Originally posted by RastaDave:

---

You should also disable broadcast ssid . So they cant see your router .

---

Originally posted by cee43ja1:

---

flash your router to dd-wrt if you can. you have the ability to see who is logged on to your network, and you can disable wireless access to the router; the only way to change settings is if you physically plug in directly to the router with an ethernet cable.

---

---

What is the "Hole196" vulnerability?



"Hole196" is a vulnerability in the WPA2 security protocol exposing WPA2-secured Wi-Fi networks to insider attacks. AirTight Networks uncovered a weakness in the WPA2 protocol, which was documented but buried on the last line on page 196 of the 1232-page IEEE 802.11 Standard (Revision, 2007). Thus, the moniker "Hole196".



Central to this vulnerability is the group temporal key (GTK) that is shared among all authorized clients in a WPA2 network. In the standard behavior, only an AP is supposed to transmit group-addressed data traffic encrypted using the GTK and clients are supposed to decrypt that traffic using the GTK. However, nothing in the standard stops a malicious authorized client from injecting spoofed GTK-encrypted packets! Exploiting the vulnerability, an insider (authorized user) can sniff and decrypt data from other authorized users as well as scan their Wi-Fi devices for vulnerabilities, install malware and possibly compromise those devices.



In short, this vulnerability means that inter-user data privacy among authorized users is inherently absent over the air in a WPA2-secured network. 

---