我要回覆

My Airport Express has been hacked by unknown neighbor

tkpmg

0分

樓主

tkpmg

個人積分：0分

文章編號：6719462

Sorry, 我的中文打的非常吃力,Thanks a million for your good advice.

我之前base station確實與WIFI 使用相同的密碼, 所以被kidnapped 兩次, 但是我已學乖了. password for base station has been changed to 31 digits (random)

至於 mac address filtering 被破, 我真的不知所措, 一山還比一山高.

我會 try your suggestion tonight.

Thanks again.

Tim Kuo

jinmingc

10分

12樓

jinmingc

個人積分：10分

文章編號：6719787

根據之前學的粗淺的網路加密技術學，
要從正面破解真的不是很容易，
我也覺得被從後面攻的機會比較高，
或者自己不小心開了後門。
要用猜的或是暴力解法，實在都不是想像中的容易，

我倒是覺得可以試試找另一部AP(當然可能需要朋友支援或是要花點錢買部便宜的可支援MAC)
在外地(像是公司)先設定好密碼，
在帶回你家接上去上網，
如果對方仍能侵入你的網路，
我想九成就是您的電腦開後門了。
說真的真的不太相信是從正門衝進去的，
如果就不行了，那我覺得短時間先不要用你的Airport Express吧，
隔一陣子不用，對方應該能"瞭解"你已經發現被入侵的事情，
如果有點水準的人應該是會收手免得難看。
基本上我蠻贊同skychy大大的分析的，
我覺得要杜絕這種攻擊並不難，只是您短時間內不要一直嘗試用一樣的方式(硬體)，
因為對方顯然是清楚你目前的架構。

另外，我通常怕被佔用無線網路的話，
會限定IP address，也就是說，假設家裡只有兩部電腦上網，
我就限定兩個IP，而且鎖定IP，(固定IP，不要用DHCP方式)
對方還得知道你的IP才能連上咧。而且對方一佔用IP馬上會有警覺。

不過，小弟都是用windows，沒用過MAC，如果MAC有不同就不好意思了。

marksman

5分

13樓

marksman

個人積分：5分

文章編號：6719897

why dont u manual setup IP address??
and limit how many IP can be run on the airport?
then manual set the ip address on the mac?

u can slow put some foil on the window to block the WI-fi transmitting out side ur house?

for me i have
hide SSID, WPA,lock Mac address,Set Ip range,
give that a try

Tes

0分

14樓

Tes

個人積分：0分

文章編號：6719972

I doubt that your neighbor can break your WAP2 that easily... maybe he's connected to your Mac via Ad Hoc?

Raymond Lui

168分

15樓

Raymond Lui

個人積分：168分

文章編號：6720100

I have just come with a funny method and I am not sure whether that works.

As far as I remember, WEP password has to be 5 digits for 40bit protection and 13 digits for 128bit protection. However, Apple computers are able to use WEP password not fitting in this rule.

How about just using a non-standard compliance password?

Again, this is just my sudden idea, theory not proofed in any way.

By the way, I agree that there may be something on your computer too, because I don’t think WPA is that weak.

If you’ve got the time, you could consider getting a router that could be flash into DD-WRT and use WPA2- Enterprise mode.

The New Flying MacBook Pro; Seatbelts sold Separately!

tkpmg

0分

樓主

tkpmg

個人積分：0分

文章編號：6720342

Hello Raymond,

It's too complicated and hard for me to get a router that could be flash into DD-WRT, but can you show me how to setup WPA2- Enterprise mode or give me the related teaching website?

Many Thanks

Tim Kuo