3 ms·
How can MAC spoofing be stopped? All the counter-measures I can think of seriously degrade the experience. I can think of approaches that work for HTTP, for e
by justinsb 13y ago
How can MAC spoofing be stopped?
All the counter-measures I can think of seriously degrade the experience. I can think of approaches that work for HTTP, for example, but I can't see how you would allow e.g. SSH while preventing MAC spoofing.
- gonzo 13y ago> How can MAC spoofing be stopped? 802.1x
- justinsb 13y agoCan you explain a bit about how this would work here (i.e. for Gogo)?
- kefka 13y agoNot pretty, at least. I'd look towards the TCP fingerprinting techniques that FreeBSD has in its packet filter/firewall. With that, you could make a rudimentary decision how many machines are on the network, regardless if some are bad actors. However, we will still get this problem regardless how much security we do over wifi, as wireless is inherently an insecure protocol. Ideally, we could make decent security with IPSEC, but that would be so cumbersome, as well as in opposition to "Pay us money for easy access to internet." A few non-payers aren't that big of a deal, considering the profit margins I would assume that make.