So what do you guys do to keep people out? Or do you leave it open for the world to connect?

My wireless network has:
-SSID Broadcast disabled
-MAC Address filtering
-WPA2-PSK encryption

I think it's good enough, since you would first need to figure out the network name, then you would have to fake your MAC Address (as one of mine, which you would need to find out somehow) and then you would have to crack my WPA-PSK password, all while being within range of my router

WPA2-PSK AES with a nice 63-character string, no ESSID broadcast, and an iptables script. When I get less lazy I'll probably up it to EAP-TLS or PEAP and add the Snort package. That oughta keep the punks out.

Finding your SSID takes seconds with Kismet, and Aircrack can pick up any/all of your associated MAC addresses just as quickly. MAC addresses are easily spoofed in Windows or Linux ... but WPA should stop them right there, as long as your WPA key is long enough. For good WPA keys:
http://www.kurtm.net/wpa-pskgen/

It's Javascript, so your computer does the work and it's not transmitted over the internets.

I think mines WPA2-PSK as well acctually.

McFly said:

Is AES really secure? I heard that it can be cracked pretty easily these days.

Roger Tiens said:

Unless you believe that the NSA snuck a backdoor into the AES standard (some people do; I do not), AES is considered very secure, and just about un-crackable by brute force methods. Of course, this assumes you've been diligent about selecting a long passkey that doesn't contain dictionary words, but that sort of goes without saying.