Is Your WIFI Secure?

[@sagegeas9205]

WEP: Worst Encryption Possible Basically.

[@nikolas8741]

True. Butt it use to be the best at the time created

[@Two-Checks]

Always worked fine for me.

[@N.S.A.]

@@Two-Checks My man! Keep it up.

[@markusTegelane]

"Wired Equivalent Privacy" my 4$$

[@melaniel.s8990]

I can't imagine someone using WEP today ... I don't think any of the routers/ modems have it .

[@verbosed]

I respect what you do Mental Outlaw, making technology and security/privacy information accessible to normal people. The way I learned all of this wasn’t this digestible and accessible.

[@ZGFyZG8g]

Don't forget the most important videos which are the cooking ones.

[@AcidiFy574]

Try "TechLore" as well as "The_Hated_One"

[@ZGFyZG8g]

@@AcidiFy574 they both deserve more subs.

[@stonalisa3729]

It’s great for a normie like me. I just started using Linux because of this channel

[@plumbkingu6122]

The only reason to improve my wifi security is to protect my secret pizza recipe achieved thanks to Ciro from Napoli.

[@AesculapiusPiranha]

I guess if you share it then your wifi is secure 🤷

[@trajectoryunown]

You just painted a target on your home network kid.

[@lorenzo8755]

If you make the pizza recipe open source, they can't steal it anymore

[@amnottabs]

I have your IP address

[@fatman8303]

@@amnottabs how'd you not get the ipizza address? Is your sauce wrong? Did you use a pinapple to hack into the network?

[@lincolnthedev1047]

To make your network 100% secure: 1. Unplug your router 2. Carry it out to the middle of nowhere 3. Light it on fire 4. Put out with water after sufficiently burned 5. Done! Your network is 100% secure!

[@tremendousrexx]

genuinely good advice for some

[@N.S.A.]

6. Buy a Zyxel router 🤣

[@lincolnthedev1047]

@@N.S.A. OH CRAP IT'S YOU

[@prakharmishra3000]

@@heemajoshi847 😐

[@Cyrenalux]

6. use TempleOS

[@0xshaheen]

You forgot to mention every router owner's nightmare: "WPS"

[@prakharmishra3000]

Who even uses that anymore lmao, it's just a vulnerability now.

[@igorthelight]

@@prakharmishra3000 Normies do ;-)

[@namesurname4666]

@@igorthelight they removed it from the last versions of android

[@prakharmishra3000]

@@igorthelight you CAN'T use it, android removed it.

[@deathkeys1]

@@prakharmishra3000 android removed, but if the router still has it enabled, thus still compromised... it's game over if the attacker is using anything else or even older versions on android. I worked costumer service for a big telecom and every week I would get at least 3 or 4 cases when the costumer was pwned by this failure and about half of them didn't even knew this was a thing and were complaining about slow internet connection.but it was the company's fault as well for shipping a crappy modem with even crappier firmware which had WPS PIN(yes, PIN) enabled BY DEFAULT, and every hardreset of firmware upgrade/update you had to manually go into the settings and disable as well as replacing the password, which was a pain.

[@dasdawg4285]

As a student in my local college studying network administration, I gotta say you're one of the few people I watch to get ideas on how to explain complicated terms to someone who doesn't know much about computers. Really really good video my man, keep up the good work!

[@NicholasHenkey]

Defeat script kiddies until the next NSA leak by upgrading to a new router with a hardware backdoor! Gotta love those odds 😂

[@N.S.A.]

I also like those odds.

[@davydorynbaev]

I myself am Gang Ethernet, but useful video nonetheless

[@waningbloom]

“Practically everyone uses wifi” _*Grins in ethernet_

[@naoltitude9516]

Beaming EMF from the router = cringe Using a chad wired connection and not lagging = boss

[@waningbloom]

@@naoltitude9516 Soyboy vs Gigachad

[@Ultrajamz]

Its fun when people who are either lazy or live with their parents or something defend wifi and say its just as good as ethernet

[@egg5474]

@@Ultrajamz I’ve been trying to get my grandma to switch to Ethernet but she won’t listen and refuses to use modern technology, despite the fact she ran email services in the 1980’s when no one else was doing it

[@nepnep6894]

@@Ultrajamz Technically wifi is actually Ethernet. It is layer2 not layer1 ;)

[@NDHFilms]

What’s even worse is new homes that have built-in wifi. The (edit: default) gateway login info will likely be similar or identical for all the homes in the neighborhood.

[@CFSworks]

Awesome video! A few corrections: 1. WEP's chief weakness is that the IV and key are simply concatenated. RC4 is statistically more likely to output the nth byte of the key verbatim as the first byte in the cryptostream (with certain IVs), making key recovery really easy with enough captured packets. Plaintext IVs are not unique to WEP. Most protocols do this, and it's not a security shortcoming - privacy depends only on the uniqueness, not the secrecy, of IVs. 2. KRACK is an implementation bug, not a design flaw in WPA2 itself, and is fixed with fully up-to-date drivers/firmware. (Though I suppose one could argue a vulnerability affecting so many independent implementations means the protocol spec is at fault for not being explicit about that pitfall.) Fun fact: KRACK works because it causes the IV counter to be reset to 0, meaning IVs are reused (see point 1!) 3. WPA3-SAE is *awesome,* and in theory you can even get away with using a dictionary word as your SAE passphrase since an attacker would have to make a couple thousand connection attempts to guess it rather than capture a handshake and do an offline brute-force attack (as pointed out in the video). Sadly, the "Dragonfly" algorithm it's built upon has had a troubled development (issues were pointed out when it was still a draft and the author did basically nothing about them) and it has a subroutine with a password-dependent runtime, opening up a timing side-channel. Most implementations have mitigated the vulnerabilities by now, but it's still a huge, huge shame to have a security protocol with known flaws on day one. But in spite of these issues, with a strong passphrase and updated software, WPA2 is still perfectly adequate, and WPA3 (even with its vulnerabilities unmitigated) is still leagues better than WPA2! :D

[@jamesedwards3923]

Hashes can be captured and brute forced later. No one is going to stay connected and try every possible combination.

[@sobot_]

Wifi? Ethernet? Wake up, we must go fishing

[@s_aku]

i was literally following his gentoo guide and now he uploaded fml

[@pacifico4999]

I once had a malware that would try common passwords to access the router configuration. Then, it would change the router's DNS to a malicious one. Always change the default password.

[@TheFrantic5]

To be honest, I'm just as surprised your channel hasn't been deleted.

[@TehObLiVioUs]

that'd be one way to force us to see him exclusively on ODYESSEY/LBRY

[@primethread]

Mental Outlaw is controlled opposition confirmed.

[@AcidiFy574]

He's AlphaNerd on odysee

[@Scranny]

Why? KZbin only cares if you have certain political beliefs or you question the super secure US election voting systems and rules that wasn't broken at all. ;-)

[@Omar-i7y6w]

my wifi so secure that even i can't login to the admin page.

[@robertromero5930]

Don't forget about the wps exploits, I learned that when I was grounded and wasn't allowed on the internet.

[@gurubhaktmohit]

7:40: "Its easy to *tap* that *wire,* I mean, that's what *wire tapping* is" thanks man. I'll keep that in mind.

[@bren.r]

This channel is so underrated.

[@fren648]

UPLOAD EVEN MORE VIDEOS I CANT GET ENOUGH

[@agentloo9744]

dont ask questions just consume linux content then wait for next linux content

[@adryncharn1910]

Thank you for these helpful informative videos. Subscribed :)

[@GAMIR_SFM]

Another way to secure a WiFi network is to live somewhere where there's no one near you! 😆

[@Ultrajamz]

It stinks wpa3 ended up being a flop and isnt that secure. I have wpa2 and now just kinda feel like waiting for wpa4.

[@ashishpatel350]

I know right. The newest standard is just trash

[@CFSworks]

WPA3's weakness: With a capture of a few thousand connection attempts, an attacker can (sometimes, if AP firmware isn't up to date) estimate the probability of passwords being correct at a rate of about 50/sec. WPA2's weakness: With a capture of a single successful connection, an attacker can (always!) brute force passwords at a rate of about 1M/sec. Really not sure why WPA2 is considered "safer" 🤔

[@camwha5904]

Not related to the video but early congrats on 100k subs! Crazy growth lately

[@Ultrajamz]

From what I understand setting up wpa2 or 3, enterprise is much more secure. Just need to setup a radius server with a pi

[@xtremecoding4005]

Noob here: what's a "radius server"?

[@redditorscienceandsocialis8491]

I LOVE THIS CHANNEL SO MUCH. Unironically virgin NSA vs Gigachad Mental Outlaw teaching the feeble masses the word of god.

[@ikarosalpha8783]

if I lived alone I wouldn't even have wifi but luckily i'm trusted to maintain the router so I can keep track of these things

[@cristianjuarez1086]

Damn ikaros i watched that anime like 10 years ago, such times

[@ikarosalpha8783]

@@cristianjuarez1086 I created this account like 10 years ago

[@shazambarley2154]

'How encryption looks like inside of your wi-fi'

[@ErwinHadanIronWill]

the picture of the "weirdo" is hilarious

[@hdcomputerkeith]

Love your vids! o ya Sir. As a cable guy ( EXP 3 years) buy a higher quality or make your own new coaxial cable from your 2 way splitter to your cable modem ( maybe your already have better q jumpers cables in a junk drawl or it closet or the cable company could had you some for free from their office or know a cable guy or gal friend for free!). throw away these cheap jumper cables! with the real cheap connectors!! The better Quality Jumper ( Short ex 3ft or 6 ft jumper cables) becoz these cheap connectors introduce outside signals leak in and also leak out as well! Plus the better connectors don't break like those low quality one! SHOULD Look just like the connector input of spiller vs the 2 poor jumper cables coming output of the 2 of the splitter ( Great Brand by the way) in the video ! easily spotted by any good cable \ wifi installer or tech would see. Peace

[@plenus7392]

Good tip> Your Wireless router or AP probably has a ''guest'' network setting, make your default password hard and set the guest one to something easier, when someone comes over you give them the guest password, activate the guest network, they use it, they go away, you turn the guest one off.

[@supermasterfighter]

7:57 “You’re a miner? Cool! What do you mine?” “Passwords”

[@jan_harald]

reads the title - *NO* lol, no consumer wifi setup is ever actually secure, even wpa3 or whatnot which was supposed to be EXTRA secure, was broken super fast, there's attacks to get around the passwords which aren't that hard to do, lol

[@glowingone1774]

1. You are. A script jogger 2. You probably have no idea how to perform the attacks (Ie implement it in your language of choice) all you know is run script see pretty output But you are correct but I belive there are patches but the manufacturers should fix their implementation Also yeah wifi isn't as secure as just running ethernet.

[@aaaa-wh3lj]

@@glowingone1774 He never claimed he was an expert why are you sperging about "script joggers" lmao. Most penetration testers, especially on an entry level do not need to know MUCH about programming to perform their jobs.

[@juxtacyp2665]

@@aaaa-wh3lj yeah dude seems like a gatekeeper

[@fierles7989]

@@aaaa-wh3lj bruh, just bruh, you don't deserve anything more

[@MickeyD2012]

@@glowingone1774 I like that term. Script jogger. LOL.

[@nikolas8741]

LiFi becomes the new protocol and replace WiFi

[@ac130kz]

WPA3 is also vulnerable, it had a vulnerability available

[@MemesnShet]

What password manager do you use? I wanted to get an opensourced one but i feel very weary of keeping all my passwords in one place

[@Paco1337]

I use BitWarden its open source

[@fierles7989]

Keepass xc (it's fully offline)

[@CrypticConsole]

Create a text file and store it in an encrypted archive using 7zip

[@MentalOutlaw]

keepassxc and or pass

[@user-ke6gn8pg3u]

​@@CrypticConsole ew 7zip. Or just already have full disk encryption and store it in text files and then make a dmenu script to automate selecting and copying them onto your clipboard.

[@papergamiman1214]

The Comcast DVR being used as a WiFi router

[@wesser3214]

ooooo I noticed a bit more humor in this one

[@bdjnk]

My wifi is secure in the kitchen with the kids.

[@purplep3466]

then those kids will watch Mental Outlaw's videos and voila!

[@bebulon]

love the channel but bruh buy some sound treatment foam the ringing is insane otherwise, some of the best content on this bullshit platform

[@vsynk-hk3ph]

Also WiFi deauthing is a thing btw so you can disconnect devices and they have to reconnect

[@eternalblue4660]

That's done through Management Frames so if those frames are secured (PMF) not much a MITM can do to them.

[@CFSworks]

@@eternalblue4660 It can also be done through old fashioned jamming.

[@winwin-gw7rn]

Mental Outlaw Please create a content on how to change a regular usb into a hardware wallet. Is the security it provide inferior than brand name hardware wallet?

[@nithitsuki]

Haven’t watched the video yet, but I’ve switched from Wpa to wep encryption because my DS supports it

[@kathanshah8305]

I use dial up am I safe ?

[@AlenAbdula]

🚀🚀🚀 for the algorithm 🚀🚀🚀

[@twl148]

0:00 why is it not plugged in :(

[@amir3515]

Also, hide ssid, whitelist, password protect router admin settings

[@ultrasonic3368]

ssid hiding doesn't do much if i remember correctly

[@amir3515]

@Fashinqu A. I suspected it wasn't enough but I'd think doing those things in addition to whatever else you could do, makes you a little bit less of an easy target compared to the 20 other wifi's broadcasting in your local area

[@Minty_Meeo]

Are you planning on making a video on Audacity going full telemetry mode?

[@markusTegelane]

for those who hate password managers, you can also salt your passwords

[@axthny]

i like to pepper mine

[@markusTegelane]

@@gokutoriyama3179 I'd like to think you're joking and I don't have to explain what password salting is

[@coolbean9880]

our router was provided by our isp and is running their proprietary firmware, and if i change that i would void its warranty which is bad bc their routers suck and this is our 4th one now

[@coolbean9880]

so no

[@user-mx4vd4ow2e]

then buy your own router?

[@coolbean9880]

@@user-mx4vd4ow2e im broke and not the only person using it, otherwise i wouldve done that ages ago, hell, i was genuinely trying to when we still had an older model that was both slower and more unreliable

[@CrypticConsole]

@@coolbean9880 just use an old pc and pfsense

[@user-mx4vd4ow2e]

@@coolbean9880 a router doesnt cost that much lol

[@82000]

unrelated suggestion: would you ever consider making a video about Urbit?

[@chef2654]

I'm stomped on what router to get. Should I get one that can run FreshTomato?

[@tekvax01]

wired ethernet will always be better than any wifi signal path.

[@littlemac5942]

cant people near you see the size of packets and make a guess, like halo is 1.53424 GB's and they can be like. THATS WHAT IT IS

[@yevsey169]

Or just live rurally and have your network open. Network security - a gun and a dog

[@dxfvgyhjh]

antennas...

[@yevsey169]

@@dxfvgyhjh ok so I need a scope to shoot from farther away

[@dxfvgyhjh]

@@yevsey169 I could be behind a wall... just use an ethernet cable

[@yevsey169]

@@dxfvgyhjh if you're behind a wall you didn't need the antenna in the first place

[@dxfvgyhjh]

@@yevsey169 ehm.. what?

[@knallbert]

password manager & physical security token done. and get a token backup, please. And if not, don't cry if you loose access to all your passwords because you got lazy this one time at this one random bar.

[@ltxr9973]

0:28 seems like electrical service panels aren't the only things that look like a rat's nest in America

[@mMetty2103]

There is a way to connect at wifi anonymously?

[@k5lre8]

Techlead made a crypto coin, any thoughts about that?

[@Scranny]

Mental (and others), can you recommend a good standard router that's relatively inexpensive and also has FOSS firmware support? You covered this in a previous video but your router has < 4 stars on Amazon so I'm a little wary.

[@myfaveyoutube]

amazon reviews aren't something to go by, in my experience

[@lifebarier]

what about wpa2-enterprice?

[@igorthelight]

It's better than WPA2 but it needs additional server to use it. For all questions -> google.com

[@ramburgervalentine7621]

I use cables

[@wtfdoiputhere]

Yes

[@dripsteindrippin4829]

Why is new encryption standards reliant on your channel existing?

[@phithegamer5787]

Encryption definitely looks like futuristic blue lines with a lock wdym

[@thehaigu321]

and now we wait for the audacity trainwreck vid

[@blyaticon8190]

1:40 AVM Routers at least dont do this, usually the password is on the back of the router and some random word number combination

[@mushroomcrepes]

using the WAP encryption 😳

[@InventorZahran]

Wireless Access Point

[@no-better-name]

@@InventorZahran i'm thinking about the other acronym... xd

[@zimzam9817]

@mental Hey man, I miss Migi and the other gentoo anime meme. Can you drop me some webms? :(

[@adamday5045]

Bro do you have a job how do you put out so many videos

[@daringcuteseal]

I want to have a very long and complicated password but nobody in my house agrees. Yikes I'm really scared

[@BasicPrinciplesGTA]

Can you make a video about Cyber Polygon? Literally what the fuck is going on with that shit?

[@CyberTechSRB]

WPA3 is also vulnerable crap

[@igorkowalski2762]

When upload.

[@theepicnoobzilla6961]

Bruh, my isp allows only speedtests and pool range on their router.

[@dengan699]

OpenWRT is da way Screw proprietary garbage

[@SodiumSaltShaker]

Well, I have no say in the ISP we have and it is google so no. Probably not.

[@user-ke6gn8pg3u]

Your ISP doesn't dictate what machine is going to be used to act as an access point. If they don't give you options to change specific settings, you can just disable wifi and have another machine like a raspberry pi act as the access point and just configure stuff through there.

[@raushonmunni2633]

Are you NSA agent

[@retard1990]

yes

[@43615]

i got personally offended by "the ONE at your home"

[@mohammedwajith1416]

I finally switched to linux today.

[@z3rocool]

i just got a new router and can only use wpa2

[@user-kc1tf7zm3b]

This is not an issue. WPA2 is still very secure. Just use a very long password.

[@Brynjar1]

WAIT WIFI ISN'T THE INTERNETS?

[@yogesh-deshpande]

Make a video on status

[@VaDR3d]

where is the ethernet gang

[@KSPAtlas]

I have to run my desktop over WiFi cause it's on a different floor than my router

[@amir3515]

I ripped out the wifi and Bluetooth card in my laptop. _unhackable_

[@egg5474]

I use Ethernet because my computer is too old to work with new wifi cards, but also no IME so yay

[@fatman8303]

I don't even use ethernet anymore. I just plug the underground copper pipes right in my computer. It makes the room warmer as well.

[@eternalblue4660]

@@KSPAtlas You could use an Ethernet PoE wall adapter

[@linuxtweeker]

I named my wifi (from my Asus Router) "FBI free login"

[@yoshiguy35]

I use OpenWrt

[@andljoy]

disable TKIP and disable PMKID

[@vsynk-hk3ph]

I have checked and no

[@OldieBugger]

My own WiFi is secure from now on, I realized I never use it so I turned it off.

[@user-ke6gn8pg3u]

From joe it is, but alphabet inquirers definitely not.

[@Flightsimmovies]

I love wps

[@mlg779]

I do not use WiFi at all.

[@perpetualcollapse]

Probably not

[@amnottabs]

joke's on you; Arris routers tends to collapse or locks itself after the slightest amount of load so good luck trying to bruteforce your way onto my network

[@BurgerKingHarkinian]

Without having watched the video yet: No, of course it's not! It's fucking wifi! 😂

[@GabrielTobing]

7:59 At least hackers are doing something productive and useful. Unlike miners. But can you give me one for my system please? XD

[@andrew8293]

To answer your question, no, it's not.

[@user-kc1tf7zm3b]

Yes it is, when you use WPA2/AES, not WPA/TKIP and a *bloody long* password. Also, ensure that whatever online services you use has end to end encryption.

[@nagyba]

Since no one gives a single f about me, yes it is 😂

[@ClassifiedPerson]

I am gonna plug ethernet to my phone lol

[@InventorZahran]

Ethernet phones do exist; they're called L A N D L I N E S

[@ClassifiedPerson]

@@InventorZahran POG

[@okamiboi]

Wired Equivalent Privacy? More like Worst Encryption Possible _Imma leave quietly, sorry about that._

[@user-ke6gn8pg3u]

Someone already said this.