Content

Does Wi-Fi security matter?

So this may be the first time that I don’t agree with Bruce Schneier (although I’m sure that it will not be the last).  In an article for ZDnet UK, Bruce states, that “”I have a completely open Wi-Fi network, Firstly, I don’t care if my neighbours are using my network. Secondly, I’ve protected my computers. Thirdly, it’s polite. When people come over they can use it.”

Now, I’ve got an open wireless network at home too – is is separate from the rest of my network, because it is polite and cool for all of my geek friends to get access while at my house.  The part I don’t agree with is: “I’ve protected my computers.”  What happened to defense in depth?  Sure, personal firewalls, IDS/IPS, Antivirus, and all that good stuff is good, but what about those risks that you don’t know about?  I’m just not comfortable with putting machines that I do not control/have
responsibility for on my network.  A separate, appropriately firewalled and secured, sure.

– L

Does Wi-Fi security matter?

[UPDATE] – Bruce Schneier Just updated his blog on this issue. I’m sure he is using really good security, including “unsavory men with bitey dogs.” I wish I could deploy that kind!
I think that the whole article might be a misqoute – either way, we intend it to get you to think!

Larry Pesce

Larry’s core specialties include hardware and wireless hacking, architectural review, and traditional pentesting. He also regularly gives talks at DEF CON, ShmooCon, DerbyCon, and various BSides. Larry holds the GAWN, GCISP, GCIH, GCFA, and ITIL certifications, and has been a certified instructor with SANS for 5 years, where he trains the industry in advanced wireless and Industrial Control Systems (ICS) hacking. Larry’s independent research for the show has led to interviews with the New York Times with MythBusters’ Adam Savage, hacking internet-connected marital aids on stage at DEFCON, and having his RFID implant cloned on stage at Shmoocon. Larry is also a Principal Instructor and Course Author for the SANS Institute for SEC617: Wireless Penetration Testing and Ethical Hacking and SEC556: IoT Penetration Testing. When not hard at work, Larry enjoys long walks on the beach weighed down by his ham radio, (DE KB1TNF), and thinking of ways to survive the impending zombie apocalypse.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.