Since I’ve been back in Ireland I’ve found the need to get broadband installed in my grand parents house, (they’ve been kind enough to let me stay here until I move on again) and in my search for a reasonably priced provider with a reasonable service I ended up ordering a DSL connection from Eircom.
Now while I don’t have any complaints about the service (as yet) I do have some complaints about the setup of the DSL routers when they arrive at a customers home.
One of the most important steps in encrypting your wireless network is the use of a good random key of minimum 20 characters in length. I normally go longer than that but lets keep that at a minimum.
Now, all Eircom DLS routers come with WPA security enabled by default.
“Well and good”, you might say, “What the hell is he complaining about”?”
What makes networks keys secure is that nobody is supposed to know them.
One of the worst things you can do is write them down in case some unscrupulous little git, like say your neighbors teenage child, gets hold of it and then decides to use your internet connection to download gigabytes of hardcore porn.
But Eircom in their infinite wisdom have chosen to ship their routers, not only with a pre-enabled WPA key which is PRINTED on the router, but also to provide you with a stupid little manual that has the serial number, MAC address and SSID of the router printed on the front of it. Not only that, but the WPA key is also printed on the front.
So now, all little one armed bandit Johnny from next door, has to do is lift that booklet or get a quick look at the router in order to know your WPA key. He can happily use your internet connection to download porn, until one arm becomes disproportionately larger than the other and someone finally takes notice.
Lets be honest here, the majority of people are scared of concepts such as encryption and tend to opt for the easiest an laziest solution.
If the router comes with a predefined key, the chances are that 98% of people will use it, and we ALL know how careful most people are about holding onto crappy little manuals or not just leaving them lying around the place.
I think what really ticks me off most about this is that the manual doesn’t, in any way encourage the user to change the WPA key from the default.
The closest it comes in it’s 24 pages of encouraging changing the default key is two lines at the bottom of one page which read:
Your modem comes with WPW (WIFI Protected Access) security enabled.
For further information and to make changes to your security settings please go to www.eircom.net/wirelesssecurity.
We know they’re all going to be rushing off to follow that link…