Security when syncing

[Alasdair Mackie]

I'm about to get an iPod Touch - primarily to hold Reunion!

I have a question which relates to the security of the computer-to-computer connection I need to set up. I can see HOW to do it, but I'm wondering how secure it is.

I have a wireless router, and am fully aware of using WPA and MAC addressing - so I get the concepts of wireless connections via a router to the internet, but with a computer-to-computer connection, what security should I use? I see I can use a password, so I guess the more complex a password the better, but will it remember the password between syncs?

Am I over-worrying? Can anyone hack into this wireless connection?

I realise this is a Mac OS issue rather than a Reunion one, but I am going to be using it for Reunion, so I hope someone can advise!

Many thanks!

[SGilbert]

IMHO: "Much Ado About Nothing". :)

[Mark]

I have a wireless router, and am fully aware of using WPA and MAC addressing - so I get the concepts of wireless connections via a router to the internet, but with a computer-to-computer connection, what security should I use? I see I can use a password, so I guess the more complex a password the better, but will it remember the password between syncs?If you have a wireless router, you should connect the iPhone to the router - this should allow you to sync, and if you are using WPA and MAC filtering, is pretty secure. Only use a computer-to-computer network if this method does not work.

Unfortunately, computer-to-computer networks only permit WEP encryption. This is less secure than WPA, but still provides some level of data protection.

Can anyone hack into this wireless connection?The short answer to this is "Yes" (not just "anyone" can, it takes some knowledge), but this is true even if you are using a wired connection (though the attack would originate outside your network). Also, keep in mind the distance that a wireless network's signal travels - if you are using a wireless connection in a house, chances are the person would have to be sitting in your house (or yard) to even attempt a hack. The computer-to-computer network probably won't reach outside the room, though I've never tested it's range. In buildings, wireless networks tend to have even shorter ranges, due to the building materials interfering with the signal.

Given all that, you run a greater risk of having your data stolen each time you make an online purchase or send your information to a web page than when syncing your Reunion data.

In the end, the best security is to be aware of your surroundings (i.e. there's a strange guy nearby with a Pringles can attached to a laptop) and items. There's no substitute for this type of security - almost any security implemented in the computer world can be broken, given time and knowledge.

[Al Poulin]

If you have a wireless router, you should connect the iPhone to the router - this should allow you to sync, and if you are using WPA and MAC filtering, is pretty secure. Only use a computer-to-computer network if this method does not work.
Is it possible to make a physical connection between an iPhone or iPod Touch and a router? To my knowledge, the iPHone and iPod Touch can connect by USB only to a computer. Routers use Ethernet for local networks and Ethernet or USB for connection to wide area network devices (modems).
There is relevant information for the iPod Touch using Wi-Fi beginning page 110 here:
http://manuals.info.apple.com/en_US/iPod_touch_3.0_User_Guide.pdf
There are basic concepts regarding Wi-Fi implementation using AirPort devices here:
http://manuals.info.apple.com/en_US/Designing_AirPort_Networks_10.5-Windows.pdf
The concepts hold for non-Apple devices, but one should refer to guides for specific devices.


Unfortunately, computer-to-computer networks only permit WEP encryption. This is less secure than WPA, but still provides some level of data protection.

Is this referring to connections using a wireless router or to peer-to-peer wireless between computers for purposes of file sharing, printer sharing, and screen sharing? I've assumed that the peer-to-peer connections are not encrypted.

I quit using WEP when we no longer needed to connect an old G3 PowerBook wirelessly to an AirPort Express for Internet access several years ago. My son then set us up with WPA. I have reset our Verizon FiOS router from its default WEP to WPA2 Personal. This month, I set up a Time Capsule (AirPort Extreme) as an router using both Ethernet and Wi-Fi. As a Wi-Fi router it is set to WPA2 Personal and we have a MacBook, a g4 iBook, and an Intel iMac all working wirelessly with the WPA2 password to the Time Capsule. The password needed to be entered only once in each client; this would be true of the iPod Touch also.

As for hacking, WEP security is practically useless against 13 year old kids with access to hacking guides on the Internet. But how does one set a balance between being careless and paranoid? WPA passwords need only be complex and secure enough to deter a hacker into moving on to easier pickings. The Apple Password Assistant gives red/amber/green ratings to one's own proposed password while entering it. Click on the key icon adjacent to the entry box. The Assistant also suggests passwords. Another excellent guide on what it takes to crack passwords of varying complexities is here:
http://www.lockdown.co.uk/?pg=combi
Note that many simple passwords are vulnerable to "Instant" cracking by run of the mill computers and tools.

Range varies greatly with construction materials and specific devices. Here, there is no problem with Wi-Fi from upstairs at one end of the house to my car in the driveway at the other end, about 60 feet. Two of our computers are at the end of the house opposite and on different floors from the wireless routers. Just last week I read that some folks were still connected to their wireless base stations up to 100 and 150 feet from their houses.

[Mark]

Is it possible to make a physical connection between an iPhone or iPod Touch and a router?No, not unless someone makes an add-on device with an ethernet port. I was referring to a router that has both wired ports and wireless, which you can then connect to with the WiFi ability of the iPhone.

Is this referring to connections using a wireless router or to peer-to-peer wireless between computers for purposes of file sharing, printer sharing, and screen sharing? I've assumed that the peer-to-peer connections are not encrypted.It's referring specifically to using the computer-to-computer networking capability built into certain Mac/OS X versions, where the Mac's wireless becomes an access point for the iPhone/iPod Touch to connect to. Anytime data is sent over a secured wireless connection, it is encrypted at the point of origin (i.e. your iPhone) and unencrypted at the access point (wireless router/your Mac if doing computer-to-computer).

[Al Poulin]

Unfortunately, computer-to-computer networks only permit WEP encryption. This is less secure than WPA, but still provides some level of data protection.

And later,

It's referring specifically to using the computer-to-computer networking capability built into certain Mac/OS X versions, where the Mac's wireless becomes an access point for the iPhone/iPod Touch to connect to. Anytime data is sent over a secured wireless connection, it is encrypted at the point of origin (i.e. your iPhone) and unencrypted at the access point (wireless router/your Mac if doing computer-to-computer).

Then, putting these statements together, a Mac that is set up as an access point cannot use WPA encryption, which strikes me as a serious failing inconsistent with Apple's implementation of WPA in its AirPort Extreme and Express devices.

[Mark]

Then, putting these statements together, a Mac that is set up as an access point cannot use WPA encryptionThat's correct: http://docs.info.apple.com/article.html?path=Mac/10.5/en/8339.html

The only option provided for computer-to-computer networks is WEP. I'm not sure what the reason for this may be.

[Al Poulin]

That's correct: http://docs.info.apple.com/article.html?path=Mac/10.5/en/8339.html

The only option provided for computer-to-computer networks is WEP. I'm not sure what the reason for this may be.

Thank you Mark for your great feedback. This causes me to find this quote from page 10 of the Apple design document I mentioned earlier in this thread:

"Note:
WPA security is available only to AirPort Extreme wireless devices; AirPort and
AirPort Extreme clients using Mac OS X 10.3 or later and AirPort 3.3 or later; and to
non-Apple clients using other 802.11 wireless adapters that support WPA. WPA2
security requires firmware version 5.6 or later for an AirPort Extreme Base Station,
firmware version 6.2 or later an AirPort Express, firmware version 7.3 or later for a Time
Capsule, and a Macintosh computer with an AirPort Extreme wireless card using AirPort
4.2 or later. If your computer uses Windows XP or Windows Vista, check the
documentation that came with your computer to see if your computer supports WPA2."

Possibly Snow Leopard will allow WPA in computer-to-computer networks.

[Alasdair Mackie]

Thanks for the advice. I have a wireless router, so guess that's the way to go. However, my next question is how do I make the link from iPod Touch to iMac via the Router. I'm guessing I need to use 'sharing' in some form?

Alternatively, would I be right in thinking I could use computer-to-computer, but simply disconnect the link once I've synced Reunion files.

Indirectly, I suppose I'm asking what do you all do to sync?

I'm not looking at this from a 'I'm so paranoid they are all out to hack into my iMac and I must do everything to avoid this' angle - just want to understand the options!

[Mark]

Thanks for the advice. I have a wireless router, so guess that's the way to go. However, my next question is how do I make the link from iPod Touch to iMac via the Router. I'm guessing I need to use 'sharing' in some form?Actually, you should only need to connect the iPod Touch to the router via WiFi. As long as the iPod Touch and the iMac are on the same network (which they should be, with most consumer-level routers) they should be able to see each other, and communicate with each other, as much as is needed to sync the data.

Alternatively, would I be right in thinking I could use computer-to-computer, but simply disconnect the link once I've synced Reunion files.Yes, you could sync, then after syncing turn off the computer-to-computer network on the Mac (i.e. simply turn off the Airport).