newbie password security help

[kastnna]

Hi, I am a newbie here so please be specific and assume I know very
little. And thanks in advance for the help.

I have an oldish Dell dimension 8250 (XP pro) and I just got an insiron

with an intel wireless 2200BG card (also running XP pro). wireless
router is linksys WWRT54G.


The I set-up a home network today, and used WPA protection on the
wireless connection. You cannot login to either computer without a
password. The home network is used for some file sharing (music and
stuff), but mostly for printer sharing. I read somewhere recently that
WPA can be cracked and a neighbor could be stealing my bandwidth.


Assuming someone did this (I don't know why they would want to mess
with my dinky network), they would still need my password to logon and
steal my shared files, right??? I have also have some banking and
password info on my comps (not in shared file) that would be very bad
if exposed.


I am concerned because I live in a townhouse neighborhood and most of
my neighbors are college kids. Who knows what they could be up to!!!


If everything I have said is correct(which it probably isn't), how
would someone hack my password to get to my stuff???


Thanks

 

[Rick Rogers]

Hi,

Yes, with enough work, it can be cracked. Make it difficult, most wireless
routers offer the ability to lockdown by MAC address. Even if they crack
WEP/WPA, they would need to guess at the right address (and know how to
spoof it on their machine).

If somehow, they are able to get in, the only thing they will have access to
are folders that are explicity shared on the network. By default, systems
without passwords will not allow RDP logons.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[MowGreen [MVP]]

The wireless network is protected by a *well contructed* password via
WPA, correct ? ( well contructed means there are letters, numbers, and
characters present in at least 8 or more total entries )
Both computers have well constructed passwords, correct ? (again, at
least a total of 8 entries )
Does the wireless router have a hardware firewall ?

If the above are true, then your network is not the "lowest hanging
fruit" in the neighborhood and is not easily accessible.
Bad guyz go for the easiest ways in first. Then, if it's a determined
individual, the next level up ... either cracking the workstations
passwords or the WPA password.

The easiest way to obtain passwords is by Social Engineering ... i.e. a
stranger on the street poses as a survey taker and actually asks
passerbys for their passwords. It's surprising how many folks actually
reveal them. Or, they offer a free cup of xxxx coffee in exchange for
passwords. Or they call your house and pretend to be someone from whom
you do business with and ask for passwords.

I use a simple, free tool to monitor my wireless network :
http://www.mywifizone.com/
The PC it is installed to then will notify you of any attempt to log on
to the wireless network. You then approve or block that attempted
connection.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

 

[MowGreen [MVP]]

well contructed

Err, make that well constructed. DOH !

http://www.microsoft.com/athome/security/privacy/password.mspx

 

[kastnna]

Thanks guys.