Tag Archives: wifi

Israel Lifts iPad Ban

Posted on by
Reply

Israel announced that they have lifted the iPad ban.

“The scrutiny conducted by the Ministry technical team vis-à-vis Apple’s team, International laboratory and European counterparts confirmed that the device which could be operated in various standards will be operated in Israel in accordance to the local standards.”

Lets be honest. This had nothing to do with Israeli limitations on wireless communications. This had to do with importing a device that could be resold for significant profit without paying any sort of tax. Israel has more high-tech start-ups per capita than anywhere on earth. Needless to say the number of folks willing to pay a large premium to get their hands on one makes this a profitable market. It also makes the startups extra vulnerable to being extorted.

The truth is the iPad uses a pretty vanilla Broadcom BCM4329 (BCM4329XKUBG to be exact) chip. This is yet another chip in a very popular series of Broadcom chips for wireless communications. It handles Bluetooth and WiFi on one package making it very efficient and battery friendly. The iPhone 3GS uses the BCM4325. Millions of cell phones and laptops have very similar chips in them for the past several years. The radio is nothing new.

Almost every traveler bringing a laptop or smart phone into Israel has a wireless card of equal strength. If they had any real reason to believe that foreign wireless chipsets could be a danger to their infrastructure all laptops would need to be whitelisted before being brought to Israel. Clearly that’s not the case. Yes you can tweak via software to limit the power of a wireless card, but does anyone adjust their laptop when entering another country? Has anyone been checked when entering the country for wireless strength? I’m guessing not.

Now that a few weeks have passed, and the hype is starting to die down, there is no longer a need for the ban. Units will start shipping overseas soon anyway.

This isn’t a bad thing I might add. People who smuggle these devices in and resell them are just opportunistic and taking advantage of the situation.

802.11n Finalized

Posted on by
Reply

802.11n, something I was starting to think would never get beyond draft is now approved. Having suffered through “compliant” 802.11b devices I long ago decided wireless networking is fussy enough to warrant stricter standards. As a result I stuck to Wi-Fi Alliance certified 802.11g devices, and the results have been awesome. I’m still of the opinion that the difference between “compliant” and “certified” is gigantic. Certified 802.11n devices should start to appear in the next few months.

Looks like the goals for any 802.11n upgrade are MIMO (obviously) and preferably dual-band (2.4GHz and 5GHz). I can’t see why I would want to do anything otherwise.

Considering most ISP’s don’t yet provide the downstream or upstream bandwidth necessary to take saturate a good 802.11g network, I’m not sure it’s really necessary to upgrade just yet. Thanks to a solid signal I can sustain up to about 19 Mbps over 802.11g even with WPA2 overhead and slight signal degradation. Under 1ms pings as well. ISP currently offers up to 16 Mbps, 12 Mbps plans for mortals. Rarely is that performance actually seen thanks to “the Internets being a series of tubes”. At least for today upgrading would only improve local network performance, not Internet performance. Most traffic is going outside the network anyway. 802.11n would bring capacity up to 130 Mbps, but since the uplink is still 12 Mbps, that really provides no real performance boost.

For anyone who would argue the faster CPU’s on the newer access points would improve performance, I’ve found that my current AP rarely sees more than a 2% load, with rare spikes up to about 40% capacity.

Of course hardware providers, and retail outlets will continue to tell people that downloading will be 6X faster1, but logic and common sense proves otherwise. It’s the equivalent of a Bugatti Veyron stuck behind a funeral procession.

That of course also assumes all devices are connecting via 802.11n. If you have an 802.11g and 802.11n devices connecting over 2.4 GHz, you’re going to be in mixed mode and slow down while 802.11g devices send/receive anyway. As far as I know there’s no way around that.

Then there’s the issue of all the pre-N adapters sold in laptops over the past few years and their compatibility, which is generally pretty good, but not perfect when mixing vendors.

So despite the marketing getting even stronger, I don’t see how it would be really beneficial to upgrade just yet. The actual performance increase for most activity will be virtually non-existent until ISP’s get faster. I’d rather wait until the hardware matures and prices drop more.

1. up to 6X faster, actual results may vary.

How To Be More Secure With Your Data & Identity

Posted on by
6

It’s amazing how on a daily basis there’s a story about someone’s identity or data being stolen, personal info being misused, or just getting screwed via the Internet. Most of the time it’s due to a complete lack of standards regarding how people treat their digital property and identity. It’s the electronic equivalent of leaving your home and not locking the door. Anyone can come in and take what they want.
Continue reading →

WiFi WPA Encryption Partially Hacked

Posted on by
Reply

WPA Encryption, Temporal Key Integrity Protocol (TKIP) has been partially hacked.

To do this, Tews and his co-researcher Martin Beck found a way to break the Temporal Key Integrity Protocol (TKIP) key, used by WPA, in a relatively short amount of time: 12 to 15 minutes, according to Dragos Ruiu, the PacSec conference’s organizer.

They have not, however, managed to crack the encryption keys used to secure data that goes from the PC to the router in this particular attack

The key things to note is:

  1. The TKIP key has been hacked, but they haven’t managed to crack the encryption keys for data…. yet.
  2. This involves WPA, not WPA2 which supports AES.

I personally started using WPA2 and completely disabled support for TKIP a long time ago. I’m sure it will eventually be cracked, but hopefully I’ll be using something else by then.

Another good idea is to always ensure sensitive info is done using HTTPS if you can help it.

Edit [11/8/2008 @ 11:49 AM EST]: More info.

WMM Slowdown

Posted on by
Reply

I turned on Wireless Multimedia (WMM) support the other day on my wireless network, figuring QoS for a wireless network would pretty much be a slam dunk. For those who don’t know, the four access categories it uses are:

  • voice
  • video
  • best effort
  • background

I was surprised to find, at least with the Netopia box that this actually resulted in a significant slowdown in http traffic, even when there was no other services being used. To put some numbers out there, we’re talking 10000 kbps with it enabled vs. 17400 kbps when disabled (these aren’t scientific, they are just bandwidth tests). I think the performance hit negated any real benefit, at least in this case. The box doesn’t handle much VoIP, so it really doesn’t do much. Video is more about raw bandwidth these days than latency thanks to CDN’s becoming more common and reducing the bulk of the latency issue. Also interesting is that the CPU hit seems pretty minimal. Daily average increased from 2% to about 4%, it’s double but really nothing serious. With it enabled it never spiked past 50%, and that was only one time.

So after a few days testing, WWM is turned off. Seems QoS at least in this case doesn’t pay. I can’t complain, wireless performance (20Mbps+) and signal strength are fantastic (when the microwave isn’t on) for an 802.11g network. Despite that, there’s always the desire to find ways to make it even better. Next step would be 802.11n, but I have a thing against uncertified gear. Once it’s standardized, I’d strongly consider it, especially if I can find a device that supports Linux firmware.

Experiment complete.

Over Logging

Posted on by
3

Linksys On Southpark

Southpark last week featured an internet outage as a plot. Pretty clever though I was disappointed to not see 1 reference to the series of tubes. I’m not sure if the reference to Linksys (Cisco) being responsible for the Internet being down was a complement or an insult. Though those Linksys boxes are infamous with just dying like that until you power cycle. Any other brand seems to have figured out how to not have that issue. Linux firmware on a Linksys also seems to remedy it. References to “Independence Day” and “Close Encounters of the Third Kind” were clever.

You can watch it online by clicking on the screen grab.

AirPort Extreme’s Shortcomings

Posted on by
3

Apple is now shipping the AirPort Extreme. I personally think it’s a pretty nice wireless access point, but it has a few shortcomings which would make me a little hesitant. I’m hoping on the 2nd gen they fix it up a little. To be fair, I haven’t found the perfect Wireless device yet and AirPort Extreme’s shortcomings don’t exactly put it out of the running. For the price I’d expect to see more. Here’s what popped into my mind after reading more about it. Why is this on my mind? Because I just saw some great pictures on unboxing the AirPort Extreme.

  • 10/100 Ethernet – Now 100Mbps is pretty good, but when 802.11n is supposed to reach 540 Mbit/s, I expect Gigabit Ethernet. Especially on a device that expensive.
  • 3 Ports Switch – At first glance you may think the device includes a 4 port hub. The reality is it’s a 3 port hub. The 4th is the uplink (where you plug your modem in). Granted you can get a switch for cheap, it’s not the same. All that money, wireless capacity, and your sharing a wired 100Mbps port? Something is not right.
  • VPN Endpoint – Apple still hasn’t included a VPN Endpoint. Apple includes support for common VPN protocols like L2TP, IPSec, PPTP with Mac OS X for a while, as does Windows. A built in VPN endpoint would be a great addition.
  • Security – Documentation doesn’t mention anything about Stateful Packet Inspection (SPI) or DoS protection. Instead it mentions a vague “NAT firewall”. Not quite sure what that exactly is.
  • Other Features – Also lacking is WMM (Wireless Multi-media) , IGMP snooping, and UpNP (though I don’t care too much about UpNP). If there is support for any of this, it’s not mentioned anywhere I could find. Not even a mention about WDS, which was the most surprising to be missing from the list of acronyms. According to a comment below WDS does exist.
  • It’s not 802.11n certified – Truth is nobody has certification because the standard isn’t official yet. I’d personally like to wait to ensure I get something that is certified.

On a sidenote, did anyone else notice that neither the Airport Extreme website, nor the Apple 802.11 page give any numbers in regards to 802.11n performance? It won’t say more than “Up to five times the performance and up to twice the range compared to the earlier 802.11g standard.” I found it very strange to see no numbers “up to XMbps”.

Apple 802.11n Upgrade Fee

Posted on by
Reply

According to CNet and Engadget, the upgrade for 802.11n support on Intel Macs will be $1.99 ($2 in my book). Not much, but rather sad considering you already purchased the hardware, this is merely a regulatory deal. I presume we’ll also see sales tax.

Now will Apple break the mold and deliver 802.11n upgrades for older hardware? I’d love to eventually upgrade my Mini, but don’t really like the idea of an ugly external adapter hanging around my desk. Internal is so much cleaner. If I do have to go that way, I’d likely buy an Ethernet bridge rather than any sort of USB adapter, since that doesn’t waste USB bandwidth and won’t hog a USB port.

SOX Tax for Upgrades?

Posted on by
Reply

A very interesting piece by iLounge is creating a little buzz today. Hopefully in the next few weeks it will become clear if this is really true, or just FUD. Given my development background, and business education (especially going to school post-Enron) this was particularly interesting.

Most software and hardware products these days are updated after release through software updates to enable features that either weren’t reliable enough to be turned on when released, or weren’t possible (waiting for standardization, licensing, testing, certification, etc.). It’s not at all uncommon.

It’s no secret Apple has been shipping computers for several months with 802.11g/n cards, but calling them 802.11g. Presumably all it takes is a firmware upgrade, and it’s ready to go. Now it appears that because of the Sarbanes-Oxley Act (SOX) [pdf], they are required to charge a small fee to enable the feature because:

…supposedly prohibits Apple from giving away an unadvertised new feature for one of its products.

The logic in a way makes sense, but this raises a lot of business ethics. If an update enables added security (such as changing a default in a software firewall), does the software developer need to charge an upgrade fee according to US law? What about when Microsoft added support for WPA2? Presumably at least some of the buts utilized were in Windows prior to that update.

Here is an even more twisted example: Starting this spring with the new Energy Policy Act of 2005 in effect. Daylight Savings Time has changed. It starts earlier and ends later. For accounting and legal purposes you must correctly date your records, for example in Quicken/Quickbooks, or even timestamp on email could also be important. Does Microsoft need to charge for this upgrade to comply with SOX? Remember, this patch isn’t a bug “fix” since nothing was “broken” (the functionality was correct). This patch adds support for the new Daylight Savings Time. Hence it’s technically a [boring] feature to an existing product (Windows). Just like enabling 802.11n.

But what about Nintendo Wii or Playstation III which will presumably be getting firmware updates along the way to enable new features. I’m pretty sure Sony would be bound by the same laws. Not sure about Nintendo since it’s traded on the Nikkei Stock Exchange.

Disclaimer: I’m not a lawyer. I hope the Apple lawyers messed things up here and really misinterpreted the law. Since this is pretty messed up. I have a good feeling we’ll be learning more about this in the upcoming weeks.

Update [01/19/2007]: It’s Apple speaks: It’s $1.99.

Update [01/20/2007]: It’s not SOX, it’s GAAP causing the issue. CNet discusses.