Artwork

Content provided by Technical Difficulties. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Technical Difficulties or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

061 - Taming WiFi with Bradley Chambers

 
Share
 

Archived series ("Inactive feed" status)

When? This feed was archived on November 11, 2020 01:30 (3+ y ago). Last successful fetch was on June 02, 2020 15:08 (4y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Manage episode 45859703 series 48367
Content provided by Technical Difficulties. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Technical Difficulties or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Bradley Chambers drops by to help Gabe and Erik understand how to make WiFi work in the home. Along the way they talk about the way wireless signals propagate and interfere, how to select the best hardware, and how to configure your router's software to ensure a secure and reliable wireless network.

Guest Spotlight: Bradley Chambers

Bradley Chambers

Producer’s Note

This week marks our second episode with a guest expert. Before we begin, here is a bit more about Bradley Chambers, this week’s guide to the tricky world of WiFi.

Bradley’s sparse Twitter bio sums him up as “Jesus follower, husband, father,” and that’s a good place to start. He lives in Chattanooga, TN with his wife and two sons and serves as Director of Information Technology for Brainerd Baptist School.

Bradley can be regularly heard on the Out of School podcast discussing educational technology with his co-host Fraser Speirs. He also blogs (not daily) at Chambers Daily and the content there is of the same high quality you’d expect from the author of Learning to Love Evernote and Learning to Love Photo Management.

You can find Bradley online via Twitter, ADN, and LinkedIn.

When was the last time you re-thought how you’re doing your WiFi?

Listen to this section on SoundCloud: 0:00

Gabe begins the episode by asking Erik a silly question about whether he has reconsidered how he does a thing – WiFi in this case.

Skype problems caused Erik’s most recent clean sweep and (as is so often the case in the world of tech) the new setup completely failed to solve his actual problem, but he liked it better anyway. Since this opens a can of worms, Gabe and Erik invited someone with both a broader and deeper knowledge of WiFi onto the show to help them dive deeper. Enter Bradley Chambers.

Mass per Unit Volume

This material is very dense and while the show doesn’t stray much, you can certainly tell this is a complicated subject when listening. The show notes here will occasionally fall down some of the rabbit holes that the hosts were able to avoid, but in general, I will also try to hit the high points, while offering some useful links that provide additional depth.

When Bradley started his IT job in 2009 or so, WiFi was not ubiquitous, but now it’s included in previously dumb household items, is the default network connection for television doohickeys, and shares its frequency with baby monitors and microwaves. This ubiquity means that WiFi tools and support for the protocol have never been better, but it has also spawned a host of interference and bandwidth challenges.

A firm foundation of what Wifi really is

Listen to this section on SoundCloud: 4:55

WiFi, in its most basic from, is very easy to understand: a wireless way to network computers. Reduced another step in tech complexity, WiFi just means “internet.”

Behind this simple veneer, however, there is immeasurable complexity. No one knows this better than Bradley Chambers, whose day job involves ensuring WiFi delivers the interwebs in the same automatic way that a faucet delivers water.

Water

Or in the same automatic way that a faucet delivers beer in the Weatherhead house

The keezer is near complete. pic.twitter.com/MGMATldF

— macdrifter (@macdrifter) February 2, 2013

A network hub is really just a dumb version of a network switch, the latter of which you may remember from the Ethernetworking episode of Technical Difficulties. The main difference between these two devices is that the hub rebroadcasts its signals, rather than trying to properly address its communication. When Bradley calls WiFi “hubs in the air,” this is the distinction. Wireless access points broadcast their signals omnidirectionally, so that all participating devices can “see” the signals.

2.4 vs 5

When we consider the transmission of individual ethernet frames for an increasing number of devices, the radio signal itself becomes important. In common use are both 2.4 GHz and 5 GHz.

Generally speaking, 2.4 is widely considered the “junk band” and can be compared to the lanes nearest merging onramps of a congested highway, while the 5 GHz band is like the passing lane. Continuing this traffic metaphor, the passing lane is faster when there aren’t too many cars in it, and since the 2.4 GHz band is the most commonly used industrial, scientific, and medical (ISM) bands, there is a lot of merging traffic. Even considering only WiFi traffic, 2.4 has an increased problem with Co-channel interference, because it is only 72 MHz wide, while the 5 GHz band is 910 MHz wide.

WLAN Channel Overlap

To beat up my metaphor a bit more, 5 GHz has more lanes. Also, note that a channel just refers to a small, 5 MHz segment of its respective band. It is much easier to say your WiFi router is on channel 11 rather than 2.462 GHz, and defining the segments in this way improves interoperability.

Congestion and interference aren’t the only reasons that 5 GHz is faster though. Since the 2.4 and 5 band represent the frequency of the carrier wave that the WiFi router is using to transmit its information, all else being equal, moving to the higher frequency band would carry information slightly more than twice as fast.


Correction

Shortly after going live with this episode, an error in this last paragraph was pointed out by Allen MacKenzie:

@macdrifter Same bandwidth with same noise/interference has same capacity, regardless of carrier frequency.

— Allen B. MacKenzie (@mackenab) January 5, 2014

Essentially, the question of speed boils down to how much information can be transmitted and received in a given period of time. Because these waves travel at the speed of light, the only way to convey more information per unit of time is to code more information into the carrier signal.

The informational capacity of a wave is defined by the bandwidth which is defined in this context as the difference between the higher and lower frequencies in a given set of frequencies. The set of frequencies in this case corresponds to a WiFi channel, and since both the 2.4 GHz and 5 GHz bands have channels that are 5 MHz wide, they have the same “storage capacity.”

That being said, modern equipment can pair multiple channels together, thereby increasing the available bandwidth and providing a speed benefit. These wider channels are more prone to interference, however, because there are more frequencies that can be affected. As discussed above, the 5 GHz band is less prone to interference and is therefore more able to support wider channels.

So… the 5 GHz band is faster. Easy, right?


One trade-off with a higher frequency signal is range. I am unqualified to talk about the physics involved here, but all waves are attenuated as they travel through a medium, but lower frequency waves can travel further before they are attenuated to an unusable level.

An illustration of an extreme extension of this principle in action is the communication with submarines using extremely low frequency waves, often using frequencies as low as 3 Hz which penetrate seawater to a submarine’s operating depths. You may want to use 2.4 GHz, even with all of its negatives, in an old house with lath-and-plaster walls, in order to get sufficient range. As Gabe notes, old houses can also resist Cat-6 cable installation in many creative ways.

Channels and Speed

We didn’t cover channel width because it doesn’t affect home users as much, but it does affect speeds. Learn more here. Channel width and QAM is very important in 802.11ac to see max speeds. Learn even more here.

Planning your network

Listen to this section on SoundCloud: 10:00

Very fancy hardware can also band steer and select the best band available, and dual-band routers are becoming pretty commonplace. You can really customize your wireless if you have ethernet everywhere.

“My rule is that everything that is stationary gets plugged in to ethernet”

Adding access points will increase the airtime available for other devices. Additionally, the available WiFi bandwidth won’t be limited by devices streaming data at a high bitrate.

Bradley has provided some very good guidance about the eventual transition to 802.11ac, but a lot of deals can be found on 802.11n hardware, and for most people, he recommends getting the older AirPort Extreme and an Airport Express.

If you want to do it all with one router, you can go the route Gabe did and leave the walled garden, which will allow you to buy huge antennas if you need more range.

Wirecutter says “Wait”

The Wirecutter has their “Best Wifi Router” – currently Gabe’s Asus RT-N66u – in its “Wait!” status due to current versions all being 802.11AC. As discussed in this show, there is not currently an obvious need to go AC, but if you are at all concerned about being future-proof (for a bit longer, at least), then it might be good to wait, if you are happy with your current setup.

For my part, this router has had an average price on Amazon of $144.95, but it was last at an historic low of $124.99 and is out of Amazon’s stock. This seems to indicate the end of the current part’s run, so I will also add the less-revered “potatowire Wait!” status to it.

Having multiple access points should allow effortless physical movement through the network’s coverage. This is sometimes called a roaming network, and is built in to enterprise hardware and Apple’s and other high-end consumer equipment.

WiFi Configuration Clarification

The best possible setup is to configure multiple access points, connected through Ethernet, and broadcasting on the same SSID. Most devices can then roam from one access point (AP) to another as needed. If you do this using Apple AirPort base stations connected by Ethernet, then setup is as easy as having them broadcast the same network SSID. Ideally they would broadcast on different channels.

Extending a network wirelessly by repeating the WiFi signal itself typically works in a hub-and-spoke model. Only one central base station’s transmission can be repeated, and while you can have multiple repeaters, they all are repeating the same signal. This has reduced throughput in most cases because the same antenna is used to transmit and receive. The alternative is to repeat with multiple APs or to utilize multiple-input and multiple-output (MIMO) technology, which has the same effect but is executed through the use of multiple antennas in a base station. Extending a network in either of these ways is called a mesh network, and you may remember this term from our Sonos episode.

  • If you have multiple access points connected by ethernet, it is easy to connect something like a File Transporter or other NAS, without worrying about how it affects your network’s speed.

Channels and Speed

At 20:45 in the show, I meant you can’t run Ethernet, not “WiFi,” though a Cambridge apartment.

  • As Erik alluded to, sometimes you can have a network whose strength goes to 11, and the FCC doesn’t have a very big investigative arm, does it?

Managing what you’ve got

Listen to this section on SoundCloud: 23:49

If you have a modern dual-band router you have the benefit of serving 802.11ac to some devices but also broadcasting a 802.11n signal to older devices. There are real benefits to this too.

If you have to extend your network wirelessly, you will likely notice the effect on speed on anything but newer 802.11ac equipment.

When you have visitors, you may only want to secure your own network while allowing them to share your bandwidth. It is worth checking how your router’s guest configuration works, beacuse it might steal some bandwidth from your main network. If so, it may only make sense to turn it on when you have guests.

AirPort Utility Guest Network Configuration

When it comes to uninvited guests on your network, we asked friend of the show Sean Korzdorfer for a quick security assessment.

Korzdorfer on WiFi Security

My default answer to any security question is: “It depends.” I know, it’s not what you want to hear. I have more bad news: most of what you know about security is probably wrong. It’s okay. It happens to everyone. The important thing to keep in mind is security is a balancing act between risk and convenience … And since we’re talking about home WiFi networks, let’s throw performance into the mix. Easy-Peasy. All I need to know is: What are you securing? Who do you trust? What are the threats to the first question? How new is your hardware? Does your ISP allow you admin privileges to their hardware? Do your kids have video game consoles / toys that connect to WiFi? Do you work from home? Do you stream video? Do you have lath and plaster walls? How creepy are your neighbors? Getting the idea?

Keeping Bad Guys Out Is the Easy Part
  • Change your router’s default login and password.
  • Password protect your network.
    • Don’t use WEP.
      • Unless you have old hardware that doesn’t support WPA2. (It’s better than nothing.)
    • Do use WPA2 Personal.
      • Yes, everyone behind the router is using a shared cryptographic key and can easily sniff each other’s packets. Good thing you’re sharing that password with people you trust.
      • Use a long password. Size matters.
      • Use a unique password.
  • Be wary of WiFi extenders.
    • Encryption is dependent upon the vendor.
    • Slower performance.
    • Flip side: easier and cheaper than running an Ethernet backbone.
  • MAC filtering will not protect anything.
  • Hiding your SSID is silly.
  • Understand: the most nefarious external attack a home network will (probably) have to withstand is harmless wardriving from a child’s video game.
It’s What on the Inside that Counts
  • The actual risk to your home network is an Insider Problem.
  • Not all developers use secure programming practices.
    • How many apps on your phone were developed by good people cutting their teeth on Objective-C?
      • Does their app call home?
      • What information are they transmitting?
      • Are they using HTTPS?
      • Are there any bugs that might create a vulnerability?
    • Use Little Snitch on your Mac.
  • Convenient Features Might Increase Risk.
    • Back to My Mac.
    • Air Drop.
    • File Sharing.
    • Internet Sharing.
    • Bluetooth Sharing.
    • Printer Sharing.
  • People are always the weakest link.
    • Do you share your network password with guests?
    • Do you have children who share your network password with friends?
    • Are you using a VPN for transmitting sensitive information or email?

I know, this can be a little overwhelming and scary. What if I told you there is no such thing as a secured network? Don’t panic. The good news is your personal data isn’t as valuable as you want to believe it is … And on the off chance you do have something worth committing a felony for, brute forcing your network password takes time and effort. I’d probably just break a window instead

Bradley bragged about Chattanooga’s internet access, and Gabe let us in on the fiery hatred for Comcast that burns within his soul

“I don’t even want their hardware touching my house”

IP address management is one of the tweaks that may be required in a heavily-networked home. DHCP can fail in some cases, and setting a static IP can help if you are noticing addressing conflicts. DNS settings are another area where you can customize the way your network runs. As Bradley mentioned, OpenDNS offers services to restrict some internet access.

Enterprise Concerns

Listen to this section on SoundCloud: 48:46

The old model of thin access points that rely on single controllers don’t allow the redundancy required by Enterprise, and the new models are very advanced and finely tuned to suit unique needs. Scalability is the specialty of companies like Aerohive and JAMF. It is probably out of your price range.

Producer’s Note

As Gabe mentioned, boiling tea can truly affect your WiFi, since most consumer microwaves operate at 2.45 GHz. Since this is in the heart of the 2.4 GHz band, it is only the microwave’s shielding that minimizes the effect. As was talked about in the audio, this is a radio frequency (RF) problem not a WiFi one. Moving to the 5 GHz band will help, but your best bet to reduce the effect of interference and also improve your available bandwidth is to expand your WiFi network using Cat-6 cable. When considering hardware, an AirPort Extreme paired with an AirPort Express or two is tough to beat. This will offer the most capable, yet easiest-to-use option for the average user.

TL;DR Version? WiFi is hard.

Well, that’s all for this week. If you have anything that you’d like to add to or correct in the show notes you can find me on Twitter @potatowire or feel free to send an email to me at potatowire dot com.

  continue reading

80 episodes

Artwork
iconShare
 

Archived series ("Inactive feed" status)

When? This feed was archived on November 11, 2020 01:30 (3+ y ago). Last successful fetch was on June 02, 2020 15:08 (4y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Manage episode 45859703 series 48367
Content provided by Technical Difficulties. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Technical Difficulties or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Bradley Chambers drops by to help Gabe and Erik understand how to make WiFi work in the home. Along the way they talk about the way wireless signals propagate and interfere, how to select the best hardware, and how to configure your router's software to ensure a secure and reliable wireless network.

Guest Spotlight: Bradley Chambers

Bradley Chambers

Producer’s Note

This week marks our second episode with a guest expert. Before we begin, here is a bit more about Bradley Chambers, this week’s guide to the tricky world of WiFi.

Bradley’s sparse Twitter bio sums him up as “Jesus follower, husband, father,” and that’s a good place to start. He lives in Chattanooga, TN with his wife and two sons and serves as Director of Information Technology for Brainerd Baptist School.

Bradley can be regularly heard on the Out of School podcast discussing educational technology with his co-host Fraser Speirs. He also blogs (not daily) at Chambers Daily and the content there is of the same high quality you’d expect from the author of Learning to Love Evernote and Learning to Love Photo Management.

You can find Bradley online via Twitter, ADN, and LinkedIn.

When was the last time you re-thought how you’re doing your WiFi?

Listen to this section on SoundCloud: 0:00

Gabe begins the episode by asking Erik a silly question about whether he has reconsidered how he does a thing – WiFi in this case.

Skype problems caused Erik’s most recent clean sweep and (as is so often the case in the world of tech) the new setup completely failed to solve his actual problem, but he liked it better anyway. Since this opens a can of worms, Gabe and Erik invited someone with both a broader and deeper knowledge of WiFi onto the show to help them dive deeper. Enter Bradley Chambers.

Mass per Unit Volume

This material is very dense and while the show doesn’t stray much, you can certainly tell this is a complicated subject when listening. The show notes here will occasionally fall down some of the rabbit holes that the hosts were able to avoid, but in general, I will also try to hit the high points, while offering some useful links that provide additional depth.

When Bradley started his IT job in 2009 or so, WiFi was not ubiquitous, but now it’s included in previously dumb household items, is the default network connection for television doohickeys, and shares its frequency with baby monitors and microwaves. This ubiquity means that WiFi tools and support for the protocol have never been better, but it has also spawned a host of interference and bandwidth challenges.

A firm foundation of what Wifi really is

Listen to this section on SoundCloud: 4:55

WiFi, in its most basic from, is very easy to understand: a wireless way to network computers. Reduced another step in tech complexity, WiFi just means “internet.”

Behind this simple veneer, however, there is immeasurable complexity. No one knows this better than Bradley Chambers, whose day job involves ensuring WiFi delivers the interwebs in the same automatic way that a faucet delivers water.

Water

Or in the same automatic way that a faucet delivers beer in the Weatherhead house

The keezer is near complete. pic.twitter.com/MGMATldF

— macdrifter (@macdrifter) February 2, 2013

A network hub is really just a dumb version of a network switch, the latter of which you may remember from the Ethernetworking episode of Technical Difficulties. The main difference between these two devices is that the hub rebroadcasts its signals, rather than trying to properly address its communication. When Bradley calls WiFi “hubs in the air,” this is the distinction. Wireless access points broadcast their signals omnidirectionally, so that all participating devices can “see” the signals.

2.4 vs 5

When we consider the transmission of individual ethernet frames for an increasing number of devices, the radio signal itself becomes important. In common use are both 2.4 GHz and 5 GHz.

Generally speaking, 2.4 is widely considered the “junk band” and can be compared to the lanes nearest merging onramps of a congested highway, while the 5 GHz band is like the passing lane. Continuing this traffic metaphor, the passing lane is faster when there aren’t too many cars in it, and since the 2.4 GHz band is the most commonly used industrial, scientific, and medical (ISM) bands, there is a lot of merging traffic. Even considering only WiFi traffic, 2.4 has an increased problem with Co-channel interference, because it is only 72 MHz wide, while the 5 GHz band is 910 MHz wide.

WLAN Channel Overlap

To beat up my metaphor a bit more, 5 GHz has more lanes. Also, note that a channel just refers to a small, 5 MHz segment of its respective band. It is much easier to say your WiFi router is on channel 11 rather than 2.462 GHz, and defining the segments in this way improves interoperability.

Congestion and interference aren’t the only reasons that 5 GHz is faster though. Since the 2.4 and 5 band represent the frequency of the carrier wave that the WiFi router is using to transmit its information, all else being equal, moving to the higher frequency band would carry information slightly more than twice as fast.


Correction

Shortly after going live with this episode, an error in this last paragraph was pointed out by Allen MacKenzie:

@macdrifter Same bandwidth with same noise/interference has same capacity, regardless of carrier frequency.

— Allen B. MacKenzie (@mackenab) January 5, 2014

Essentially, the question of speed boils down to how much information can be transmitted and received in a given period of time. Because these waves travel at the speed of light, the only way to convey more information per unit of time is to code more information into the carrier signal.

The informational capacity of a wave is defined by the bandwidth which is defined in this context as the difference between the higher and lower frequencies in a given set of frequencies. The set of frequencies in this case corresponds to a WiFi channel, and since both the 2.4 GHz and 5 GHz bands have channels that are 5 MHz wide, they have the same “storage capacity.”

That being said, modern equipment can pair multiple channels together, thereby increasing the available bandwidth and providing a speed benefit. These wider channels are more prone to interference, however, because there are more frequencies that can be affected. As discussed above, the 5 GHz band is less prone to interference and is therefore more able to support wider channels.

So… the 5 GHz band is faster. Easy, right?


One trade-off with a higher frequency signal is range. I am unqualified to talk about the physics involved here, but all waves are attenuated as they travel through a medium, but lower frequency waves can travel further before they are attenuated to an unusable level.

An illustration of an extreme extension of this principle in action is the communication with submarines using extremely low frequency waves, often using frequencies as low as 3 Hz which penetrate seawater to a submarine’s operating depths. You may want to use 2.4 GHz, even with all of its negatives, in an old house with lath-and-plaster walls, in order to get sufficient range. As Gabe notes, old houses can also resist Cat-6 cable installation in many creative ways.

Channels and Speed

We didn’t cover channel width because it doesn’t affect home users as much, but it does affect speeds. Learn more here. Channel width and QAM is very important in 802.11ac to see max speeds. Learn even more here.

Planning your network

Listen to this section on SoundCloud: 10:00

Very fancy hardware can also band steer and select the best band available, and dual-band routers are becoming pretty commonplace. You can really customize your wireless if you have ethernet everywhere.

“My rule is that everything that is stationary gets plugged in to ethernet”

Adding access points will increase the airtime available for other devices. Additionally, the available WiFi bandwidth won’t be limited by devices streaming data at a high bitrate.

Bradley has provided some very good guidance about the eventual transition to 802.11ac, but a lot of deals can be found on 802.11n hardware, and for most people, he recommends getting the older AirPort Extreme and an Airport Express.

If you want to do it all with one router, you can go the route Gabe did and leave the walled garden, which will allow you to buy huge antennas if you need more range.

Wirecutter says “Wait”

The Wirecutter has their “Best Wifi Router” – currently Gabe’s Asus RT-N66u – in its “Wait!” status due to current versions all being 802.11AC. As discussed in this show, there is not currently an obvious need to go AC, but if you are at all concerned about being future-proof (for a bit longer, at least), then it might be good to wait, if you are happy with your current setup.

For my part, this router has had an average price on Amazon of $144.95, but it was last at an historic low of $124.99 and is out of Amazon’s stock. This seems to indicate the end of the current part’s run, so I will also add the less-revered “potatowire Wait!” status to it.

Having multiple access points should allow effortless physical movement through the network’s coverage. This is sometimes called a roaming network, and is built in to enterprise hardware and Apple’s and other high-end consumer equipment.

WiFi Configuration Clarification

The best possible setup is to configure multiple access points, connected through Ethernet, and broadcasting on the same SSID. Most devices can then roam from one access point (AP) to another as needed. If you do this using Apple AirPort base stations connected by Ethernet, then setup is as easy as having them broadcast the same network SSID. Ideally they would broadcast on different channels.

Extending a network wirelessly by repeating the WiFi signal itself typically works in a hub-and-spoke model. Only one central base station’s transmission can be repeated, and while you can have multiple repeaters, they all are repeating the same signal. This has reduced throughput in most cases because the same antenna is used to transmit and receive. The alternative is to repeat with multiple APs or to utilize multiple-input and multiple-output (MIMO) technology, which has the same effect but is executed through the use of multiple antennas in a base station. Extending a network in either of these ways is called a mesh network, and you may remember this term from our Sonos episode.

  • If you have multiple access points connected by ethernet, it is easy to connect something like a File Transporter or other NAS, without worrying about how it affects your network’s speed.

Channels and Speed

At 20:45 in the show, I meant you can’t run Ethernet, not “WiFi,” though a Cambridge apartment.

  • As Erik alluded to, sometimes you can have a network whose strength goes to 11, and the FCC doesn’t have a very big investigative arm, does it?

Managing what you’ve got

Listen to this section on SoundCloud: 23:49

If you have a modern dual-band router you have the benefit of serving 802.11ac to some devices but also broadcasting a 802.11n signal to older devices. There are real benefits to this too.

If you have to extend your network wirelessly, you will likely notice the effect on speed on anything but newer 802.11ac equipment.

When you have visitors, you may only want to secure your own network while allowing them to share your bandwidth. It is worth checking how your router’s guest configuration works, beacuse it might steal some bandwidth from your main network. If so, it may only make sense to turn it on when you have guests.

AirPort Utility Guest Network Configuration

When it comes to uninvited guests on your network, we asked friend of the show Sean Korzdorfer for a quick security assessment.

Korzdorfer on WiFi Security

My default answer to any security question is: “It depends.” I know, it’s not what you want to hear. I have more bad news: most of what you know about security is probably wrong. It’s okay. It happens to everyone. The important thing to keep in mind is security is a balancing act between risk and convenience … And since we’re talking about home WiFi networks, let’s throw performance into the mix. Easy-Peasy. All I need to know is: What are you securing? Who do you trust? What are the threats to the first question? How new is your hardware? Does your ISP allow you admin privileges to their hardware? Do your kids have video game consoles / toys that connect to WiFi? Do you work from home? Do you stream video? Do you have lath and plaster walls? How creepy are your neighbors? Getting the idea?

Keeping Bad Guys Out Is the Easy Part
  • Change your router’s default login and password.
  • Password protect your network.
    • Don’t use WEP.
      • Unless you have old hardware that doesn’t support WPA2. (It’s better than nothing.)
    • Do use WPA2 Personal.
      • Yes, everyone behind the router is using a shared cryptographic key and can easily sniff each other’s packets. Good thing you’re sharing that password with people you trust.
      • Use a long password. Size matters.
      • Use a unique password.
  • Be wary of WiFi extenders.
    • Encryption is dependent upon the vendor.
    • Slower performance.
    • Flip side: easier and cheaper than running an Ethernet backbone.
  • MAC filtering will not protect anything.
  • Hiding your SSID is silly.
  • Understand: the most nefarious external attack a home network will (probably) have to withstand is harmless wardriving from a child’s video game.
It’s What on the Inside that Counts
  • The actual risk to your home network is an Insider Problem.
  • Not all developers use secure programming practices.
    • How many apps on your phone were developed by good people cutting their teeth on Objective-C?
      • Does their app call home?
      • What information are they transmitting?
      • Are they using HTTPS?
      • Are there any bugs that might create a vulnerability?
    • Use Little Snitch on your Mac.
  • Convenient Features Might Increase Risk.
    • Back to My Mac.
    • Air Drop.
    • File Sharing.
    • Internet Sharing.
    • Bluetooth Sharing.
    • Printer Sharing.
  • People are always the weakest link.
    • Do you share your network password with guests?
    • Do you have children who share your network password with friends?
    • Are you using a VPN for transmitting sensitive information or email?

I know, this can be a little overwhelming and scary. What if I told you there is no such thing as a secured network? Don’t panic. The good news is your personal data isn’t as valuable as you want to believe it is … And on the off chance you do have something worth committing a felony for, brute forcing your network password takes time and effort. I’d probably just break a window instead

Bradley bragged about Chattanooga’s internet access, and Gabe let us in on the fiery hatred for Comcast that burns within his soul

“I don’t even want their hardware touching my house”

IP address management is one of the tweaks that may be required in a heavily-networked home. DHCP can fail in some cases, and setting a static IP can help if you are noticing addressing conflicts. DNS settings are another area where you can customize the way your network runs. As Bradley mentioned, OpenDNS offers services to restrict some internet access.

Enterprise Concerns

Listen to this section on SoundCloud: 48:46

The old model of thin access points that rely on single controllers don’t allow the redundancy required by Enterprise, and the new models are very advanced and finely tuned to suit unique needs. Scalability is the specialty of companies like Aerohive and JAMF. It is probably out of your price range.

Producer’s Note

As Gabe mentioned, boiling tea can truly affect your WiFi, since most consumer microwaves operate at 2.45 GHz. Since this is in the heart of the 2.4 GHz band, it is only the microwave’s shielding that minimizes the effect. As was talked about in the audio, this is a radio frequency (RF) problem not a WiFi one. Moving to the 5 GHz band will help, but your best bet to reduce the effect of interference and also improve your available bandwidth is to expand your WiFi network using Cat-6 cable. When considering hardware, an AirPort Extreme paired with an AirPort Express or two is tough to beat. This will offer the most capable, yet easiest-to-use option for the average user.

TL;DR Version? WiFi is hard.

Well, that’s all for this week. If you have anything that you’d like to add to or correct in the show notes you can find me on Twitter @potatowire or feel free to send an email to me at potatowire dot com.

  continue reading

80 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Quick Reference Guide