<?xml version="1.0" encoding="ISO-8859-1"?>
<opml xmlns:so="http://rdf.opiumfield.com/so/blog/" version="2.0">
  <head>
    <title>01.opml</title>
    <dateCreated>Wed, 01 Jul 2009 21:45:49 GMT</dateCreated>
    <dateModified>Wed, 01 Jul 2009 20:45:49 GMT</dateModified>
    <ownerName>Tom Morris</ownerName>
  </head>
  <body>
    <outline text="Why Pre-Shared Keys Suck" created="Wed, 01 Jul 2009 20:45:50 GMT">
      <outline text="1. Guest comes to Owner's place and asks for wifi key." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="2. Owner tells Guest that the password is &quot;flibble&quot;." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="3. Guest logs on." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="4. Guest leaves and tells the world that Owner's wifi key is &quot;flibble&quot;." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="5. Owner must now change his wifi key from &quot;flibble&quot; to something else and then inform everybody else who uses the wifi (both humans and devices which store the pre-shared key) what the new key is." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="6. Goto (1)" created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="The alternative to pre-shared key systems is to have a user account system." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="1. Guest comes to Owner's place and asks for wifi key." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="2. Owner logs onto administration panel, taps in username and generates a password, then gives that to Guest." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="3. Guest uses." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="4. If Guest tells the world his wifi username and password combo, you revoke the password." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="There is no reason why this setup should not be used in consumer wifi routers, except for the fact that the existing standards for wifi authentication are designed for mouth-breathing idiots who share their fucking MySpace passwords with each other and then wonder why their account gets &quot;hacked&quot;." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="And before anyone says &lt;a href= &quot;http://freeradius.org/&quot;&gt;FreeRADIUS&lt;/a&gt;, that's too complex. Yes, I can set up FreeRADIUS on my Linux box. But username/password authentication &lt;em&gt;with&lt;/em&gt; integration at the OS level with Windows and UNIX (including OS X and Linux) should ship on consumer-level wifi routers. That wouldn't suck. Pre-shared keys do suck and are actually worse than useless." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
      <outline text="Another thing I don't understand about wifi: why is it that the only way to get encryption of your packets across the air is to turn on authentication? Sometimes I want unauthenticated wifi but that doesn't mean I don't want my packets encrypted. Think of it like a club: just because there's no guest list doesn't mean that you don't need security. In fact, you probably need &lt;em&gt;more&lt;/em&gt; security." created="Wed, 01 Jul 2009 20:45:50 GMT"/>
    </outline>
  </body>
</opml>
