AES Archives

Home » AES

How does MAC address filtering help to secure a wireless network?

Dave Farquhar security April 20, 2017April 17, 2017AES, antenna, apple

Someone asked me the other day how does MAC address filtering help to secure a wireless network? If you’re in a position where it would help, I argue there are other things you need to do. But I’ll explain how it works, then what I’d rather you do instead.

Dave Farquhar

David Farquhar is a computer security professional, entrepreneur, and author. He started his career as a part-time computer technician in 1994, worked his way up to system administrator by 1997, and has specialized in vulnerability management since 2013. He invests in real estate on the side and his hobbies include O gauge trains, baseball cards, and retro computers and video games. A University of Missouri graduate, he holds CISSP and Security+ certifications. He lives in St. Louis with his family.

dfarq.homeip.net

Configure a Netgear R6300 as an access point

Dave Farquhar Servers and Networking April 18, 2017August 1, 2017AES, AP, netgear, SSID, TL

I picked up a used Netgear R6300 cheaply last week to use as an access point. Here’s how to configure a Netgear R6300 as an access point.

Dave Farquhar

dfarq.homeip.net

What to look for in a USB flash drive

Dave Farquhar Hardware, security April 17, 2017August 5, 2017AES, micron, samsung, toshiba, USB flash drive, Western Digital

USB flash drives are pretty much a necessity these days. They’re far more convenient for moving files around than optical discs, and they make good backup devices. But not all USB flash drives are created equal. Here’s what to look for in a USB flash drive.

Here’s a tip: I don’t just use USB flash drives for transporting data and backups. I like to keep a modest-sized USB flash drive plugged into my router, turning it into a small NAS. It gives me a convenient, reliable place to back up data from any of my computers.

Dave Farquhar

dfarq.homeip.net

Best wireless security mode

Dave Farquhar security January 3, 2017February 9, 2018AES, decent password, NSA, passwords, WEP

What is the best wireless security mode? There are only four choices, and only one worth using, WPA2. But there are some other settings you have to use in order to make WPA2 secure.

Dave Farquhar

dfarq.homeip.net

How to set up and optimize an Asus RT-AC66U

Dave Farquhar Servers and Networking December 5, 2016March 7, 2018AES, asus, malware, NVRAM, SSH, Universal Plug and Play, vulnerability, WAN, wi-fi

Consumer routers drive security professionals like me crazy. I’m happy to say I finally found a router that doesn’t drive me nuts. I want you to buy an Asus RT-AC66U. I’m going to tell you why, and I’m going to tell you how to configure it. Here’s how to set up an Asus RT-AC66U and how to optimize an Asus RT-AC66U.

Dave Farquhar

dfarq.homeip.net

The settings saved on this computer for the network do not match the requirements of the network

Dave Farquhar Windows March 30, 2016August 2, 2017AES, Windows 10, windows 7

If you replace your wireless router with another one, your Windows machines may give you a red X along with this error message when you try to reconnect: the settings saved on this computer for the network do not match the requirements of the network.

The quickest, easiest fix is to forget the network and reconnect. Here’s how to forget a network in Windows 7, and how to forget a network in Windows 10.

Dave Farquhar

dfarq.homeip.net

Why MAC address filtering doesn’t help security

Dave Farquhar security January 7, 2016July 17, 2017AES, RADIUS, SSH, SSID, WEP

The other question that came out of my recommended DD-WRT settings was why not filter MAC addresses. I hate to be flip, but MAC address filtering doesn’t help, so why bother?

The reason is because your MAC addresses are broadcast as part of the network traffic, and it’s unencrypted. So your MAC addresses aren’t any secret at all. So it doesn’t do any good. One could argue it doesn’t do any harm. But it adds an extra step every time you put something on your wireless network. Why go to the inconvenience if you don’t gain anything from it?

Dave Farquhar

dfarq.homeip.net

Why hiding your SSID makes your security worse

Dave Farquhar security January 6, 2016May 10, 2017AES, antenna, SSID, SSL, TLS

I got a couple of questions about my recommended DD-WRT settings, but I’m going to start with the question about why not to hide the SSID. It actually turns out that hiding your SSID is bad for you, and makes your security worse. I’ll explain.

Dave Farquhar

dfarq.homeip.net

Recommended DD-WRT settings

Dave Farquhar DD-WRT, security December 24, 2015January 26, 2022AES, AP, chrome, DDWRT, firefox, firewall, lowercase letters, malware, nintendo, SSID, vulnerability, WAN, WEP, wi-fi

I’ve been asked a few times now for my recommended DD-WRT settings, or at least my good-enough settings. I think that’s a great idea, so I’ll walk through how I configure a DD-WRT router. Follow these steps and I can almost guarantee you’ll have the most secure network on your block.

For the purposes of this tutorial, I am going to assume you are configuring DD-WRT as your primary router.

Dave Farquhar

dfarq.homeip.net

What the NSA can crack, and how to protect against it

Dave Farquhar security October 20, 2015November 27, 2018AES, leaks, NSA, SSL, TLS

Ever since the Snowden leaks, there’s been considerable speculation about what cryptography the NSA could break, and why. Finally, there’s a study that goes into deep detail about what it is the NSA probably can break, and why, plus how to protect against it.

Dave Farquhar

dfarq.homeip.net

← Previous