3

I heard someone say that ethernet connection is vulerable if someone can connect to your LAN, and that the traffic isn't encrypted in the way it might be if you're using WPA wifi encryption. Is this true? And should I stop connecting via ethernet if the connection is not encrypted? I am connected directly to my cable modem.

5

The answer also depends on the physical aspect of the network configuration.

If your modem or router (or combo) is easily accessible by someone else, it is much easier to eavesdrop through Wifi, although like @VirtualJJ said, the communication is encrypted. Because through the LAN with ethernet protocol the communication can be wide open for anyone to sniff, but the fact is you have to be able to hard connect to the network.

The wifi is more easily accessible, yes, but it is encrypted and through a strong password and perhaps extra care (SSID not broadcasting and limited power on your wireless some it does not reach much further than your appartment) it can become more secure.

BTW, VLAN is a virtual LAN which means that you can group nodes. Usually you would group devices that need access to the same thing (same requirements) such as security devices (access control, alarm, cameras) or sales staff that needs access to a particular server. You basically create different segments independently of the physical portion. (Very useful feature)

4

Ethernet (802.3) and wireless (802.11) are simply communication protocols. How secure they are depends on configuration. How to configure security for both ethernet and wireless will be out of scope for this answer.

Out of the box, with no security configuration at all it would be easier to eavesdrop on an unencrypted wireless connection since the person eavesdropping doesn't have to plugin to the LAN and can sniff the traffic out of view. (e.g. use strong wireless antenna and sniff traffic from car a few blocks away)

If the wireless connection is secured using WEP or WPA it will be slightly more difficult but almost anyone can learn how to do it with a quick search.

If the wireless connection is secured using at least WPA2 then it would be very difficult so then the LAN would become the next easier option.

Depending on the physical environment we are talking about (i.e. corporate office, coffee shop, hotel business center) it would be easier to sniff traffic on ethernet if no VLANS or other controls are in place on the network over a properly secured WPA2 wireless connection.

If you are using a public ethernet (i.e. LAN drop) or wifi connection this is why it is important to use strong versions of VPN and/or HTTPS to protect your communications since you don't have control of the security of the network.

  • 1
    I'm talking about ethernet cable connected to my cable modem from my computer. Is this still possible to snoop? I am in an apartment but have many neighbors on many floors. Btw, what is VLANS? – user7149 Jun 30 '15 at 3:10
  • 1
    It is possible but it would require a device physically attached to your network in which hopefully you would notice. Here is a non-typical, obvious example: hakshop.myshopify.com/products/throwing-star-lan-tap VLANs are a way to separate a network. For example 192.168.1.1 and 192.168.50.1 would be separate networks and can be configured to not communicate – user79331 Jun 30 '15 at 4:45
  • Thank you for this fantastic link. Yes, if it looks like this i would surely be able to notice. – user7149 Jul 1 '15 at 1:37
3

Wireless networks are always on, and always open to being cracked. That said, WPA2 with a strong passphrase will be very difficult to break. So, for wireless, it really depends on your settings.

Physical ethernet wires are not encrypted, but they have the benefit of being physical: if you can secure the physical ports (and cable modem in your case) so that no one can connect, then that's even better than an encrypted connection (although both would be better).

If you are sharing your space with roommates/family, then you have a tricky situation. If you don't trust who has access to your network, then a strong wifi WPA2 passphrase might be the better solution.

  • Well if I'm the only one living here, no one can snoop from outside my apt via wifi then? Since they cannot be physically connected... – user7149 Jul 1 '15 at 1:41
  • 2
    Exactly, Ethernet would be the more secure option for you. – schroeder Jul 1 '15 at 5:00
-1

WPA is just encrypting your WIFI password. It doesn't encrypt the traffic. Stay connected through ethernet. There is no problem with ethernet. It is actually safer if you are concerned about it.

  • This is simply false. WPA and WPA2 (and even WEP, though WEP is broken and should not be used) encrypts the radio transmissions between your laptop/mobile device and the wifi access point. – dr jimbob Jun 30 '15 at 1:57
  • It would also be helpful if you explained why you think ethernet is safer. – schroeder Jun 30 '15 at 3:34
  • Thank you dr jimbob. I shouldn't answer questions outside of my area of expertise. You are correct. – user3632719 Jun 30 '15 at 15:16
  • So WPA/WPA2 is encrypted? And ethernet connection is not? I would like some clarity on why ethernet is safer. Altho I understand the physical connection being the source of security, I think I read somewhere that arp poisoning can happen in connected internet if the attacker knows the sites you visit. – user7149 Jul 1 '15 at 1:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.