India Broadband Forum

Ravichang

Hi, I have a bsnl connection with type 2 modem (UTSTARCOM modem ) which has wifi feature. My desktop is currently connected to the modem using ethernet cable and i m not using the wifi. So, for security purpose i disabled WLAN facility on my modem and i have changed my network access key and have used WPA2 + PSK security along with AES encryption and i have also changed my SSID name to a different name from the default name.

does this ensure protection against wifi hacking ?

If at all i need to use the wifi then by using WPA2+PSK security will ensure security?

Also how do i change my modem username/password to something different from the existing default values - admin/admin. when i go to modem homepage (192.168.1.1) there is no option to change username and password. Can u guys please tell me how do i do it.

Thank u.

just4kix

To change router password, check somewhere in sections such as "Tools", "Administration", etc.

Ravichang

Hey i will check on that. Thank u.


But what about the first question about security, Can u answer that please.

shriniketsarkar

Well actually even though you have enabled WPA2+PSK security password its not safe.
There are methods which can reveal your encrypted password.
Hence its never safe.And it never will be.
Using a machine running linux we can get password after some research.
It will not be nice to discuss all those things because it will not amount to an ethical talk.
Anyways the best you can do is keep checking your usage on a daily basis .
So that you can monitor of any unauthorized usage.
Also keep changing your passkey often and use a passkey as long as possible.I mean use phrases which you can remember.
Regards,
Shriniket Sarkar

just4kix

There is no security that cannot be hacked. But if you read my "Wireless Security Primers" and going by the security that you have implemented, it should be sufficient enough. The key things are:

- make router administration password long and strong (at least 10-15 chars with a helathy mix of uppercase & lowecase letters, numbers, special characters, etc.)
- same thing applies to TKIP passphrase. Since passphrase is stored in the computer registry and needs to be entered first time only, make it really long - 40 chars or more.
- do not use your name, names of immediate relatives, dates, house numbers, etc. in passwords
- you can disable SSID braodcast
- change the private LAN IP of wireless router from default (192.168.1.1) to something else (unguessable) such as 78.104.82.1 (always keep the last digit as '1')

There are enough articles on password security on the net.

__________________