Discussion on:

Who's riding your wireless network?

This article points out the vulnerability of Centrino technology,
but misses some of the basics of wireless security that can
prevent "riders" and most more malicious attacks:

On the laptop:
1) The 802.11 broadcast ability of Centrino machines can and
should be turned off unless explicitly needed. "Ad hoc" networks
are not a long-term company networking strategy.

On the company wireless router:
1) 128-bit encryption should be on so a password or passkey is
always needed for access
2) The SSID should be set to not broadcast its identity, making
the company network invisible to the garden variety "war driver"
3) Wireless traffic can be accepted only from certain MAC
addresses (though this can be cumbersome if many visiting
laptops require wireless access as well)

128-bit encryption (WEP) provides some security, but it can be broken into. The article did mention WAP, which should improve things.

In addition, MAC on wireless lan card can be changed to the same address as the authorized user.

Sorry for posting this under your thread discussing wireless security, but this forum software isn't the sharpest spoon in the drawer.

Branding so called "war drivers" as theives is not only untrue, but it's misleading. If you build a public office without a front door, and some people come in and sit on your furnature, are they theives? After all, you invited them in (wireless access points broadcast their readyness to receive), you provided nice services (comfy chairs), and you did nothing to keep them out. If these freeloaders take nothing that isn't being given away and do no damage, how can they be thieves? True, many people don't want strangers walking around their offices at any time, but it is up to *you* to let them know they're unwanted.

Many people are setting up so called "guerilla networks" of open wireless access points as a grassroots way of taking control of their communications infrastructure. In an era of increasing control of communications by a few media companies, many see guerilla nets as important to securing freedom as a free press. They *encourage* stranges to use their facilities for communications.

War driving is a perfectly valid way of "stumbling upon" open nodes in a guerilla net, and unless *you* make some effort close your network, *they* can assume that you are an active participant in the guerilla net. Branding people who make an honest mistake as a criminal does nothing to improve the civil discourse, and it won't help you improve your company's security.