Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Do not use MAC address filtering as access control!' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Do not use MAC address filtering as access control!
Authored by: j5 on Oct 08, '04 01:34:16PM
Remember folks: Never use MAC address filtering as access control!

Contrary to common belief, the MAC adress of a network adapter is not fixed. It can be changed by the user. Using Windows, it is just a registry modification. Under Mac OS, it requires a bit more work (http://slagheap.net/etherspoof/).

"this hint is most useful for controlling who can join your airport network"

No. Sentences like this lead to all the insecure WLANs out there. Considering that it only protects you from unexperienced computer users, MAC address filtering is usually not worth the hassle.

[ Reply to This | # ]

Do not use MAC address filtering as access control!
Authored by: Chealion on Oct 08, '04 03:34:29PM

It may not be hack proof, but with MAC address filtering, who is going to bother having to sniff the network and determine the MAC Address and change the MAC address?

The whole idea of security is to make it inconvenient for the person who wants in.

Besides, the last time I did a scan around my neighbourhood, 45% of them were wide open (default everything). It's easier to just move to the next section. Saves time.

---
Chealion - The one and only! =)



[ Reply to This | # ]
Do not use MAC address filtering as access control!
Authored by: taxi on Oct 08, '04 11:15:06PM

Yeah. Reminds me of the 'purpose' of security systems for houses.

Doesn't make your house impenetrable, but makes it harder to break into (or more work) than your neighbour. Hence, casual burglars will steal your neighbours' stuff rather than yours.

The thing to note is that if you have something unique that people want, then you will need 'proper' security measures. But every hollywood movie shows that dedicated enough [physical | informational] burglars will still get in, anyway.



[ Reply to This | # ]
Do not use MAC address filtering as access control!
Authored by: SeanKaneFLA on Oct 09, '04 11:44:44PM

I think the solution is somewhere in the middle. MAC Address filter is one step to help prevent unauthorized access to your data/network, but should be used in conjunction with other available options such as...

• encrypted passwords and data transmission
• do not broadcast the SSID
• change default password on router
• only administrate router via wired connection

No one mechanism will prevent hacking. In fact, a professional hacker can get past all of these. Make it harder though and it's less likely for this to happen to your home router.

Just my 2¢.
Sean



[ Reply to This | # ]