Devices that don't support WPA2

Tute · 16 Apr 2010 at 18:13

Having recently purchased a DGN2000, I today came to add my PSP to the wireless on it so that I could access PSN.

I went through the wireless settings, did a scan and found that my network was greyed out and I couldn't connect.

After a google it appears that the PSP doesn't support WPA2 as it only runs at 11MBit (Wireless B).

I was wondering what the best way around this is without compromising security. I have two laptops (one PC, one Macbook), a desktop, Wii, and PS3 running happily off the wireless at the moment.

Drop to WPA, or try something else?

Thanks in advance.

Ryan111 · 16 Apr 2010 at 18:25

A cheap, seperate access point and restrict the connection to MAC addresses and only turn it on when you want to use it?

tolien · 16 Apr 2010 at 18:25

Does it even support WPA? If it only does 802.11b it will likely only do WEP.

Tute · 16 Apr 2010 at 18:37

tolien said:
Does it even support WPA? If it only does 802.11b it will likely only do WEP.

Wikipedia said:
Wireless LAN 802.11b

However...

http://boardsus.playstation.com/t5/PSP-Networking/PSP-Wireless-FAQ-s/m-p/19601435 said:
First install firmware 2.00 on your PSP, this allows you to use WPA encryption

So it appears that it will do WPA.

Tute · 16 Apr 2010 at 21:42

For what it's worth, this is what the DGN2000 offers me in the way of wireless settings.

asim18 · 16 Apr 2010 at 22:19

Use any compatible encryption. Just disable SSID broadcast, and limit access to specified MAC addresses only.

Mattus · 17 Apr 2010 at 00:46

I wonder what the 'Mixed WPA-PSK and WPA2-PSK' option is? Sounds like it might be useful.

asim18 said:
Use any compatible encryption. Just disable SSID broadcast, and limit access to specified MAC addresses only.

Neither of those are very good security measures. Finding networks that don't broadcast SSID is not hard with the right software, since every device set to connect to the network advertises the SSID. Finding out and cloning a MAC address is equally trivial. Anyone who knows how to attack even WEP encryption will probably know how to do this.

asim18 · 17 Apr 2010 at 02:16

Mattus said:
Neither of those are very good security measures.

What else can he do then lol?

He might as well disable the wireless altogether.

Tute · 17 Apr 2010 at 12:58

From reading about the Mixed WPA/WPA2, it appears that's the way to go - basically the router will connect via either, so I can have the standard devices using WPA2 and the PSP using WPA and all will work fine.

Thanks all.

tolien · 17 Apr 2010 at 13:44

It doesn't really give you any extra security over just WPA-PSK though.

Tute · 17 Apr 2010 at 14:26

Well I don't seem to have much choice if I want to use my PSP wirelessly - it's not going to work with WPA2 so something's going to have to give...

muon · 17 Apr 2010 at 14:33

tolien said:
It doesn't really give you any extra security over just WPA-PSK though.

The devices that connect via WPA2 will have the added security though. I doubt the OP will be using their PSP for sending or receiving sensitive information.

tntcoder · 17 Apr 2010 at 14:44

ghost101 said:
The devices that connect via WPA2 will have the added security though. I doubt the OP will be using their PSP for sending or receiving sensitive information.

Not really, an attacker could connect with WPA and then intercept the decrypted traffic for all WPA2 connections.

muon · 18 Apr 2010 at 23:04

tntcoder said:
Not really, an attacker could connect with WPA and then intercept the decrypted traffic for all WPA2 connections.

That's a rubbish way of implementing mixed WPA/WPA2 then.

tolien · 18 Apr 2010 at 23:14

Regardless, they still have a connection to the internet and all the devices connected to your router.

Caged · 19 Apr 2010 at 01:21

Nobody is going to bother hacking a home network with security above WEP though, and they'd only bother with WEP if they were a huge nerd and very bored.

snowdog · 19 Apr 2010 at 01:24

Caged said:
Nobody is going to bother hacking a home network with security above WEP though, and they'd only bother with WEP if they were a huge nerd and very bored.

I agree, I just use WEP at home, easier to connect devices to it and who is interested in my home network anyhow ?

tntcoder · 19 Apr 2010 at 01:31

Caged said:
Nobody is going to bother hacking a home network with security above WEP though, and they'd only bother with WEP if they were a huge nerd and very bored.

*Sigh*

Why take the risk? It's a perfectly feasible operation in organised crime for example, driving around, gaining access, MITMing SSL -> stealing credit cards...

Caged · 19 Apr 2010 at 01:55

Because it's the difference between using a PSP online and not? In your rare example then as long as you aren't the least secure target then you're fine. Nobody will bother cracking WPA if there's WEP or open APs available.

Mattus · 19 Apr 2010 at 02:07

tntcoder said:
Why take the risk? It's a perfectly feasible operation in organised crime for example, driving around, gaining access, MITMing SSL -> stealing credit cards...

I agree that people should secure their networks to the greatest extent possible. But I find it a bit far-fetched that an organised crime gang will park up outside his house, hack his WPA network when there's bound to be half a dozen unsecured or WEP networks nearby, then wait for him to make a secure transaction...