I respectfully disagree about passphrases and MAC filtering. MAC addresses can be retrieved and cloned easier than obtaining passphrases. I found a forum thread discussing MAC filtering from two years ago. I am unable to provide the link for some reason (when I post, it says something about an invalid link). I found it just by Googling the terms.
Back then, WEP was considered good security. I don't bring this up to belabor a point made earlier, but I believe it is important to those who do wish to keep their networks relatively safer to know that MAC filtering, SSID non-broadcast isn't considered adequate protection of the home network. Even a WEP 128 bit key is considered inadequate nowadays. WPA with a strong passphrase is considered much more difficult to hack and for most people should be sufficient. WPA2 with AES encryption is the highest level of security (outside of shutting off your computer or keeping it off the internet) available to the consumer, but not enough for enterprise security. Remember that a 63 character passphrase means the likelihood of someone guessing your passphrase at greater than 1 in 46E63 (depending on if it is case sensitive or incorporate other non-keyboard characters).
In the end, if someone wants in, someone will get in. One can choose a screen door, security door, or security door with a few deadbolts not because it will keep the thieves out, but make it harder for the thieves to get in.
I spent alot of time trying to find the wording to this reply because I didn't want to appear argumentative or authoratative on the subject. Especially to someone who is trying to help me solve my 8125 problem. I am not expert on this (that much is clear as I am having so much trouble hooking up my phone to my network). I have read enough, however, to know that by relying on MAC filtering, one leaves one's network more vulnerable to attack.  |