Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 737699">Good tips on that page, I will bookmark that and go over it.I&#039;ve personally witnessed, investigated and mitigated a pretty huge number of WiFi and router attacks.&nbsp; Including;ARP Spoofing.ARP Poisoning.Side Channel Attacks.Rogue AP&#039;sEvil Twin (Quantum)PineapplesXfinity HopsRainbowsOn and on.. To the point I am extremely cautious with WiFi. WiFi use should be limited as much as possible and almost always home WiFi should be placed on guest restrictions, even for your primary WiFi. Guest Policy is basically a ghetto VLAN, and intra-SSID communication should be turned off so Wireless devices can&#039;t communicate to each other. Guest policy will keep WiFi clients from connecting to your subnet other than DHCP polls and routing out WAN, intra-SSID blocking keeps wireless clients from talking to each other.We haven&#039;t seen Rogue AP Detection/Suppression and WIDS come to consumer gear in any major way yet, but it will be eventually. In the meantime, Wireless should be handled very carefully.Also I strongly encourage disabling Bluetooth and Wireless Sharing on all devices. Wireless should always be OFF when devices are sleeping (there is a reason Chromebooks have this setting). On Windows I recommend using either a hardware switch to disable internet and/or program your UTM/Router to disable the internet from X-hours each night. For Windows laptops, Wireless Auto-Off works quite well and will disable your wireless card when your machine shuts down - automatically.<a href="http://www.wirelessautoswitch.com/Home.aspx" target="_blank">Automatically Disable Wireless Cards When Laptops Connect to the LAN</a>PS: Some of these attacks are becoming common and in use against everyday folks in everyday towns/cities.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 737699"] Good tips on that page, I will bookmark that and go over it. I've personally witnessed, investigated and mitigated a pretty huge number of WiFi and router attacks. Including; ARP Spoofing. ARP Poisoning. Side Channel Attacks. Rogue AP's Evil Twin (Quantum) Pineapples Xfinity Hops Rainbows On and on.. To the point I am extremely cautious with WiFi. WiFi use should be limited as much as possible and almost always home WiFi should be placed on guest restrictions, even for your primary WiFi. Guest Policy is basically a ghetto VLAN, and intra-SSID communication should be turned off so Wireless devices can't communicate to each other. Guest policy will keep WiFi clients from connecting to your subnet other than DHCP polls and routing out WAN, intra-SSID blocking keeps wireless clients from talking to each other. We haven't seen Rogue AP Detection/Suppression and WIDS come to consumer gear in any major way yet, but it will be eventually. In the meantime, Wireless should be handled very carefully. Also I strongly encourage disabling Bluetooth and Wireless Sharing on all devices. Wireless should always be OFF when devices are sleeping (there is a reason Chromebooks have this setting). On Windows I recommend using either a hardware switch to disable internet and/or program your UTM/Router to disable the internet from X-hours each night. For Windows laptops, Wireless Auto-Off works quite well and will disable your wireless card when your machine shuts down - automatically. [URL="http://www.wirelessautoswitch.com/Home.aspx"]Automatically Disable Wireless Cards When Laptops Connect to the LAN[/URL] PS: Some of these attacks are becoming common and in use against everyday folks in everyday towns/cities. [/QUOTE]

Verification