AES Archives - The Silicon Underground

Home » AES

How does MAC address filtering help to secure a wireless network?

Dave Farquhar security April 20, 2017April 17, 2017AES, antenna, apple, garbage disposal, Password, router, wireless, wpa2 0 Comment

Someone asked me the other day how does MAC address filtering help to secure a wireless network? If you’re in a position where it would help, I argue there are other things you need to do. But I’ll explain how it works, then what I’d rather you do instead.

Configure a Netgear R6300 as an access point

Dave Farquhar Servers and Networking April 18, 2017August 1, 2017AES, AP, DHCP, Firmware, IP, IP address, LAN, netgear, Password, router, routers, SSID, TL, TP, wifi, wireless, wpa2, WRT 5 Comments

I picked up a used Netgear R6300 cheaply last week to use as an access point. Here’s how to configure a Netgear R6300 as an access point.

What to look for in a USB flash drive

Dave Farquhar Hardware, security April 17, 2017August 5, 2017AES, backups, Credit card, encryption, file format, flash drive, GB, micron, Password, router, samsung, sandisk, ssd, TB, toshiba, USB, USB flash drive, Western Digital, ZIP 3 Comments

USB flash drives are pretty much a necessity these days. They’re far more convenient for moving files around than optical discs, and they make good backup devices. But not all USB flash drives are created equal. Here’s what to look for in a USB flash drive.

Here’s a tip: I don’t just use USB flash drives for transporting data and backups. I like to keep a modest-sized USB flash drive plugged into my router, turning it into a small NAS. It gives me a convenient, reliable place to back up data from any of my computers.

Best wireless security mode

Dave Farquhar security January 3, 2017February 9, 2018AES, decent password, encryption, Megabit, NSA, Password, passwords, router, routers, WEP, wifi, wireless, Wireless security, WPA, wpa2, WPS, WRT

What is the best wireless security mode? There are only four choices, and only one worth using, WPA2. But there are some other settings you have to use in order to make WPA2 secure.

How to set up and optimize an Asus RT-AC66U

Dave Farquhar Servers and Networking December 5, 2016March 7, 2018AES, asus, bulbs, encryption, Firmware, flash drive, GPL, IP, IP address, ip addresses, LAN, linux, malware, NVRAM, Password, printer, RAM, router, routers, SSH, Universal Plug and Play, upgrade, video, vulnerability, WAN, wi-fi, wifi, wireless, wpa2, WPS, WRT

Consumer routers drive security professionals like me crazy. I’m happy to say I finally found a router that doesn’t drive me nuts. I want you to buy an Asus RT-AC66U. I’m going to tell you why, and I’m going to tell you how to configure it. Here’s how to set up an Asus RT-AC66U and how to optimize an Asus RT-AC66U.

The settings saved on this computer for the network do not match the requirements of the network

Dave Farquhar Windows March 30, 2016August 2, 2017AES, error message, Password, router, wifi, Windows 10, windows 7, wireless, wireless router, WPA, wpa2

If you replace your wireless router with another one, your Windows machines may give you a red X along with this error message when you try to reconnect: the settings saved on this computer for the network do not match the requirements of the network.

The quickest, easiest fix is to forget the network and reconnect. Here’s how to forget a network in Windows 7, and how to forget a network in Windows 10.

Why MAC address filtering doesn’t help security

Dave Farquhar security January 7, 2016July 17, 2017AES, hosts, Password, RADIUS, server, SSH, SSID, WEP, wireless, wpa2, WRT

The other question that came out of my recommended DD-WRT settings was why not filter MAC addresses. I hate to be flip, but MAC address filtering doesn’t help, so why bother?

The reason is because your MAC addresses are broadcast as part of the network traffic, and it’s unencrypted. So your MAC addresses aren’t any secret at all. So it doesn’t do any good. One could argue it doesn’t do any harm. But it adds an extra step every time you put something on your wireless network. Why go to the inconvenience if you don’t gain anything from it?

Why hiding your SSID makes your security worse

Dave Farquhar security January 6, 2016May 10, 2017AES, antenna, good security, Kali Linux, linux, Password, phone, SSID, SSL, tablet, TLS, wifi, wireless, wpa2, WRT

I got a couple of questions about my recommended DD-WRT settings, but I’m going to start with the question about why not to hide the SSID. It actually turns out that hiding your SSID is bad for you, and makes your security worse. I’ll explain.

Recommended DD-WRT settings

Dave Farquhar DD-WRT, security December 24, 2015August 29, 2018AES, AP, chrome, Cryptography, DDWRT, DHCP, DNS, DOS, encryption, facebook, firefox, firewall, hacker, ISP, java, lowercase letters, malware, nintendo, Password, print server, reliability, router, routers, server, servers, SSID, sysadmin, twitter, USB, vulnerability, WAN, web browser, WEP, wi-fi, wireless, Wireless security, WPA, wpa2, WPS, WRT

I’ve been asked a few times now for my recommended DD-WRT settings, or at least my good-enough settings. I think that’s a great idea, so I’ll walk through how I configure a DD-WRT router. Follow these steps and I can almost guarantee you’ll have the most secure network on your block.

For the purposes of this tutorial, I am going to assume you are configuring DD-WRT as your primary router.

What the NSA can crack, and how to protect against it

Dave Farquhar security October 20, 2015November 27, 2018AES, Cryptography, hard drives, leaks, NSA, RSA, Russia, SSL, TLS

Ever since the Snowden leaks, there’s been considerable speculation about what cryptography the NSA could break, and why. Finally, there’s a study that goes into deep detail about what it is the NSA probably can break, and why, plus how to protect against it.

← Previous