Thanks, Jeff. I was just discussing the same issues with a friend of
mine.

Disabling the broadcast of SSID makes sense to me. Not that I am
totally relying on this feature for my overall network security, I
have WPA2 enabled for that. I feel that if my neighbour, a complete
novice, turns on his laptop and sees my network, although he is unable
to do any harm but he can let other people know that a network xyz
exists. And by word of mouth it can reach a knowledgable hacker. For
example, in my area everyone can see the network of the local council.
This means that everyone knows there is a network there to hack into.
I don't want anyone to know the existence of my wireless lan apart
from a couple of machines that I use at home. Even if I have to
sacrifice a bit of performance as a result.

Totally understand your point on IAPP.

Regarding MAC address filtering, my point of view is that even though
it is easy to hack into but at least it is bit of an effort. Again,
performance is not an issue here and I don't get too many people
visiting me with their laptops every day.

Thanks ever so much for explaining fast roaming.

Regards
Yousaf