Go Back   Wireless and Wifi Forums > News > Newsgroups > comp.security.misc
Register FAQ Forum Rules Members List Calendar Search Today's Posts Advertise Mark Forums Read

 
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 12-12-2011, 08:03 PM
A. Deguza
Guest
 
Posts: n/a
Default Which is more secure: wireless connection versus ethernet?

Hello All:

At home when I am doing banking I use an ethernet cable to connect to
Internet and disable my laptop's wi-fi connection.

A friend told ne that I do have to worry about security on modern wi-
fi.

Is he right?

Thanks,

Deguza


Reply With Quote
  #2 (permalink)  
Old 12-12-2011, 09:56 PM
Alan J Rosenthal
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

In either case the most likely route of security compromise is malware you
have installed on your computer. Or the bogus alerts allegedly from your bank
which you click on in your e-mail program.

-- aj "MAKE.VIRUS.FAST" r

Reply With Quote
  #3 (permalink)  
Old 12-12-2011, 10:49 PM
unruh
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

On 2011-12-12, A. Deguza <deguza@hotmail.com> wrote:
> Hello All:
>
> At home when I am doing banking I use an ethernet cable to connect to
> Internet and disable my laptop's wi-fi connection.
>
> A friend told ne that I do have to worry about security on modern wi-
> fi.
>
> Is he right?


Perhaps. It depends. (did you mean "do not" in there, since it seems
like you and your friend agree)

>
> Thanks,
>
> Deguza
>


Reply With Quote
  #4 (permalink)  
Old 12-13-2011, 04:42 AM
Thor Kottelin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

"A. Deguza" <deguza@hotmail.com> wrote in message
news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...

> A friend told ne that I do have to worry about security on modern wi-
> fi.


Vulnerabilities in WLAN technology have been found over the years.
Similarly, what is now considered modern may become obsolete as research
continues. If you use Ethernet rather than a WLAN, someone may be able to
sniff your traffic off the wire instead, but this may be easier to prevent
and detect.

One always has to worry about security and choose the most appropriate
risk exposure under one's particular circumstances.

--
Thor Kottelin
http://www.anta.net/


Reply With Quote
  #5 (permalink)  
Old 12-13-2011, 07:35 AM
Barry Margolin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
"Thor Kottelin" <thor@anta.net> wrote:

> "A. Deguza" <deguza@hotmail.com> wrote in message
> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...
>
> > A friend told ne that I do have to worry about security on modern wi-
> > fi.

>
> Vulnerabilities in WLAN technology have been found over the years.
> Similarly, what is now considered modern may become obsolete as research
> continues. If you use Ethernet rather than a WLAN, someone may be able to
> sniff your traffic off the wire instead, but this may be easier to prevent
> and detect.


Wouldn't they need physical access to your home to sniff the Ethernet?

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

Reply With Quote
  #6 (permalink)  
Old 12-13-2011, 08:06 AM
Thor Kottelin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

"Barry Margolin" <barmar@alum.mit.edu> wrote in message
news:barmar-57713C.03351013122011@news.eternal-september.org...
> In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
> "Thor Kottelin" <thor@anta.net> wrote:


>> Vulnerabilities in WLAN technology have been found over the years.
>> Similarly, what is now considered modern may become obsolete as
>> research
>> continues. If you use Ethernet rather than a WLAN, someone may be able
>> to
>> sniff your traffic off the wire instead, but this may be easier to
>> prevent
>> and detect.

>
> Wouldn't they need physical access to your home to sniff the Ethernet?


Yes, at least once.

(Wire sniffing may be more difficult to prevent and detect outside the
home, such as between the home and the house MDF, but that is, of course,
irrelevant in terms of the WLAN/Ethernet comparison.)

--
Thor Kottelin
http://www.anta.net/


Reply With Quote
  #7 (permalink)  
Old 12-13-2011, 08:14 AM
Thor Kottelin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

"Thor Kottelin" <thor@anta.net> wrote in message
news:GAEFq.493$SP1.32@uutiset.elisa.fi...
> "Barry Margolin" <barmar@alum.mit.edu> wrote in message
> news:barmar-57713C.03351013122011@news.eternal-september.org...
>> In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
>> "Thor Kottelin" <thor@anta.net> wrote:

>
>>> Vulnerabilities in WLAN technology have been found over the years.
>>> Similarly, what is now considered modern may become obsolete as
>>> research
>>> continues. If you use Ethernet rather than a WLAN, someone may be able
>>> to
>>> sniff your traffic off the wire instead, but this may be easier to
>>> prevent
>>> and detect.

>>
>> Wouldn't they need physical access to your home to sniff the Ethernet?

>
> Yes, at least once.
>
> (Wire sniffing may be more difficult to prevent and detect outside the
> home, such as between the home and the house MDF, but that is, of
> course, irrelevant in terms of the WLAN/Ethernet comparison.)


Oh, and since the OP mentioned banking: using an end-to-end-encrypted
(https)connection to an authenticated (certificate checks out) bank
website would obviously provide increased security.

--
Thor Kottelin
http://www.anta.net/


Reply With Quote
  #8 (permalink)  
Old 12-13-2011, 08:15 AM
Casper H.S. Dik
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

"Thor Kottelin" <thor@anta.net> writes:

>"A. Deguza" <deguza@hotmail.com> wrote in message
>news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...


>> A friend told ne that I do have to worry about security on modern wi-
>> fi.


>Vulnerabilities in WLAN technology have been found over the years.
>Similarly, what is now considered modern may become obsolete as research
>continues. If you use Ethernet rather than a WLAN, someone may be able to
>sniff your traffic off the wire instead, but this may be easier to prevent
>and detect.


Note that the traffic goes over the write at one point anyway; In principle,
Internet Banking will use SSL and as such it doesn't really matter if
the traffic can be intercepted.

The bigger risk is malware, phishing, as noted, and also how well the
certificate authorities do their work.

Casper
--

Reply With Quote
  #9 (permalink)  
Old 12-13-2011, 04:27 PM
unruh
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
> In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
> "Thor Kottelin" <thor@anta.net> wrote:
>
>> "A. Deguza" <deguza@hotmail.com> wrote in message
>> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...
>>
>> > A friend told ne that I do have to worry about security on modern wi-
>> > fi.

>>
>> Vulnerabilities in WLAN technology have been found over the years.
>> Similarly, what is now considered modern may become obsolete as research
>> continues. If you use Ethernet rather than a WLAN, someone may be able to
>> sniff your traffic off the wire instead, but this may be easier to prevent
>> and detect.

>
> Wouldn't they need physical access to your home to sniff the Ethernet?
>


Nope. If you are cable, then apparently your traffic is open to anyone
else on that cable as well. One of the advantages, I suppose, of ADSL
over cable. (Here in vancouver, bad service seems to be another
"advantage" of ADSL).


Reply With Quote
  #10 (permalink)  
Old 12-13-2011, 04:49 PM
Thor Kottelin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

"unruh" <unruh@invalid.ca> wrote in message
news:OVLFq.25438$cN1.5960@newsfe12.iad...
> On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
>> In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
>> "Thor Kottelin" <thor@anta.net> wrote:
>>
>>> "A. Deguza" <deguza@hotmail.com> wrote in message
>>> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...
>>>
>>> > A friend told ne that I do have to worry about security on modern
>>> > wi-
>>> > fi.
>>>
>>> Vulnerabilities in WLAN technology have been found over the years.
>>> Similarly, what is now considered modern may become obsolete as
>>> research
>>> continues. If you use Ethernet rather than a WLAN, someone may be able
>>> to
>>> sniff your traffic off the wire instead, but this may be easier to
>>> prevent
>>> and detect.

>>
>> Wouldn't they need physical access to your home to sniff the Ethernet?


> Nope. If you are cable, then apparently your traffic is open to anyone
> else on that cable as well.


However, if the OP uses a cable modem for all his or her Internet traffic,
cable-related threats do not matter when comparing Ethernet to WLAN in the
home.

Of course, Ethernet frames could also be sniffed e.g. by an ISP or IX at
their facilities.

--
Thor Kottelin
http://www.anta.net/


Reply With Quote
  #11 (permalink)  
Old 12-13-2011, 07:33 PM
Barry Margolin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

In article <OVLFq.25438$cN1.5960@newsfe12.iad>,
unruh <unruh@invalid.ca> wrote:

> On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
> > In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
> > "Thor Kottelin" <thor@anta.net> wrote:
> >
> >> "A. Deguza" <deguza@hotmail.com> wrote in message
> >> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...
> >>
> >> > A friend told ne that I do have to worry about security on modern wi-
> >> > fi.
> >>
> >> Vulnerabilities in WLAN technology have been found over the years.
> >> Similarly, what is now considered modern may become obsolete as research
> >> continues. If you use Ethernet rather than a WLAN, someone may be able to
> >> sniff your traffic off the wire instead, but this may be easier to prevent
> >> and detect.

> >
> > Wouldn't they need physical access to your home to sniff the Ethernet?
> >

>
> Nope. If you are cable, then apparently your traffic is open to anyone
> else on that cable as well. One of the advantages, I suppose, of ADSL
> over cable. (Here in vancouver, bad service seems to be another
> "advantage" of ADSL).


That's the WAN, which is the same regardless of which LAN technology you
use. We're comparing security of LAN architectures.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

Reply With Quote
  #12 (permalink)  
Old 12-13-2011, 09:06 PM
unruh
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
> In article <OVLFq.25438$cN1.5960@newsfe12.iad>,
> unruh <unruh@invalid.ca> wrote:
>
>> On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
>> > In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
>> > "Thor Kottelin" <thor@anta.net> wrote:
>> >
>> >> "A. Deguza" <deguza@hotmail.com> wrote in message
>> >> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com...
>> >>
>> >> > A friend told ne that I do have to worry about security on modern wi-
>> >> > fi.
>> >>
>> >> Vulnerabilities in WLAN technology have been found over the years.
>> >> Similarly, what is now considered modern may become obsolete as research
>> >> continues. If you use Ethernet rather than a WLAN, someone may be able to
>> >> sniff your traffic off the wire instead, but this may be easier to prevent
>> >> and detect.
>> >
>> > Wouldn't they need physical access to your home to sniff the Ethernet?
>> >

>>
>> Nope. If you are cable, then apparently your traffic is open to anyone
>> else on that cable as well. One of the advantages, I suppose, of ADSL
>> over cable. (Here in vancouver, bad service seems to be another
>> "advantage" of ADSL).

>
> That's the WAN, which is the same regardless of which LAN technology you
> use. We're comparing security of LAN architectures.


We are? Exactly what in the OP post gave you that idea?

For most people they really do not care where they got hacked. And for
most people, they use the LAN almost exclusively to access the WAN.
>


Reply With Quote
  #13 (permalink)  
Old 12-14-2011, 02:55 AM
Alan J Rosenthal
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

unruh <unruh@invalid.ca> writes:
>On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
>> Wouldn't they need physical access to your home to sniff the Ethernet?


(or just compromise a machine of yours which is already on that same ethernet,
but anyway...)

>Nope. If you are cable, then apparently your traffic is open to anyone
>else on that cable as well.


Something which bears remembering is that when you don't see certain traffic
on certain wires, that's a bandwidth optimization, not a security guarantee.
The smartest ethernet switch has no choice when seeing a packet addressed to
an unknown MAC address but to send it down all wires. So long as it doesn't
do this too often, it's meeting the bandwidth optimization objectives.
But one shouldn't rely on it for security, if possible.

Reply With Quote
  #14 (permalink)  
Old 12-14-2011, 06:06 AM
Barry Margolin
Guest
 
Posts: n/a
Default Re: Which is more secure: wireless connection versus ethernet?

In article <h%PFq.15606$cG.14572@newsfe14.iad>,
unruh <unruh@invalid.ca> wrote:

> On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
> > In article <OVLFq.25438$cN1.5960@newsfe12.iad>,
> > unruh <unruh@invalid.ca> wrote:
> >
> >> On 2011-12-13, Barry Margolin <barmar@alum.mit.edu> wrote:
> >> > In article <0BBFq.481$SP1.157@uutiset.elisa.fi>,
> >> > "Thor Kottelin" <thor@anta.net> wrote:
> >> >
> >> >> "A. Deguza" <deguza@hotmail.com> wrote in message
> >> >> news:23888bc9-90e9-4a63-b391-68dfee867d38@f39g2000yqn.googlegroups.com..
> >> >> .
> >> >>
> >> >> > A friend told ne that I do have to worry about security on modern wi-
> >> >> > fi.
> >> >>
> >> >> Vulnerabilities in WLAN technology have been found over the years.
> >> >> Similarly, what is now considered modern may become obsolete as
> >> >> research
> >> >> continues. If you use Ethernet rather than a WLAN, someone may be able
> >> >> to
> >> >> sniff your traffic off the wire instead, but this may be easier to
> >> >> prevent
> >> >> and detect.
> >> >
> >> > Wouldn't they need physical access to your home to sniff the Ethernet?
> >> >
> >>
> >> Nope. If you are cable, then apparently your traffic is open to anyone
> >> else on that cable as well. One of the advantages, I suppose, of ADSL
> >> over cable. (Here in vancouver, bad service seems to be another
> >> "advantage" of ADSL).

> >
> > That's the WAN, which is the same regardless of which LAN technology you
> > use. We're comparing security of LAN architectures.

>
> We are? Exactly what in the OP post gave you that idea?


He said "don't need to worry about security on modern WiFi". That
implies to me that he's concerned with the security difference between
WiFi and the alternative, which is wired Ethernet.

There may indeed be security issues with the WAN, but that's independent
of the use of WiFi.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Don't fall victim to the 'Free Wi-Fi' scam Ablang alt.internet.wireless 6 05-19-2011 02:38 PM
Wireless 101, Day One Mark Oney How Tos 1 11-06-2009 01:37 PM
Wireless connection OK, but cant connect via ethernet? mal79 Network Troubleshooting 2 11-10-2008 09:45 AM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 10-19-2005 04:37 AM
Hacking attempt? MoNk Wireless Networking Discussion 1 05-11-2005 09:21 AM


All times are GMT. The time now is 08:48 PM.



Powered by vBulletin® Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 PL2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45