1. Attachments are working again! Check out this thread for more details and to report any other bugs.

New Internet service -- some simple (?) advice?

Discussion in 'Fred's House of Pancakes' started by Stevewoods, Jun 28, 2020.

  1. Montgomery

    Montgomery Senior Member

    Joined:
    Sep 11, 2015
    2,254
    2,233
    2
    Location:
    Orange County, CA
    Vehicle:
    2015 Prius
    Model:
    Two
     
  2. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    I hit heavy pre-holiday traffic slowdowns on I-90 Sunday across Snoqualmie Pass, but the WSDOT traffic maps shows no repeat today.

    I suppose some of it could repeat this coming Sunday.
     
  3. Mark57

    Mark57 2021 Tesla Model 3 LR AWD

    Joined:
    Aug 14, 2009
    2,945
    2,735
    0
    Location:
    OK
    Vehicle:
    Other Electric Vehicle
    Model:
    N/A
    You say "only OTA" as if you have something bad. Today's OTA is not the OTA of old you remember. Digital OTA sends a very high resolution picture with no compression applied to the signal. Cable has good bandwidth until they cram all those extra channels into the same size pipe so they have to compress it. A digital OTA signal will beat cable or satellite and a lot of streaming content much of the time. Tie that good OTA signal to a good TV screen and you're set.

    My OTA reception here is just as sharp as 1080p BluRay on my 4K TV. Don't knock OTA.
     
    jerrymildred and Mendel Leisk like this.
  4. AzusaPrius

    AzusaPrius Senior Member

    Joined:
    May 27, 2020
    1,666
    768
    0
    Location:
    California
    Vehicle:
    2010 Prius
    Model:
    IV
    This is why the password should be changed. Anyone with the knowhow can drive around like you did with their laptop and brute force a bunch of stock passwords that netgear uses and bam they are in!!!

    Posted via the PriusChat mobile app.
     
  5. Trollbait

    Trollbait It's a D&D thing

    Joined:
    Feb 7, 2006
    21,720
    11,316
    0
    Location:
    eastern Pennsylvania
    Vehicle:
    Other Non-Hybrid
    But how many stock passwords are there? The one that was on my netgear router had a three digit number; that's a thousand versions for just that one password. The handshaking before checking the password takes time on its own. it number low enough that someone could test them all while slowly driving by, or will they have to park, and possibly be noticed?
     
  6. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    But "stock" contradicts the "unique individually assigned password" claim. If each unit has a unique password, then a hacker needs the full factory list of passwords assigned to every unit, a list as long as the total number of units manufactured.
    Though not Netgear, the factory password on my unit is a random-looking string of 26 alphanumeric characters. While the algorithm used to generate it was likely not truly random, it seems unlikely that a full password list is short enough for an ordinary driveby brute force attack from a known master list.
     
  7. Trollbait

    Trollbait It's a D&D thing

    Joined:
    Feb 7, 2006
    21,720
    11,316
    0
    Location:
    eastern Pennsylvania
    Vehicle:
    Other Non-Hybrid
    The Verizon unit had the random characters. Netgear uses a phrase that the typical user has a chance of remembering.
     
  8. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    [emphasis added]

    While OTA signals can be very good, even they are compressed. The HD raw video ~500Mb/s bitrate must be compressed in order to fit the FCC-permitted OTA channel bandwidth.

    While I've been out of that loop a long time, a quick refresher finds the OTA ATSC channel bandwidth as 19.39 Mb/s. DVDs can do about 10 MB/s, regular Blu-Ray 36-48 MB/s, and Ultra Blu-Ray of 128 Mb/s for 4K.

    I'm not a cable subscriber, so haven't had to deal with their often narrower pipes.
     
    #48 fuzzy1, Jul 4, 2020
    Last edited: Jul 4, 2020
    Mark57 likes this.
  9. Stevewoods

    Stevewoods Senior Member

    Joined:
    Jun 10, 2014
    647
    983
    0
    Location:
    Seattle, WA
    Vehicle:
    2008 Prius
    Model:
    II
    The assigned password was 15 total "characters," I think.
    There were two common dictionary words, which would not normally be associated together, but were amazingly easy to remember, so I know the first 11 characters of the password without even trying to memorize them. Then four random numbers (O.K>, maybe five), that I can't remember.

    I think it is pretty secure. Considering I set up my Washington system some 15 or so years ago to require no password at all....Of course, I have no neighbors. At least not for a 3/4 of a mile or so.
     
  10. AzusaPrius

    AzusaPrius Senior Member

    Joined:
    May 27, 2020
    1,666
    768
    0
    Location:
    California
    Vehicle:
    2010 Prius
    Model:
    IV
    They would be parked and with todays programs they can even do it with an android phone. Thats what could and can happen but will it happen to you, who knows?

    Posted via the PriusChat mobile app.
     
  11. AzusaPrius

    AzusaPrius Senior Member

    Joined:
    May 27, 2020
    1,666
    768
    0
    Location:
    California
    Vehicle:
    2010 Prius
    Model:
    IV
    I said stock but meaning default passwords from netgear are leaked and used in this very manner. I could do if I went to his house as a proof of concept.

    Posted via the PriusChat mobile app.
     
  12. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    This still contradicts the earlier claim of each individual unit having its own unique password from the factory.

    Is the leaked list tens of millions of items long?
     
    cyberpriusII likes this.
  13. AzusaPrius

    AzusaPrius Senior Member

    Joined:
    May 27, 2020
    1,666
    768
    0
    Location:
    California
    Vehicle:
    2010 Prius
    Model:
    IV
    Yes and a program runs through it in minutes until it cracks it and gets in.

    Posted via the PriusChat mobile app.
     
  14. ETC(SS)

    ETC(SS) The OTHER One Percenter.....

    Joined:
    Oct 28, 2010
    7,673
    6,492
    0
    Location:
    Redneck Riviera (Gulf South)
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    Don't get wrapped around the axle on the security thing, but do consider changing (and hiding) the SSID and change the router [sic] password.....because it's written down somewhere else besides the side of your box....and it IS (usually) written down on the side of your box.
    You'd be surprised at how many people put those things in a home office by a window..... ;)

    The big kids are getting away from special characters, numbers, and capitalization - all of which only make your password more likely to be written down.
    If you jam two or more disassociated words together (sometimes called a passphrase) it will create a password that's long enough to prevent brute-force methods (easily) but easy to remember.
    example:
    iusedtohaveafootballbat

    Also....if they ask some security questions (what was your first car?) it's best NOT to tell them about that 1956 Hudson Wasp.
    I always use try to use only one or two non-related words for security questions:
    example:
    Where did you meet your wife?
    footballbat
    Don't make it harder than it has to be though, because if you're in a non-urban setting (like I used to be) then folks parking within WiFi slurping distance stick out a little and bear investigation.

    ...and if you're a city-slicker then you're in the herd.
    The slime-balls are going to pick a slower gazelle.


    Besides.....most of the jackwaddery occurs from your ISP-out and your ISP DOES COLLECT info on you.
    ALL of it.

    K.I.S.S.
     
    AzusaPrius likes this.
  15. cyberpriusII

    cyberpriusII Prodigyplace says I'm Super Kris

    Joined:
    Oct 1, 2009
    1,135
    1,560
    0
    Location:
    Iowa
    Vehicle:
    2008 Prius
    Model:
    N/A
    Uh, what's a router and what's a modem. OK. not quite that ignorant. But, all I have is DSL and I also have no password for my box. But someone would really have to fight to get in range of my system....
    kris
     
  16. Trollbait

    Trollbait It's a D&D thing

    Joined:
    Feb 7, 2006
    21,720
    11,316
    0
    Location:
    eastern Pennsylvania
    Vehicle:
    Other Non-Hybrid
    Those wolves might have smart collars.
     
    fuzzy1, jerrymildred and cyberpriusII like this.
  17. sam spade 2

    sam spade 2 Senior Member

    Joined:
    Mar 31, 2018
    7,035
    2,782
    0
    Location:
    USA
    Vehicle:
    2017 Prius c
    Model:
    Four
    IF......you are using a wireless connection (WiFi) then you really should enable a password.
    Once each of your devices "knows" the password they will not ask you for it again.

    If you have WiFi turned off and are using only a wired connection........then you are good to go.
     
  18. ETC(SS)

    ETC(SS) The OTHER One Percenter.....

    Joined:
    Oct 28, 2010
    7,673
    6,492
    0
    Location:
    Redneck Riviera (Gulf South)
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    Sam's right.
    Even if it's hundreds of yards to the street, and you have a pack of inquisitive pooches in the front yard, it would not be impossible to pick off your signal with a specialized antenna.

    You should also strongly consider changing the SSID since some of these will reveal the make and model of wireless access point [router] you are using.

    Have some fun with it.
    I names one of mine something like
    "DOJ-surv-121"
     
    AzusaPrius likes this.
  19. Mark57

    Mark57 2021 Tesla Model 3 LR AWD

    Joined:
    Aug 14, 2009
    2,945
    2,735
    0
    Location:
    OK
    Vehicle:
    Other Electric Vehicle
    Model:
    N/A
    One of mine is "Connecting" . . . . . guaranteed to confuse the unwashed.

    I saw a lot of very interesting and "NSFW" SSID's back when I was war driving. ;)
     
    AzusaPrius likes this.
  20. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    We already know that a non-trespassing snoop is going to need to do it from more than a thousand yards away. And that 'street' seems likely to be a very low traffic dead-end road, not an anonymous through-traffic street. So the snoop will need a 20-ish dBi antenna and/or a lot of power. And maybe some latency adjustments in the router itself.

    I left my dad's wifi access point without a password because the nearest line-of-sight attack, from a non-trespassing non-suspicious location, is over two thousand yards distant. A few homes are closer, but over an obstructing ridge. And this is in a place much more populated than where Kris has hinted at being.

    Now if I get around to putting in a wifi weather monitoring station (for Weather Underground) out in a field where it needs service from a long range flat panel antenna, then I definitely will turn on the password protection.