 Enterprise is pretty darn secure. by EvilBudMan · · Score: 1

      We have a Cisco Cisco Aironet 1130AG IEEE 802.11 A/B/G Access Point.

      http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6087/product_data_sheet0900aecd801b9058.html

      I think ours is not even being used at this point. I think the only way someone could get into that when setup properly is for them to steal the laptop and drive into range. It's old (I think ours is only (a and g no b) has good range and is fast at at least 50mbs when tested, but damn did it cost a lot more than the consumer stuff.

      I would think wireless would be pretty safe when connecting computers but other stuff like printers and everything having a bluetooth device on it somewhere has me a little worried.

      When we get more money and we have to upgrade, I'm thinking mostly laptops that most of which would stay here. The CAD would still need old fashion boxes though.

    2. Re:WPA2 Enterprise is pretty darn secure. by galego · · Score: 1

      >>It's at least as secure as your wired ethernet connections to your Windows desktop workstations.

      You had me feeling good until you qualified it with the "Windows desktop workstations" part. ...

      Come on! somebody had to say it! ;-)

      --

      Que Deus te de em dobro o que me desejas

      [May God give you double that which you wish for me]

  56. Re:Wireless is only fine for casual use. PERIOD! by averner · · Score: 1

    and being kicked in the balls by someone with electrified spiked boots is preferable.

    What?

    --
    Member of the 7 Digit UID Club
  57. Maybe for some... by cdrguru · · Score: 4, Informative

    It is a question of series vs. parallel. Any sort of wireless connection is going to be shared by multiple people using it in a serial fashion. This means that Ann can't send while Fred is sending. Period.

    OK, if you have Ethernet cables running to both Ann and Fred then they can, absolutely both send at the same time. With switches linked by fiber and where everyone isn't banging on the same server you often acheive parallel communications all the way through the system.

    If you are posting on Slashdot or reading email it may not make a big deal. Moving large files around, interacting with some remote graphic intensive application or just doing "office work" with lots of transactions can make this seems like a really silly idea.

    Sure, wired connections are expensive to run and they shouldn't be run except for productivity or security. In my company, both of these are considerations and it would be unthinkable to rely on wireless.

    1. Re:Maybe for some... by Mr+Z · · Score: 3, Informative

      Fun fact: Wired Ethernet (before the wide adoption of switches) used to be a broadcast protocol also. :-) That's what that red "collision" light was for. (Thankfully, switches are plentiful these days. They weren't during the heyday of 10baseT / 10base2. *shudder*)

    2. Re:Maybe for some... by Gerald · · Score: 3, Informative

      Funner fact: Ethernet was based on the foundations laid by ALOHA, a wireless networking protocol.

  58. Re:I can think of a few more by wagnerrp · · Score: 1

    You forgot capacity.

    Obviously cube farms can never go wireless due to density. There is no way, no how, you can simultaneously run hundreds of personnel at densities approaching one per square meter. Way too much interference.

    Why not? 5GHz products have dozens of non-overlapping channels, as opposed to the 3 you get with 2.4GHz products.

  59. Re:Wireless is only fine for casual use. PERIOD! by Chas · · Score: 1

    I've run into people trying to run database apps over wireless networks who've been losing data, corrupting their databases, etc because the connection was bottoming out on them.
    Trying to clean up the damage done in this fashion is time consuming, tedious, and usually frustrating. As is dealing with the intellectually stunted individuals (who've spent "tens and hundreds" of dollars" on their *COUGH* "enterprise class" network) trying to claim that it's the fault of the software for not being intelligent enough to compensate for their craptacular setup.

    --


    Chas - The one, the only.
    THANK GOD!!!
  60. cold dead hands by Anonymous Coward · · Score: 0

    you can take my ethernet out of my cold dead hands

  61. charges? by 1u3hr · · Score: 1
    "the yearly maintenance charges for unused switches, electrical charges, and cooling costs."

    My USED switches have approximately ZERO maintenance. An unused one could hardly be more. How about the higher costs for wireless equipment? The much lower reliability? The security problems? How about everyone with a desktop PC that has a simple reliable ethernet connection -- why on earth unplug that?

  62. Wireless will never win... by Anonymous Coward · · Score: 0

    Wireless technologies, as they stand now, can not compete with wired. They are too bandwidth light - too finicky (if I'm behind a particularly dense wall, I loose signal) and are frankly insecure. I work in a very secure location and they wouldn't dream of allowing a wireless signal withing 100 yards of this place. The point is that under a wired connection you can truly produce a closed-loop network. You can't do that with wireless, opening the network to attacks.

  63. Speed Baby by netcaretaker · · Score: 1

    It is fine at home with 2 computers, put 20 on and it blows. Speed is half duplex as stated. Security. Not the same speed as wired, if you are on 10meg maybe - try 1gig with jumbo frames and see the difference. Wired is NOT shared, like wireless, big ass hub. Give me a wire and all the speed I can get.

  64. Yeah speed and security by invisik · · Score: 1

    My 802.11b notebook can't go as fast as my 22MB cable, but I'm not about to rip it all out and upgrade just for that.

    The speeds are not consistently fast enough to support line of business apps on a daily basis for many cases over wireless.

    Besides, who wants to be bathed in that much RF from close sources for 8 hours a day? We get enough from other sources.

    I want 10GB ethernet!

    -m

    --
    http://www.invisik.com
  65. Wireless security doesnt matter by bedammit · · Score: 1

    All of you tout security when over half of you have or have had spyware and viruses on your windoze machines. The only thing that your neighbor cares about with your WIFI is if he/she can get online when they didn.t pay their bill or their Internet is down. ok? Oh and two of you want to search your neighbors hard drive for naughty pictures of the chick that lives there.

    1. Re:Wireless security doesnt matter by colinrichardday · · Score: 1

      All of you tout security when over half of you have or have had spyware and viruses on your windoze machines.

      I'm running on Linux, over Wifi. My personal surfing may not be worth protecting, but businesses have to consider such things as client confidentiality and protection of company data.

  66. When You Pry Them from My Cold, Dead Hands by bickle · · Score: 1

    You can have my ethernet cables when you pry them from my cold, dead hands.

    1. Re:When You Pry Them from My Cold, Dead Hands by DotWarner · · Score: 1

      Thank goodness! I came here to search for the phrase "cold, dead hands", and was coming up blank. I had to turn the filter down to +1 and search through three pages before I found it! I was beginning to think that this wasn't the Slashdot I knew after all.

  67. Well, my college would surely welcome some... by WolphFang · · Score: 1

    Well, my college would surely welcome some donations of these "excess" managed switches. We are out of money, and are short on capacity. And getting shorter.... the things like... FAIL after 7 years in bad temperature environments. :) Seriously, really could use some managed switch donations.... with fiber uplink ports... single-mode... http://www.ewc.edu/

    --
    leather-dog muksihs
    Blog: @muksihs
  68. The author must work from home by Anonymous Coward · · Score: 0

    Clearly an article written by a guy who works in a home office with a Linksys wireless router. As a consultant, I don't have any corporate clients who are even considering ditching the wire! In fact, I've had a few recent build outs where they spec'd out high grade (expensive) cable because they didn't want to have any problems running GigE. Wireless N?... You gotta be kidding. GigE, for high usage feeder cables, imaging, you name it!

  69. more idiots not knowing what they are talking abou by pyster · · Score: 0

    Ethernet isnt going away. Seriously, shut up.

  70. WoL by paralaxcreations · · Score: 1

    A relatively small reason, but until Wake on LAN works over WiFi, I'll be keeping my ethernet cables, TYVM.

  71. tubes by snsh · · Score: 1

    Cut the cable, keep the conduit, because even wireless internets runs over a series of tubes.

  72. hmm . . . glossy card stock or flash animation? by ensiferius · · Score: 0

    From TFA "the company's head of enterprise marketing, has been the point person for the effort, which includes a helpful calculator, in glossy cardstock, that lets you spin several wheels to see projected savings"

    Cisco's marketing department uses flash animation.

    So who's going to up the ante and start mailing out kool-aid and 3D glasses?

    I'm not buying anything until I've tried their kool-aid.

    --
    "Oh drat, these computers, they're so naughty and so complex." Marvin the Martian
  73. Trolled by a pro by Anonymous Coward · · Score: 0

    Another masterful troll by Gartner.

  74. Re:Wireless is only fine for casual use. PERIOD! by averner · · Score: 1

    who've spent "tens and hundreds" of dollars

    Did they by any chance get one of these?

    --
    Member of the 7 Digit UID Club
  75. If you must use wireless at home by bondjamesbond · · Score: 0

    At least upgrade it to DD-WRT. If it's going to suck, you might as well have some fun with it.

  76. WHO THE FUCK by sexconker · · Score: 1

    Who the fuck keeps tech magazines in business?
    Seriously?

  77. 10 GBE by Anonymous Coward · · Score: 0

    With old Cat5 maybe - although most desktops still come with on-board RJ45.

    But new offices are better off getting cabled - for 10 GB ethernet, which will probably become mainstream soon for companies working with large files.

  78. What? What? What? by drolli · · Score: 1

    These guys must be mad

    I assume an office configuration.

    a) 20 Wireless acess points will not be able to deliver the same troughput as a 1Gb switch (especially if your servers have multiple ports), even when polluting the whole band for just conneting a single large office. And before somebody asks: Yes, there are people who use that kind of BW for remote fs. And before another onjection comes: when wireless will be at 1Gb i dont now where cable/fiber will be

    b) Identifying problems/costs. Pull the plug and something changes. Then you at least know that your card is working, and if the link led goes on and off you know something about the other side. If maintainace time on 5% of the computers rises twice, putting ethernet ports on all pays of

    c) Electricity. I dont think wireless access points and receivers for the same rate take less than cabled ones. This just does not match my current experience. Maybe it changes, but hte cabled one also could go down in power.

    d) Security. Yes i know. Relying on the ethernet cable not radiating may be a bad idea, but relying on nobidy beeing able to physically inject packets into you net may be a good one.

    e) Unproven technology. You know. Never change a running system. Companies begin to understand how to handle wired Networks (even if i have heavy doubts from time to time). Without a really good reason (and no, "my iphone does not have an ethernet port" is not one of these), one should not move to something new.

  79. Re:Wireless is only fine for casual use. PERIOD! by chrysrobyn · · Score: 1

    This guy is a moron who's merely attempting to shill his crap. As others have already said. Wireless fails in a comparison of throughput. Wireless fails in a comparison of security. Wireless fails in a comparison of susceptibility to interference. If you're just sending e-mail and browsing por^H^H^the web, wireless is fine.
    If you're trying to maintain a sustained connection for things like database traffic, or a VPN connection, and being kicked in the balls by someone with electrified spiked boots is preferable.

    Carriage returns added for solely for dramatic effect omitted.

    I'm in an 802.11g office space. All the workstations are wired to the walls, strangely through the new VOIP phones we got last year. Nominally, the laptops are supposed to be wired when possible, and wireless for meetings -- in reality, most people don't like dropping active connections when they unplug, so they're just wireless all the time. After we got our VOIP system last year, I lost my ethernet cable and have been wireless the whole time. I VNC to my workstation and do light graphics but mostly text work there -- there's more than enough bandwidth for that. I download from intranet sites at 600+KB/s, and that's fine with me. I actively use e-mail and the like. There's enough VPN encryption to keep corporate happy, so that's not a factor. As far as interference goes, 1) throughput is high enough, so I don't care, and 2) we've had one "wireless outage" in the last 2 years, and it was for an hour.

    As long as dedicated personal workstations and VOIP phones are at the desks, we'll have wired infrastructure to support them. But it's clear wireless is up to the task of handling a lot of people's needs.

  80. Tube from the antenna by tepples · · Score: 4, Informative

    You've just made a serious breech of Slashdot protocol. You shouldn't post AC, when your comment would be modded funny..

    Last time I checked, Funny gave no karma, and Overrated took away karma. So if moderators go into a Funny/Overrated mod war over a comment, the poster loses karma rapidly. Such mod wars have brought users from Excellent (posting at 2) down to Terrible (posting at -1) in one day.

    On the wireless Internets, there are no tubes, so there are no tubes to get clogged.

    The tube from the antenna to the AP that gets clogged more easily than the tubes on a wired switch. But residential Internet service is even easier to clog than the antenna tube.

    1. Re:Tube from the antenna by JWSmythe · · Score: 1

          They just had Interweb Cleaning Day on April 1st. I received the notice. It coincided with the telephone sanitation day. I had my computers turned off and phones wrapped in plastic bags all day, per the notice I got by email.

      --
      Serious? Seriousness is well above my pay grade.
  81. What are you using NOW? by wiedzmin · · Score: 1

    It's simple. Take a poll. How many of you are using wireless vs wired RIGHT NOW, to read this article? That's what I thought.

    --
    Bow before me, for I am root.
  82. My school library tried the no wire thing by story645 · · Score: 1

    Somebody decided not to run new wiring in the college library and instead put all the computers on wireless, and don't know if it's the implementation or something but the computers are beyond slow (about dial up speeds in some cases). So now nobody ever wants to use the computers in the library for web browsing, making them kind of useless for web research and kinda defeating the purpose of shiny new computers to ease the burden of the other big computer lab.

    --
    open source modern art: laser taggi
    1. Re:My school library tried the no wire thing by julesh · · Score: 1

      Somebody decided not to run new wiring in the college library and instead put all the computers on wireless, and don't know if it's the implementation or something but the computers are beyond slow (about dial up speeds in some cases).

      This is the problem with wireless. People do small pilot schemes, see they perform reasonably well, then install 500+ machines on the network. 500 machines all sharing the same 54Mb/s (half duplex) only reliably get 108Kb/s each (i.e. approximately dial-up speeds).

  83. yo! by Tumbleweed · · Score: 1

    I'll take that unused fiber stuff of your hands. I'll even haul it away at NO CHARGE TO YOU! :)

  84. Wake on LAN. by lanes · · Score: 1

    WoL over wi-fi is incredibly shady at best and impossible at worst. Want to bring all your machines up during off-hours for maintenance? Have fun walking around and physically powering on every one of them.

  85. Mod Parent Up by Anonymous Coward · · Score: 0

    My thoughts precisely.

  86. Wow by DarthVain · · Score: 2, Interesting

    I think the news here is that Cisco actually said something smart.

    The first thing that popped into my head is security. That alone is reason enough. Never mind the bandwidth and interference issues. I think interference issues would also increase with the prevalence of wireless as well.

  87. Right by Anonymous Coward · · Score: 0

    Wo don't need no stinking security either.

  88. Still a good use for Ethernet, Personal SAN. by jameskojiro · · Score: 1

    Personal SANs seem like a good usage for the ports, rather than Wireless.

    --
    Tsukasa: All I really want, is to be left alone...
  89. 54Mbps by sjhs · · Score: 1

    54Mbps should be enough for anybody.

    1. Re:54Mbps by godrik · · Score: 1

      54Mbps should be enough for anybody.

      but you never reaches it in real condition. I am not even sure I ever got more than 10 Mbps on wifi.

  90. Re:I can think of a few more by EvilBudMan · · Score: 1

    Your right for a cube farm but what about a small business that has 5 or 10 computers? Running wire is a lot harder in most of those places than it is in a cube farm.

    I guess it really does depend upon your situation just like Cisco says.

    And...don't mod me down for saying that because I also think Cisco's stuff is way overpriced marketing mostly and some of it I have to have because, we'll you know no one ever got fired for buying Cisco because everyone else does it.

    That being said I think someone that is going to stay small like a car dealership or you local insurance agent maybe should go with wireless and notebook machines as well. Do you know how much a large desk with enough space for a mid size tower takes up compared to a laptop which already has the wireless built in?

  91. Re:Wireless is only fine for casual use. PERIOD! by Anonymous Coward · · Score: 0

    But what about the tumours?

    I mean, isn't that the 800 pound gorilla in the rooom?

  92. Well it will never be the time... by neural.disruption · · Score: 1

    ...at least for corporate and speed hungry users.

    Even comparing a pre-standard wireless(802.11N) to a 14 years old 100Mb Ethernet standard shows that it does not have that many benefits.

    Most computers and routers nowadays have Gigabit or better Ethernet.
    So if you compare 802.11N to Gigabit or even 10Gb, that are the true competition of the N proposal you'll get the picture.

    Common household users are... well quite not intelligent beings(I believe they may belong to some primate species that looks like a human being to lure its predators).

    I guess I could get most Americans to vote for the replacement of Ethernet with Token Ring if I said that it would help capture Osama.

    A majority does not make something right, they just make it look right.

  93. Why cutting the cord is bad by kimvette · · Score: 2, Insightful

    Here is a list of reasons why cutting the cord is bad:

    Limited shared bandwidth. Soon your internet connection will be faster than your WiFi connection.
    Security - WEP is hopelessly broken. WPA-PSK is not foolproof. Proprietary solutions suck and are expensive.
    Interference with nearby WLANs. There are only three unshared channels; the rest of the channels overlap. It's going to be very difficult to not overlap someone else's nearby WLAN and when you do, the performance of everyone's (on that frequency) will decrease
    Reliability - There are often "holes" in RF transmission, even close to the antenna. I found a spot at our conference table where my notebook drops the connection. A few inches either way and the connection is perfect. This is just 25' from the WAP.
    Driver load order: Are you on a Windows network and do you need to log on to a domain/active directory? If your wifi driver won't load before the workstation stack you may not be able to authenticate properly.
    Connection tracking - this is related to the limited bandwidth and limited memory in most WAPs.

    Once you get more than 15 or so workstations on a WLAN performance can really start to suck, especially if you have network drives that see heavy use, or source control with heavy use. or if you try to do anything with a thin client.

    Abandoning ethernet for WiFi is another nail in the second(?)third(?) death of the thin client, because bandwidth limitations and reliability will become a real concern.

    On the other hand, I hate thin clients, and I hate Software as a Service (WHY would you trust another company to store all of your data under a restrictive license AND where obtaining your data if the provider goes belly up will be damn near impossible?), so bring on the WLANs!

    --
    The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
  94. Send us your tired by MarkCohen · · Score: 1

    Please send me several unused, but working, gigabit switches. Thanks.

  95. Bollocks. by Anonymous Coward · · Score: 0

    In my mid-rise apartment complex, there are ~30 WAPs all fighting for 2.4 and 5.0 GHz spectrum. My connection is frequently getting dropped, or more often, I can't connect because of all the interference. In my dad's house, the wireless can't reach the basement or upstairs. The 2.4 GHz makes all the wifi connections dump.

    In both places, we are pursuing a common remedy: we are running cat6 and dropping in switches in key areas. The upside? I can stream HD videos off my server now, instead of having to transfer them first. I'm way happier with a wired connection than a wireless one - IJFW.

  96. Converted Corp HQ to 802.11n Wireless by jwill7g9 · · Score: 1

    Last summer I upgraded the network at Corp HQ to 802.11n. I decommisioned every 10/100 Ethernet switche and disconnected all ports. For the backbone of the new network, I installed new Gigabit Switches connected by fiber. On each floor I connected Apple Airport Extreme Base Stations running 802.11n @ 5Ghz and an Apple 1GB Time Capsule. Each plugged into the Gigabit backbone. Everyone in the company got either a MacBook, 15" MacBook Pro, or 24" iMac depending on their needs and our 7 year old Linux servers were replaced with 2 Apple Xserves. Every system connects to the 802.11n network. Network authentication is handled through RADIUS on the Xserve and encryption is handled by a Fortress Technology appliance with 256bit AES encryption. We replaced the 15/2 Business Cable connection with a 50/20 Business FIOS. I've had no issues except stupid users, everyone is connecting at 300Mbps, and everyone loves the speediness of all the LAN services and the Internet. I'm glad to be rid of the Ethernet.

  97. Bad Idea! by Anonymous Coward · · Score: 0

    People have already said this, but I would just like to put in my two cents.

    This is a F***ing STUPID idea. Security is nowhere NEAR as good on a wireless network as compared to a wired one. If a large company even HAS a wireless network, it is not connected to their internal network due to the inherent security weakness of wireless. It is just there for getting information off of the internet.

    Hell, for my network security class we where tasked with breaking into a wireless network and leaving information on the intruded network as to how we did it so as to inform them of their weakness. Guess what? Cake. These guys are only suggesting this because they would benefit from it, and anyone who follows them deserve whatever happens to their sensitive information.

  98. Typical by Anonymous Coward · · Score: 0

    This is such a troll post. /. quality is staggeringly low lately...

  99. Heck, even at home by WindBourne · · Score: 1

    I have my house fully wired with ethernet. Security and speed is the big reasons.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  100. Gardner? C'mon! by dysmey · · Score: 1

    This is the sort of nonsense that makes me never take Gardner seriously. These are the same people that years ago publicly advised Apple to drop their software line and to have Dell build their hardware. The advantages of wired LANs are obvious to us; why is it that they are not obvious to these supposed IT analysts?

  101. This is STUPID! by gabrieltss · · Score: 1

    I think wireless sucks! I get more reliability out of Ethernet than I do wireless. I have a wirelss hub in the house and it at best gets 49% reception and it drops connectivity constantly. I even added high gain antenna's. Wired ethernet is far more reliable - I don't get dropped connections with it.

    --
    The Truth is a Virus!!!
  102. No by Anonymous Coward · · Score: 0

    and No - I think that sums up whether wireless should take over or be used instead of a wired connection.

  103. Re:I can think of a few more by HereIAmJH · · Score: 1

    There is no way, no how, you can simultaneously run hundreds of personnel at densities approaching one per square meter.

    One per square meter? And I thought my cube was small.

    --
    Another day, another update to a Google android app.
  104. Switching to all-wireless is incredibly stupid by Heebie · · Score: 1

    Wireless networks are amazingly, insanely easy to crack into with scripts widely available. It takes no more than a few minutes to gain access to ANY current wireless (802.11x) network whether it's using WEP,WPA, WPA2 etc.. etc.. etc.. If you want someone to be able to park outside your building & track every single thing that happens on your network, or you just don't care about your data, then fine.. switch to 100% wireless. BUT.. if your company, or you personally, have ANY data that you want to remain private (a cracker could get your user/password combos easily and rainbow-table the crap out of them in minutes if they have ANY access to your network.. including cracked wifi) then you should not be using WiFi AT ALL. Keep the wires.. keep your data! (not to mention networking performance.)

  105. You do know that... by Junta · · Score: 0

    Ethernet is cheaply at 1 gigabit now right? 802.11n need not be bridged to 100 mbit anymore, and probably isn't.

    Now, to the pure BS mode, where I will completely pull stuff out of my ass without data.

    802.11n purports to be ~450 mbit in theory. If a shared media, than you could have two wireless peers near each other, each sucking up 200 mbit of the throughput to acheive equivalence to 100 mbit.

    In summary, at extremely small scale I could see 802.11n beating out 100mbit.

    I concur though that an 802.11n access point has 450 mbit total in theory, while an equivalent 24-port gigabit switch would likely have 48 gigabit/s throughput to accomodate roughly the same number of users.

    --
    XML is like violence. If it doesn't solve the problem, use more.
  106. No by Artemis3 · · Score: 1

    Wires are infinite, spectrum is not...

    --
    Artix
    Your Linux, your init.
  107. No way by wgkylep · · Score: 1

    I'll echo the security & bandwidth concerns, and add in the hassles of supporting every person whose quirky WLAN card causes them to drop & renegotiate DHCP too frequently. This is not at all like land-line vs. cel phone, and treating it as if it were and ethernet was somehow inevitably going to fade into obsolescence is ridiculous.

  108. What the... ? by X.25 · · Score: 1

    So, even retards like this can get a job at Gartner.

    Guess he never saw anything else than his home laptop.

  109. Wireless won't work for those who work. by Deputy+Doodah · · Score: 1

    Sorry, wireless is nice for wireless devices, but it won't be replacing ethernet on workstations anytime soon. Ever try running Solidworks on a laptop with its minimal GPU and small screen? Many of them just choke and die.
    Ever try loading a large assembly over a wireless connection? I'll take 1Gbps ethernet over 54 Mbps wireless any day.

    So yeah, ethernet not only always works, but you can transmit data over it faster. It might get replaced by wireless at Starbucks or those trendy businesses with fake hardwood floors and a manager name "Tristan", but not at any real business transferring real data any time soon.
    Wireless use will increase and is growing, but it is being used to fill a hole that ethernet can't conveniently fill; connecting laptops and other wireless devices. It's perfectly adequate for twittering and viewing porn, but it just doesn't have the reliability and speed of ethernet.

    There are many of us who need full blown bolted-to-the-floor workstations to get our work done and ethernet is the best choice for us. My wirelessly connected laptop is on my other desk getting a battery charge. The computer I'm using to waste time on Slashdot weighs 10 pounds and is connected via ethernet.

    ...and just to piss everyone off, I still have a 3.5" floppy drive. I'd better get back to my CAD work now or I won't get paid.

  110. fuck wireless shit by Anonymous Coward · · Score: 0

    not everybody has jewish money to buy your stinking wireless gayness

  111. No big company will do so by Anonymous Coward · · Score: 0

    Not gonna happen for any big companies. Too big of a security risk. I know that some companies don't support phones that allow wifi use due to security risk.

  112. ssh for the entire network by cenc · · Score: 1

    I do not trust either one, and push all traffic over SSH with port forwarding for all protocols on my network with preshared keys both internally in physical offices and between physical offices over the internet. I don't have to worry about the latest vulnerability or misconfiguration in some application dumping passwords in the clear, or some web app being sniffed (other than ssh itself).

    Yes, I still use all the other security measures, but it sure makes it hell of complicated for your average guy sitting in the parking lot to make use of anything they might find. Never say never, but I do say unlikely.

  113. Steps to break into a wired network by ThrowAwaySociety · · Score: 1

    Steps to break a wireless network:

    #1 - Pull up to parking lot.
    #2 - Sniff advertised name of network
    #3 - Put up your AP, set name to clone network's name
    #4 - Record authentication attempts
    #5 ...
    #6 - Profit!

    1. Find out the name of someone who works in the building. If there's a directory, great.
    2. Dress profesionally.
    3. In the morning, smile at the receptionist. If challenged, tell him you're coming to see the person from step 1
    4. Take the elevator to a random floor
    5. Find an unguarded network drop
    6. Profit

    1. Re:Steps to break into a wired network by Bigjeff5 · · Score: 1

      In the building I work in, you wouldn't get past #3.

      Most companies worth stealing data from also have security professionals, not receptionists, in front of the elevators. Furthermore, many companies use encrypted badging access systems (my company does this). No badge, no access.

      For example, with my company, if you have legitimate business then an employee with the sufficient credentials can vouch for you and you can recieve a temporary badge. For this badge you get specific access rights (i.e. only the floor you need to be on) for a temporary period of time. Usually not more than 8 hours, though with further verification you can be given up to a monthly badge. Not just anybody can vouch, and in fact most users have the same restrictions a visitor would have, i.e. access to only one floor. You get more if you require it and have managerial approval (the managers can't approve everything though).

      You must use your badge to access the main elevators (which are the only access to any of the floors beyond the lobby), plus once you are on a floor it is walled off and you need your badge access to get in.

      The people distributing the badges are well trained in social engineering techniques and would be tough to fool. They also don't break protocol, which means weasling is not an option. If they DO break protocol, they tend to get fired, so they really don't want to break protocol.

      While it's not impossible to fool them and weasle in, it would be incredibly difficult. You'd basically have to get a job there first, and then you could get in. Did I mention they run thorough background checks for everybody? Yeah... good luck man.

      All that said, your #3 is a hell of a lot harder than sitting in the parking lot with breaking encryption. Granted, if the company's devices are all up to date such that they have the option to use the latest encryption (some devices still can't use WPA), then for now you are safe. But as soon as that is broken (and it will be broken eventually, they haven't come up with a hack-proof scheme yet) you have gone from secure, to incredibly insecure.

      With a wired network, it's fairly trivial to make it almost impossible to physicaly access the network with an unapproved device, without even enabling any encryption. Things like locked wiring cabinets and disabling unused ports (both standard practice), keeping separate areas on separate vlans, etc. Simple things that make it difficult to just "plug something in" and sniff the network. Turn on any kind of connection authentication, and you've suddenly got all the problems with breaking into a wireless network to deal with, in addition to the physical access problems of a non-encrypted network.

      Wired networks are inherantly more secure than wireless, it is not possible for the most secure wired network to be less secure than the most secure wireless network. Sure, a wireless can be "above average", but I guarantee most wireless networks only use WEP or breakable WPA encryption, which automatically puts them in the "less secure than wired" category.

      Basically, any network that you can weasle into with a nice suit and a smile, and then find an unguarded network drop, probably doesn't have incredibly sensitive information on its network anyway. That or you've found a cherry ripe for the picking: a company that doesn't value its data as it should.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
  114. Heed Adama! by Mackeul · · Score: 1

    Did no one learn ANYTHING from Battlestar Galactica? If we all go wireless, the Cylons will surely nuke us all!

    "I will not allow a networked computer aboard my ship!" - Cmdr Adama

    --
    Never bathe in hot oil and Bisquick.
  115. Re:Wireless is only fine for casual use. PERIOD! by Anonymous Coward · · Score: 0

    If you're just sending e-mail and browsing por^H^H^the web, wireless is fine.

    Porn doesn't even stream properly over wireless.

  116. Two words: by Hasai · · Score: 1

    COLLISION DOMAIN.

    What pickle-brain thinks these kinds of things up?

    --

    Regards;

    Hasai

  117. apologies to yogi berra- by greyhueofdoubt · · Score: 1

    >>it sits mostly unused. And the wireless that IS used is almost useless because so
    >>many people are trying to use it at once

    "Nobody uses that access point anymore- it's too crowded."

    -b

    --
    No offense, but I've stopped responding to AC's.
  118. Before you freak out... by solweil · · Score: 1

    It's a regional usage.

  119. Wired all the way! by gzunk · · Score: 1

    5-10 computers for a small business? I have 9 computers and 3 consoles that need network connectivity and that's just in my home! OK so when I had the opportunity I also wired the house with Gigabit ethernet, so in this argument I'm with wired all the way!

    1. Re:Wired all the way! by EvilBudMan · · Score: 1

      We'll you probably need more power than them. Just a couple of billing and accounting applications is all where you probably have some type of fancy video on demand box down in your basement.

  120. Wireless vs. Power over Ethernet , GigE by billstewart · · Score: 1

    The big drivers I've seen for new wired deployment (other than just expansion/rearrangement of offices) have been Gigabit Ethernet for people who want faster bandwidth (so even Wireless-N isn't a replacement), or Power over Ethernet for VOIP phones (either for people who want to make Cisco/Avaya/etc. happy by selling two boxes or who think it's cheaper/easier to manage PoE than wall-warts.)

    But generally the people installing those things aren't going to be disposing of old equipment that you actually want to install at home - they're replacing big clunky 24-48-more-port equipment, and you can get 8-port GigE switches for $50 (if they don't come free with your breakfast serial these days). Throw in a UPS and it's still cheaper than paying the shipping for that used commercial-quality switch you bought on eBay. If you need more ports than that they're probably in different rooms so it's easier to wire small switches than multiple home-runs anyway. If you really need VLANs you could spend $100 instead of stacking cheap switches.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  121. Authentication vs. Eavesdropping - use DMZ+VPN by billstewart · · Score: 1

    There are two reasons you don't want strangers on your Wireless LAN - they can leach bandwidth, and they can crack or eavesdrop into your servers and users.

    • If you actually hang a wireless network on your core network, that security stuff becomes really critical, but if you put it on a DMZ where it belongs, then you don't have to panic about how strong the authentication is as long as people aren't leaching all your bandwidth, and you can be relatively friendly about having guests/vendors/customers etc. using your wireless without worrying about them cracking into your servers.
    • Similarly, if your wireless users get to your secure network over a VPN, which they're going to need when they're working from home or Starbucks anyway, then you don't have to worry (much) about haxx0rz eavesdropping on them even if you're not using the latest WPA2xyz.
    • If the extra overhead of a firewall and a VPN makes your network too slow for your users, in addition to having N people sharing your microcell's spectrum, then they want real wires anyway.

    That doesn't mean that you don't get some free peace of mind by using wireless authentication if you want, but if you've designed things adequately it's less than critical. (Maybe you can have an "Authorized users and guests only, sign your name in red pixels here" page to keep your HR department's pet lawyers happy, but other than that your wireless should be set up for insecure use.)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  122. False network jacks? Easy by billstewart · · Score: 1

    You obviously haven't tried to get a network connection in a random conference room in an older office building. There are typically *lots* of jacks sitting around, and especially if it's your own company's building (as opposed to a customer or vendor, where there's somebody to ask), you can go through multiple cycles of

    • Plug in
    • Ethernet link light doesn't go on
    • Try again
    • No DHCP here
    • Try again
    • 192.168.1.101!
    • No DNS - traceroute -d some-IP-address-you-memorized anyway
    • 192.168.1.1
    • * * *
    • * * *
    • * * *
    • * * *
    • ^C FAIL!

    Or did you mean getting people to plug into false network jacks on *purpose*?

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  123. DMZ is absolutely the right choice for wireless by billstewart · · Score: 1

    You're already +5 Insightful, but yeah, putting the wireless AP outside the protected network is absolutely the right choice, and in general you want it inside at least a simple DMZ so that users can get out to the internet (and their own corporate VPNs if they're visiting customers/vendors) but aren't harassed by too much noise.

    If you have a corporate HR or legal department, you can make them happy by having guests get intercepted by an "Authorized users and guests only; I promise to behave myself" page or whatever, and maybe you also do some malware blocking or install an outbound-spam filter, but that's getting into the fine points.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  124. Sig by Anonymous Coward · · Score: 0

    I can't attempt to decrypt a packet that isn't there...
    --
    ...in bed

  125. You forgot a big one by Sycraft-fu · · Score: 1

    It has a single collision domain.

    This is one of the problems wireless faces even when it is the "same" speed as wired. You effectively are back on a hub like system. Unless your wireless standard provides each and every device with its own frequency range, which would use a prohibitive amount of spectrum, you have the same problems that hubs did of everything talking in the same space. That means it isn't going to scale like wired does. 5 computers on a 5 port 100mbit switch do just as well as a couple hundred computers on a 288 port switch (like a Cisco 6000 with 48 port blades in it). The individual computers all get the same bandwidth. The only place you have to worry about contention is uplinks, but then that would be the same case with wireless. However if computer 2 wants to transfer full speed to computer 20, that doesn't slow down computer 5 transferring to computer 40.

    However with a wireless link, it isn't the same deal. With a few computers, there isn't much contention, and heck maybe you have a couple APs on different frequencies to reduce it more. However you put a couple hundred computers in a room, and now they are all fighting over that same space. The bandwidth available to each computer goes down since there are more people fighting for the same space.

    So even if you have wireless that's the same base speed as your wired, it's still slower in enterprise settings. Sure, at home Wireless N is around about as good as 100mbit wired since it is 1 or 2 laptops on it. However that isn't the case in a big office full of computers.

    This is all aside from the fact that there is faster wired networks, of course.

  126. I mentioned the posibility of this by Datamonstar · · Score: 1

    and the first thing the Mainframe admin screamed back at me was the need for encryption. Of course, this is a health care outfit, so It's a must, but I really don't like the idea of any of my "special bits" straying further than they have to, encrypted or not.

    --
    The eternal struggle of good vs. evil begins within one's self.
  127. LATENCY! by Chris+Snook · · Score: 1

    It's not the bandwidth, it's the latency. In a quiet house, in the dead of night, I get 2 ms pings to my 802.11g router, in the best case. The average is around 3 ms, and if I so much as sneeze it'll spike into the tens of milliseconds, due to retransmits. Those are tiny packets, and there's negligible interference in the area. When you pack an office full of users, 2.4 GHz bluetooth cell phones, microwave ovens, etc., you'll get averages in the tens of milliseconds with frequent spikes in the hundreds. Some packets will get dropped completely, causing TCP stalls and UDP DNS timeouts.

    Honestly, the average web/popmail user *still* won't notice this, but the instant you start opening files on network shares and large IMAP mailboxes, demand paging data as you scroll through anything large, everything will slow to a crawl.

    At my old job, IMAP was faster when I was logged in from home (wired or wirelessly, since my home was relatively RF-quiet) than when I was in the office and unplugged. Large attachments still went faster at work, because I had plenty of bandwidth, but the latency made many tasks painfully slow.

    For many small businesses, the article's assertion may be accurate, but don't go ripping the cables out of large cube farms just yet.

    --
    There's no failure quite as dissatisfying as a complete and total solution to the wrong problem.
  128. "light graphics but mostly text work there" by Chas · · Score: 1

    This says it all.

    --


    Chas - The one, the only.
    THANK GOD!!!
  129. Safeguarding the future by Anonymous Coward · · Score: 0

    The future of humanity may rest on a few retrograde hardwired installations that can't be remotely violated by a horde of robot spawns.

  130. A couple more by CAIMLAS · · Score: 1

    - drivers/OS support (WXP still has a horrible wireless implementation/stack which is very unreliable and buggy - most corps won't accept this. Anyone who's had to support laptops knows what I'm talking about.).
    - roll-out cost (Wireless adapters, particularly for desktops, are expensive. Existing wired infrastructure isn't going away, so use it while it's there.)
    - interference (There are a lot of things out there using the 2.4GHz frequency. It'd not be cool to have half the users in one section of the building losing connectivity when some idiot in the office next door uses his 2.4GHz wireless phone.)

    --
    ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
  131. Why? by aaycumi · · Score: 1

    Sure, wireless is cool and all but having to configure those things over and over; better off having Ethernet as the standard at least as a fail-safe.

  132. Swine by Anonymous Coward · · Score: 0

    Maybe they all got sent home because they visited Mexico..

  133. Agreed by Crazy+Taco · · Score: 1

    And for all of those reasons, my company drops a couple ethernet ports to every office, and we make people use wired when they are in their offices (by hooking the wire to the laptop dock). And we don't hear any complaining, because ethernet is still much faster and is also much more reliable than wireless is when you have a whole office online.

    --
    Beware of bugs in the above code; I have only proved it correct, not tried it.