Wi-Fi Security as Fast As Possible

What are some helpful tips to make sure you don't jeopardize your safety over Wi-Fi wherever you go?
Freshbooks message: Head over to freshbooks.com/... and don’t forget to enter Tech Quickie in the “How Did You Hear About Us” section when signing up for your free trial.
Twitter: / linustech
Facebook: / linustech
Join our community forum: linustechtips.com

[@kartikvashistha]

"Two girls, one network ", haha, I see what you did there :P

[@pezpeculiar9557]

"B@#$% you guest it"

[@SoupaTech]

Kartik Vashistha Our college campus has hilarious wifi names like DontYouwishyourwifiwashotlikeme, thelanbeforetime, notyournetwork, and 10/10 would connect.

[@kartikvashistha]

SoupaTech 😂

[@shadowroses5]

Kartik Vashistha shitty joke.

[@DodgemsCrazy]

It also said "it hurts when IP" ( I pee)

[@jrizz43]

"WTF Son...R U even my son?" I laughed out loud in the office

[@rvymvn]

WPA can be hacked with "Reaver-Pixiedust" in a mater of minutes depending on the router. without pixie dust reaver is pretty much dead as most routers that come with WPS enabled by default implement WPS Locking...You could reset some routers with EAPOL Flood attacks etc.. but that doesn't always work and can take up to 10 - 30 mins. What I'm trying to say is.... Over time every security technique becomes weak ;)

[@micnor14]

***** _Shoosh_! I imagine you are a Morgan Freeman in a Dark Knight movie that accidentally blows Bruce's cover when you ask "Batman" to pass the mustard xD

[@AlexanderPavel]

***** WPA2 itself is not weak at all. It is still one of the most secure techniques known. WPS is extremely weak though, and that is what causes vulnerabilities. I disabled WPS on my routers.

[@westermin8654]

***** I agree, reaver alone is weak but with pixiewps it's a whole new level of security flaws.

[@rvymvn]

Alexander Pavel You're correct but what I'm saying is that every encryption standard will become weak over time. I'm not saying it's weak. And disabling WPS is always a smart move. I don't understand why some companies still insist on enabling it by default.

[@eugene4637]

***** I tried obtaining my neighbours wi-fi password on their WPS enabled router and the damn thing locked the WPS :p.

[@bikutoso]

I think the best Wi-FI Security tips i have to give is to use wired network as much as possible.

[@MiguelRodriguez-mj2ec]

No wireless packets and a faster connection.

[@Voreoptera]

My best advice is, hide the password, and only allow those you trust to join.

[@WXLM-MorganNicole619]

03:03 “it’s convenient for home use, but TURN THAT CRANK OFF for your business network…”. Uh… my router here has no crank to turn lol! Even my mom laughed at this one

[@_gamma.]

@1:12 EEquivalency

[@Digging4AnswersOfficial]

3:31 lol "It hurts when IP"

[@causechaos9415]

This green screen hurts

[@stopthrm]

.. my sides

[@mr.kenway4554]

Only men will experience it.

[@yamigekusu]

There was someone in my mom's apartment building whose wifi name was "Get your own fucking wifi"

[@uuuuuhhlettuce3909]

Potatoes as fast as possible!!!! Plz!!!!

[@The_JEB]

Octonerd turnips as fast as possible

[@DrocDoc]

Octonerd Don't think linus cover consoles

[@FUCKPOTATO]

ikr

[@FutureGameDev]

Octonerd Turnips as Fast as Possible

[@solan3999]

FutureGameDev Firepole as Fast as Possible

[@itsshowtime6412]

WEP was never checked by professionals or labs before it was used... It was doomed from the day it came out :) @Linus You should really do a new vid about this but in depth! A lot has changed and I would really like to see an in depth video talking about the different security protocols used.

[@treelonmusk5723]

"it hurts when IP " smart...

[@drabberfrog]

That's what my Wi-Fi network is called.

[@BrickTamlandOfficial]

freshbooks sounds like an alternative to fleshlight

[@sukhoy]

Good vid! I would have also pointed out that setting a good password is mandatory, The use of dictionaries can decrease so much the time needed by bruteforce!

[@indivent]

Here's a tip - secure open wifi with WPA and put the password in the SSID. That way local users are protected from each other and don't have to ask for the PW.

[@ACommonHero2]

You might want to have mentioned that, "An individual or business you trust" doesn't just mean anyone you don't believe will personally steal your information. You also have to trust that they can secure their access point properly. If they can't, then it's just as bad as if the person owning the access point were to desire your information (security wise I mean, not morally speaking). Granted most people that don't already know that probably don't have the know how to secure an access point properly themselves (you would not believe the number of people who know to set a password on their wifi but leave the wireless router with default login information). So that advice might not make them any safer (on its own).

[@senditall152]

Thank you I needed this to remember some of these better.

[@misterfelixguy11]

Can you please do a video on hybrid storage! I think most people don't know how it works including myself. Thanks!

[@debbierubble2434]

"B%#@% you guessed it" lmao too funny

[@TheProph7]

Lol.... nice touch with the Doctor Evil reference :)

[@Snowyleopard7]

My router can still be set to WEP security. It's from 2001 I think.

[@alex01230ROBLOX]

Leo Firelance The NSA thanks you.

[@nathangek]

When we were at a museum in Berlin, there was a network from the museum that was password protected and another one with the exact same SSID that was not protected and that just looped to the first one.... It was so obvious that it was someone that was monitoring the data but none of my classmates believed me...

[@therealb888]

How about wired security, wiretapping & hardware bugs & hardware security in general for your next as fast as possible? Also u didn't mention using Internet security suit? Don't they protect your wifi?

[@JohnSTF72]

I have a suggestion for you Linus: Cable Management as quick as possible. A cable management guide would also be a nice feature for many people out there (including me).

[@adonyz666]

by connecting to a secure website while using public wifi means https needs to be secure?

[@kght222]

Bernie Sanders 2016 https is encrypted on both the browser and server end, so directly intercepting the data isn't particularly useful, you need to get the data at one end or the other unless you have a super computer or a back door to unencrypt it.

[@adonyz666]

kght222 so making sure you have an https connecting would give you privacy from hackers

[@kght222]

Bernie Sanders 2016 not really, i only said that intercepting wouldn't be very useful. you also have to secure both ends, which has nothing to do with https.

[@somepersonontheinternet2938]

kght222 or if your on the same network do a MITM attack and make all their traffic go through your device so you could bypass the https encryption by making them request a http page while sniffing traffic at the same time.

[@kght222]

RaDiiuM yup yup, but that can be avoided with an encrypted vpn, and that is still an attack on one end or another, but wifi spoofing in public is a serious threat for a million and one reasons.

[@travishenry3307]

Watching these videos to refresh my mind before my presentation on computer safety

[@the_official_ballbagman]

got to watch this in class. thank you linus, very cool

[@josephgreeley3717]

I appreciated the AOE2 reference lol. Good throwback to the golden days of RTS.

[@XBlockAcah]

If it hard to break the password then,why it able to crack wifi from android.

[@wildyato3737]

He refers to Non dictionary character maybe🤔🤔

[@turbofox1980]

Your segways to ur ads are hilarious Linus. Gold star to the writer(s)!

[@frostprince1050]

set the router to drop Internet connection on firewall fail. and manually add Devices by mac address only. But nothing is 100% secure.

[@Xenro66]

***** Agreed, but the above mothod could provide an extra layer of security

[@stupidburp]

Fearbeavis smith This can potentially create a legal trap however. Somebody using your connection with a spoofed mac can do all sorts of illegal activity and let law enforcement trace it to you. Most law enforcement agencies will use your setting as evidence against you and ignore the potential for spoofing. I have seen something like this happen. It is sort of similar to using data from your GPS device against you and putting the burden on you to explain why it does not apply to your specific situation.

[@sbn025]

Fearbeavis smith mac address ? lol thats a piece of cake. Dissable wps, use wpa2 + aes and you are good to go

[@Toble_Miner]

+JaapJan Groenendijk That's a good thing. Some day manufacturers will stop even putting this option into the firmware. That will increase security because nobody relies one this "security" feature any more.

[@ProjSHiNKiROU]

Can you explain Wi-Fi login pages (in hotels and coffee shops) next time?

[@drink15]

Gone are the days when I could drive around and see tons of open linksys networks

[@unlazinessboyo]

Mine wpa2/psk, is this safe?

[@dekki1799]

Yes

[@tra129iscool]

+Hero Acer hmm idk what i have. i use the some neighbors wifi. i hope he has safe wifi

[@unlazinessboyo]

Tra-guy 👀

[@MichielvanderBlonk]

not if your password is 123456. Is it?

[@Bred0nSch00lV2]

As long as the password isn't really weak such as short dictionary words such as "dragon". I recall weak WPA2 passwords being easily crackable over Aircrack-NG.

[@strongforce8466]

What you think about the default password on modems ? should we change that ? why don't they say change your password when you install it

[@danieleberhardt235]

good explanation on a high level

[@brandonn.2876]

how does an openvpn connection with certificates stack up in an unsecure public network

[@wildyato3737]

Well since your Router holds only one public address it will try to connect to the VPN service based on Configuration file you uploaded in it... then after configuration accepts...it will reroute all traffic as encrypted format from the OpenVPN server...... Basically Wireless security works between Access point and devices connected to it...by applying VPN...it will even sends encrypted traffic to private network as well.... But only thing is to Trust such VPN server which are legitimate, Stores no logs( Well All possible does,No one is innocent)....

[@dfitzy]

I was expecting a couple of always and "not worth its" Always use a long password or passphrase Always change the name of the ssid Always use wpa2 aes unless absolutely necessary Not worth it mac address filtering Not worth it hidden ssid

[@wildyato3737]

Yeah I don't know why people in the comment section... says It is worth to enable MAC filtering as ....it is Very easy to change the Address via CLI based programs =(

[@lightupskechers2724]

Can do a video on public key encryption and symmetric key encryption

[@Johnny53kgb-nsa]

Could somebody please tell me what is the " safest" way to connect to uour wifi? Is the app Sprint wants to sell, secure wifi app, worth it ?

[@ThePreston159]

1:10 "Wired EEquivalency Privacy" :D

[@AlbertoRestifo]

The one time HotspotSchield would fit like a glove as a sponsor, they are not sponsoring Techquickie.

[@julijanniko]

Can you make one video about DMA and PIO hdd modes?

[@Voreoptera]

Untrusted Wi-Fi networks are insecure, because the password is shared, the key may be rolling, but everyone gets the same key, and any encryped packets can be decripted useing the server decription key when intercepted. This can happen with out you noticeing.

[@Ash-vy4dc]

1:31 lost my shit hahahah lmao

[@projectjt3149]

Does anyone know what Avast does when you tell it to scan your router?

[@Sabrintwitt3r]

1:32 that laptop was my first computer. Really Acer travelmate 2350

[@MsZsc]

The Nintendo Wifi play that is no longer supported used WEP. I couldn't play my DS games online at the time because my network was too new.

[@dylankauling]

How on Earth was TunnelBear not at the end of this video? That's what you actually need when using public WiFi!

[@willriches]

+Dylan Kauling Exactly what I was thinking!

[@emralcrewrblox]

Ikr

[@F0undationsofD3cay]

Those WiFi names at 0:37 though! 😂

[@freeq1829]

R u even my son? I laughed

[@MsMattness]

I was wondering if it is necessary to use security if you don't live next to anyone and are sure no-one will connect to it in the usual sense.

[@blue2294]

Does anyone know any good places to take online courses where you learn programming (starting with basics up to advanced) also any courses related to creating apps for iphones/androids and website design and development. I want to have a good understanding of networks and website design and development as well as coding html and other types of codes. Sorry I'm a bit new to all this but would love to learn while I'm in university!

[@Jon.......]

That's one wacky Boy Band Gumbo Photo you got there!

[@Voreoptera]

WPS is insecure because it has a flaw, that allows a remote attacker to activate it for one minute. More then enough time to establish a connection to the network.

[@XenoContact]

Bruteforcing in detail please?

[@wildyato3737]

Brute forcing is technique where you are guessing unlimited number of password based on authentication or to match a hash characteristics via hash file (Depends of Which hash has been implemented)

[@banno5313]

does anyone know if that part with luke slamming the door at 3:09 was actually him being pissed off? because its pretty funny haha

[@lk0stov]

What about trying to do transactions over my mobile data,is it save?

[@Borobin248]

Pls do a vid on Cmos

[@Benth3rdoneth4t]

I'm going to live on a college campus that has wifi everywhere. How safe is my data on that network if my phone is encrypted?

[@jericogoco2154]

What is difference of ips screen and tft screen

[@Slothmun]

The best way to describe WiFi security is to compare it to an onion. Layering on security methods will slow down a potential attacker at each stage. Therefore a good home setup would be WPA2 with a hidden SSID, MAC filtering and WPS turned off. That combined with changing your key regularly should give your network adequate protection. Using each one of those methods alone would be easy to bypass however layering them like this would mean the attacker would need more time and be more skilled.

[@vgamesx1]

Stephen Stonehouse I forgot where I read it but, hiding your SSID does basically nothing and might even make things even less secure. (I think it was a how to geek article)

[@vgamesx1]

***** why would you think you were the only person? Lol

[@Slothmun]

vgamesx1​ It is easy to sniff the SSID from connected clients yes. Hiding it from the AP beacons makes the potential attacker have to do more to gain access though

[@vgamesx1]

Stephen Stonehouse Here I actually bothered to look for it... www.howtogeek.com/howto/28653/debunking-myths-is-hiding-your-wireless-ssid-really-more-secure/ Microsoft themselves even say "hidden SSIDs are not a security feature" and no you don't have to "do more" with a hidden ssid, its as difficult as downloading/using a different app (or program..) and hitting the scan button.. The people telling themselves that it helps are basically the same as taking a placebo, it makes you feel better but it doesn't really help.

[@Slothmun]

vgamesx1 Yep, i'm not denying that it's easy to find out, just that if you are going out of your way to secure your network more, you may as well tick the "Hide" box

[@50PullUps]

What kind of watch is that?

[@basbarnes8263]

0:37. Amazing!

[@josephbounauito5421]

So what is the difference between wpa-psk+wpa2-psk and wpa2-psk?

[@TheDAFFY]

Linus, you cannot show them the secret! How would I ever succeed in cyber haxing if people know this advanced tip? God damnit! You just had to *do it*!

[@legrandmudkip3968]

0:33 The bottom one should be 8 Hertz WAN IP

[@Nat-jf2ge]

You can also just bluetooth peoples networks to gain access to private data.

[@MrAdeelAH]

0:32 moment when my WiFi is actually called It_Hurts_When_IP

[@isaackyaga2007]

But I really want to use my iBook G3 snow with, but it only supports WEP and how can I keep it secure?

[@wildyato3737]

Please Promote LiFI technology... if you all people concerned about WiFi flaws... Break the shit out about LiFI by spreading comments, posts etc in the internet...So any alliance will develop it much faster and it's implementation in devices as well

[@HandyDandyRight]

Good explanations on the security protocols. However, the AES encryption... there is a conspiracy I heard back in my post-secondary networking days from one of my instructors... perhaps it was a protocol that was "secretly" developed by the US government (U.S. National Institute of Standards and Technology based on Wikipedia), with the capability of a "back-door" if/when required. :) I always say, there is some truth to most conspiracies, and some lies to some truths.

[@squalltheonly]

Why didn't Linus talk about MAC address restriction? That is the best one out of all of them, I believe it can't be hacked.

[@ZafarLink]

squalltheonly Because 1) it's a pain in the butt to manage, and 2) it's realitivly easy to guess or find someones mac address, so it's not even THAT secure

[@squalltheonly]

True, but if a laptop is already connected and a 2nd one connects with the same MAC, the router will alert you of it. The password ones can have unlimited peers connected, but a MAC can only connect once.

[@squalltheonly]

WTF would send death packages to a wifi spot in a little house in Miami Florida? LMAO, that's way to paranoid. Businesses are the only ones that should worry about wifi hacking, not us regular home owners. And even then, business have other means of protection.

[@ChaseHaddleton]

squalltheonly Most routers wouldn't actually alert you, they don't have the capability to do that. And I'm not quite sure what you mean by "can't be hacked". MAC addresses are sent in plain text, so it's relatively easy to find a usable address and spoof it.

[@squalltheonly]

Chase Haddleton the alert is that you get disconnected from the internet, my router only allows 1 MAC address to be connected, if you clone a 2nd one then the 1st gets disconnected. Besides, you can always check to see who is connected to your router and you can always turn off Wi-fi. All this paranoia is really not necessary.

[@reachrishav]

Techquickie Hey, please explain Torrents(as fast as possible)

[@Siouxjin]

Linus can you explain to us how this "deep dream" thingy works?

[@SibaNL]

I always disable WPS. Even cracked some routers using it. FOR TESTING PURPOSES!

[@kartikchoubisa]

Hey! I'm getting redirected to specific sites while I'm on my WiFi network. Is it hacked or something?

[@TheTaylorhorton]

Hey Linus, please make a video explaining how file compression works...

[@cldream]

The basic idea is using special algorithms to pack data losslessly (because otherwise lossy compression methods will corrupt your data) to reduce overall filesize. That being said, redundancy in a file affects compressability - in which text files are compresses more so than images, videos, and encrypted data.

[@Pie4life123]

now how does one set this up linus ? why show and and not tell use how to use it ? I have a WEP and i dont know how well to setup this .

[@cldream]

+Pie 4life It's different for each manufacturer. Your best bet is to pull out the manual (if you have one). Otherwise, just look up the brand and model number of your router and find out how to get into the administrative panel of your router.

[@hajime6939]

Strong presentation. ;)

[@zwipp07]

Speaking of Wi-Fi... Anyone knows a good, free and a easy to use program that will show the amount of data the programs on my computer are sending and receiving?

[@kevinantonowvideo]

3:09 Which video was that scene from?

[@comradeboris9547]

You should do otg cables as fast as possible, there a must for power user.

[@stephensnell5707]

There is no such thing as otg

[@abdulrahmanaliawad1403]

best mode for Wpa Incryption Tkip or Aes Or Tkip + Aes

[@gfrewqpoiu]

yeah but no one mentions that everyone on your network running windows 10 could share your Wifi Passcode with Microsoft and all of their (Facebook Skype Outlook) contacts thanks to WifiSense.

[@karlnul]

+Techquickie You forgot the option of a 'hidden' network

[@Crazy52]

+Karl Oversteyns whats that have to do with security?

[@Crazy52]

***** except most devices do see the wifi just not the name (wifi analyzer shows it too).

[@karlnul]

gameby420 Yes, but while that's true, there's also the fact that they don't actually know the network's name.

[@Crazy52]

+Karl Oversteyns they dont need it.

[@wildyato3737]

Since The attena can feel the emission if radio waves...it can easily detect in the range..

[@ventusluca]

I love that Dr. Evil easter egg ;P

[@superroboted]

Well, if you want to have a truly secure home network use an Access Control List

[@dubious6718]

The strongest security is to use cables only, no wifi in this house!!!!

[@noehpena7599]

🎯Indeed: i said the same👌

[@v-iii-b-23-akshayshashikan92]

whih software are they using for haking wifi

[@florps]

What about AEP?

[@ciarangordon]

W.E.P = Premium open access point

[@MegaMoto85]

He didnt mention Reaver, thank you Linus.

[@micnor14]

***** Reaver is the only free open-source WPS crackalacker I'm aware of. I believe wifite uses it by extension but it isn't nearly as useful as the standalone beta reaver. Edit: I stand corrected. Reaver-Pixiedust is a postmortem fork of Reaver that is apparently succeeding it.

[@kght222]

i use a mac addy lock on my local wifi. can that be broken very easily? only authorized mac addys can talk to my wifi. i am actually curious as to what can be done with my method of securing my wifi, i'm expecting that it isn't all that secure, but i don't know how someone can brute force it.

[@ChaseHaddleton]

kght222 Not really secure. MAC addresses are sent in plain text and it is relatively easy for an attacker to find a usable address and then spoof it on their device (which would allow them to connect to your network).

[@fravolt2]

Is that a LG G watch R?

[@Level-jd1ey]

What is a good router with AES security protocol, under $120?

[@wildyato3737]

Buy such router Which does have more optional security.... There are router you can get for cheap price Always buy a new release one...to get more support

[@z3rkan91]

what are cuda cores as fast as possible

[@iamonyourteam]

What about Man in the Middle attacks?

[@FredoG96]

I'm posting this over my neighbor's wifi that i cracked. I cracked it using my phone in about 10 minutes. Easy peasy.

[@Ahead144]

This would have been a brilliant video to be sponsored by HotspotShield, if LTT still had a sponsorship deal with them.

[@DABranche]

Lmao my friend's WiFi's name is "it hurts when IP"

[@gmoney771]

Kali Linux can be used to crack WEP, WPA, and WPA2 using reaver and pixiedust, Actually, those don't work with WEP, but I can't remember the utility for that.