Happy Holidays from InfoSec Philippines!

As 2009 comes to a close, we here at InfoSec.PH would like to thank everyone for supporting our site this year. We appreciate the comments and suggestions in improving our site to better help in spreading InfoSec awareness in the Philippines.

So from all of us here at InfoSec.PH, Merry X’mas and a Happy New Year 🙂

Advertisement

“El Sibakero”, #3

#3: “NOT-4-HIRE”

[got something you’d like to share with us? email danieltumalad  atyahoodotcom]

Quick Tips: Securing Your AP

"El Sibakero", Rollin' Down the Street...

A few years ago, a German hacker visited the Philippines and went wardriving on the streets of Ayala. He observed the lack of security in most of the wireless networks he discovered, prompting people to address the situation.

Today, many are still ignoring the importance of protecting their wireless networks. There are plenty of APs in condominiums, corporate buildings and commercial establishments that still use insecure WEP or don’t use any form of encryption at all. [results=car+laptop+airodump, office->home]

With a lot of information and software pertaining to hacking wireless networks freely available on the Internet, almost anyone can obtain illegal access to insecure wireless networks.

Protect your AP:

1. Enable Encryption
With both WEP and WPA-TKIP having security flaws, your best bet is WPA2-CCMP. Make sure you choose a difficult-to-guess passphrase (alpha-numeric+special characters) and “try hard” to change your key every 3 months.

2. Configure AP Administration
Change the default AP admin password, disable remote administration and restrict AP management to local encrypted access (SSL) only. If you are feeling the need to overkill then also disable the wireless LAN access, make the administration console accessible only through the wire.

3. Security through Obscurity
Replace the default SSID and disable SSID broadcast.

4. White-list the MAC-Addresses of your Users
If all else fails, this can possibly make it hard for attackers to join the wireless network.

---

Internal Links:
Wireless Hacking
Using Nmap to Detect Rogue APs
Password Tips

 

“El Sibakero”, #2

Material by jim.

“El Sibakero”, #1

Introducing infosec.ph’s weekly cartoon strip, “El Sibakero”.

http://www.facebook.com/pages/The-El-Sibakero-Project/151004647367