[Novalug] best way to secure wireless?

[Peter Larsen]

Paul M. wrote:
> Personally I'm in favor of using a VPN like OpenVPN. SSL and IPSEC
> have been looked at and targeted for longer than the current batch of
> "built in" wireless security protos. 

All of the above have changed a lot over the time. They were flexible 
enough to allow for different encryption protocols. Nobody uses 64 bit 
encryption SSLs anymore for good reasons.

> Regarding the "RIAA/MPAA could come after you"
> If you didn't give them permission to use your internet connection for
> illegal activities than it would be hard to hold you legal
> responsible. 

1) That now becomes YOUR burden to prove.

> If you left your door unlocked you aren't responsible for
> someone breaking in, stealing a knife, and then stabbing someone.
> There could also be some protection relating to common carrier status
> if you keep logs.

2) The insurance companies certainly don't agree with you there. If you 
don't lock your door, and people are often coming by using your things, 
you can't get ANYTHING - or even take them to court - if they borrow or 
destroy your things by using them. Let alone if a thief comes by and 
takes things because you're careless; it impacts what the insurance will 
cover.

3) Your contract with your ISP most likely say that you are not to allow 
others than your household to use your internet connection. Keeping an 
open relay like an unrestricted AP around, is a clear violation of this.

4) If you're not aware of your system is being used for illegal 
activity, how are you to prove to anyone that it's not you or your 
households doings?

Bottom line is - NOBODY should run with an unsecre AP. It's not a 
question of IF but of how much.

Regards
   Peter Larsen