Much like the entropy 'myth' of '1337' speak passwords compared to overall password length, it seems that multiple modern 'PC advice' articles on the web still suggest hiding SSIDs and as MAC filtering.
Aside from those dubious points, they suggest using strong encryption (WPA2-PSK), changing the default router admin details (obviously) and the default router IP (to mitigate against drive-by internet exploits) but after reading - multiple - recent - answers, it seems every other bit of knowledge I previously had about router protection is completely wrong. It also seems that most of this knowledge has been known for over a decade...
I see plenty of answers explaining why these are bad, but few suggesting how to effectively remedy them.
What are the modern methods of protecting SOHO routers - from the technical to the social engineering point of view - against internet and wireless attacks?
Are there other methods of encryption that can be used on top of WPA2-PSK? Should NAS devices on such wireless networks be considered compromised? How can router firewalls be used to mitigate such attacks?