Learn
Disabling WPS: Why and How
WPS has been broken since 2011. Here's why it's still enabled by default and exactly how to turn it off on common routers.
Disabling WPS: Why and How
WPS has been broken since 2011. Here's why it's still enabled by default and exactly how to turn it off on common routers.
WPA Enterprise Setup Basics
WPA Enterprise uses RADIUS and certificates instead of a shared password. Here's how the authentication flow works.
WPA Enterprise Setup Basics
WPA Enterprise uses RADIUS and certificates instead of a shared password. Here's how the authentication flow works.
802.1X for Home Networks
WPA Enterprise at home gives each person their own WiFi credentials. Here's how to set it up and whether the complexity is worth it.
802.1X for Home Networks
WPA Enterprise at home gives each person their own WiFi credentials. Here's how to set it up and whether the complexity is worth it.
Zero Trust Networking Basics
Being on the corporate WiFi doesn't mean you're trusted. Zero trust verifies every request regardless of network location.
Zero Trust Networking Basics
Being on the corporate WiFi doesn't mean you're trusted. Zero trust verifies every request regardless of network location.
Wireless IDS/IPS Overview
Wireless intrusion detection monitors the RF environment for attacks. Here's how WIDS and WIPS work and what they catch.
Wireless IDS/IPS Overview
Wireless intrusion detection monitors the RF environment for attacks. Here's how WIDS and WIPS work and what they catch.
BLE Security in Enterprise
BLE devices are everywhere in corporate environments. Here's the attack surface most enterprise security teams overlook.
BLE Security in Enterprise
BLE devices are everywhere in corporate environments. Here's the attack surface most enterprise security teams overlook.
Evil Twin Detection
An evil twin copies your network's SSID to intercept traffic. Here's how to detect one from both sides of the connection.
Evil Twin Detection
An evil twin copies your network's SSID to intercept traffic. Here's how to detect one from both sides of the connection.
Captive Portal Defenses
Malicious captive portals mimic legitimate WiFi login pages. Here's how to spot them and what your browser does to help.
Captive Portal Defenses
Malicious captive portals mimic legitimate WiFi login pages. Here's how to spot them and what your browser does to help.
Deauth Attack Mitigation: 802.11w and Beyond
802.11w protects management frames to prevent deauth attacks. Here's how to enable it, what it blocks, and what it doesn't.
Deauth Attack Mitigation: 802.11w and Beyond
802.11w protects management frames to prevent deauth attacks. Here's how to enable it, what it blocks, and what it doesn't.
Rogue AP Detection Methods
Rogue access points are one of the most dangerous WiFi threats. Here's how to detect unauthorized APs on your network.
Rogue AP Detection Methods
Rogue access points are one of the most dangerous WiFi threats. Here's how to detect unauthorized APs on your network.
Guest Network Security: What It Does and Doesn't Protect
Your router's guest network checkbox provides some isolation. Here's what it actually protects and where it falls short.
Guest Network Security: What It Does and Doesn't Protect
Your router's guest network checkbox provides some isolation. Here's what it actually protects and where it falls short.
Network Segmentation With VLANs at Home
Put your IoT devices on their own VLAN so a compromised camera can't reach your laptop. Here's the practical setup.
Network Segmentation With VLANs at Home
Put your IoT devices on their own VLAN so a compromised camera can't reach your laptop. Here's the practical setup.
Using Pi-hole for Network-Wide Ad Blocking and Security
Pi-hole blocks ads and known malicious domains for every device on your network via DNS. Here's the complete setup.
Using Pi-hole for Network-Wide Ad Blocking and Security
Pi-hole blocks ads and known malicious domains for every device on your network via DNS. Here's the complete setup.
DNS Sinkholing Explained
DNS sinkholing redirects queries for known bad domains to a dead end. Here's how it works as a network-wide defense.
DNS Sinkholing Explained
DNS sinkholing redirects queries for known bad domains to a dead end. Here's how it works as a network-wide defense.
Intrusion Detection With Suricata: An Overview
Suricata inspects network traffic for known attack patterns in real time. Here's how it works and how to deploy it.
Intrusion Detection With Suricata: An Overview
Suricata inspects network traffic for known attack patterns in real time. Here's how it works and how to deploy it.
Network Monitoring Basics
Knowing what's happening on your network is the first step in defending it. Here's what to monitor and how.
Network Monitoring Basics
Knowing what's happening on your network is the first step in defending it. Here's what to monitor and how.
pfSense Basics for Home Networks
pfSense turns old hardware into a serious firewall/router. Here's the basics of getting it running on a home network.
pfSense Basics for Home Networks
pfSense turns old hardware into a serious firewall/router. Here's the basics of getting it running on a home network.
Setting Up a Home Firewall
Your router has a firewall. Here's how to configure it properly, what inbound vs outbound rules do, and when to consider dedicated hardware.
Setting Up a Home Firewall
Your router has a firewall. Here's how to configure it properly, what inbound vs outbound rules do, and when to consider dedicated hardware.
802.11p: The WiFi Standard for Vehicles
802.11p enables vehicle-to-vehicle communication on the 5.9GHz band. Here's how automotive WiFi works and its security model.
802.11p: The WiFi Standard for Vehicles
802.11p enables vehicle-to-vehicle communication on the 5.9GHz band. Here's how automotive WiFi works and its security model.
802.11ah HaLow: Sub-GHz WiFi for IoT
802.11ah HaLow operates below 1GHz for kilometer-range IoT WiFi. Different frequency, different use case entirely.
802.11ah HaLow: Sub-GHz WiFi for IoT
802.11ah HaLow operates below 1GHz for kilometer-range IoT WiFi. Different frequency, different use case entirely.
WiFi Aware (NAN) Explained
WiFi Aware lets devices discover each other and exchange data without joining a network. Here's how NAN works.
WiFi Aware (NAN) Explained
WiFi Aware lets devices discover each other and exchange data without joining a network. Here's how NAN works.
WiFi Direct Explained
WiFi Direct lets two devices connect over WiFi without an access point. Here's how the P2P negotiation works.
WiFi Direct Explained
WiFi Direct lets two devices connect over WiFi without an access point. Here's how the P2P negotiation works.
Consumer Mesh WiFi Systems Explained
Eero, Orbi, and Google Nest WiFi blanket your home in coverage. Here's how mesh works and the security trade-offs.
Consumer Mesh WiFi Systems Explained
Eero, Orbi, and Google Nest WiFi blanket your home in coverage. Here's how mesh works and the security trade-offs.
WMM and QoS in WiFi Explained
WMM gives voice and video traffic priority over background downloads. Here's how WiFi QoS actually works.
WMM and QoS in WiFi Explained
WMM gives voice and video traffic priority over background downloads. Here's how WiFi QoS actually works.