Aquarionics

LoFi

I am a qualified sysadmin. Whilst I currently am in a “I will never be on-call ever again” phase of my career (Very much like the “I will never drink again” phase of a hangover, with much the same future), the fear of people coming to your desk at 17:25 saying “The little lights have stopped flashing on my disk drive, and I’ve got a report for the board due, is this a problem?” never truly goes away. The other thing that office-environment sysadmins learn to hate with a passion usually reserved for Windows ME is this:

Wireless Networking.

It used to be a truism of security that the only secure computer was one with six inches of air beyond every port. Then came WiFi, Bluetooth, IRDA and such other mechanisms. Unfortunately, it appears that every single writer of wireless router firmware, Wireless card firmware and wireless card driver software is the type of person who go to “Information wants to be free” rallies. Everything is fine, providing you don’t, ever, try to do something as freedom-limiting as secure your wireless fucking network.

(Aside: I know of no way of fucking wired-ly, and that all fucking networks will, by their nature, be mostly wireless. I can, in fact, not think of any exceptions to this last statement and would further request that I not be educated in this regard. Aside ends)

I have borrowed a Belkin wireless router for my new flat, which I configured in no-time flat. Well, no time I was being paid for, at any rate, so in contractor terms it was free. In actual terms it was several hours of faffing with ports and cables and netmasks and reset switches and that was before I turned on the wireless network.

Then I turned on the wireless network. I configured it to be WEP secured with a 128 bit key, generated from a ten byte string set by the administrator – me. I fed this to my laptop, and it was happy. I was suspicious, because my laptop is rarely happy with anything, but I moved on.

My desktop, though it won’t be on wireless often, was also happy. I began to fear.

Sure enough, the Wii disagreed, and demanded I enter the full hex key. Since I don’t have a USB keyboard right now, I did so with the wiimote, over a Long Time.

I’ve borrowed an iPhone from work (I may get one, because (a) SHINY, and (b) I hate freedom). That required the full hex key too.

So did my Windows Mobile smartphone.

I’m beginning to notice a pattern here. Every device without a proper keyboard demands the full hex key. Every device with easy entry of such just needs the passphrase.

I hate computers.

Those who spoke on this:

gravatar image

Stefano Rivera:

2008-01-26 17:53 20 hrs after the Original Article

My rules for wireless:

  • Use WPA-PSK if you can get away with it (i.e. all the devices on the network are new enough to support it).
  • Otherwise, if you have to use WEP, use a 13-char ASCII Key (for 128-bit, 7-char for 64-bit). Any other length passphrase is interpreted in different ways by different OSs.

Of course there aren’t many 13-letter words…

Comment Link

gravatar image

Aquarion:

2008-01-26 20:44 3 hrs after Stefano Rivera

Aha, thirteen is the magic number? I never remember.

The router isn’t quite new enough to do anything but WEP, or I’d be using something else :-)

Comment Link


Nicholas 'Aquarion' Avenell is a web developer in London, you can find out more about him or how to get in touch.

There are more Articles, Projects, Journal Entries, Photographs and things that defy description here, too.

If you're looking for something specific, there are Calendar & Category -based lists of everything.

And if you want to follow stuff that appears here, try a Syndication Feed, or the generic Feed of everything.


Aquarion's last Twitter was: [updating]
Twitter last updated


More Journal:

[RSS Icon]
[ESF Icon]
[CDF Icon]

That which is relevant:


Explain Ads
© 2000 to 2008 inclusive Nicholas Avenell
All comments are the property of their creators, published with permission
(Unless otherwise indicated, the opinions and sentiments expressed on this site are those of the author and not of any organisation of which he is an affiliate, including his employer. Caveat Lector, E&OE. sigh)
0.028 seconds, 19 queries, 2.66Mb on Thu, 02 Oct 2008 14:10:02 +0000
Generated by Epistula Version 2.0.3