Forum OpenACS Q&A: Response to Serving up OpenACS from home
The buffalo base station uses 128-bit WEP. You can explicitly deny connections from _all_ wireless cards, except those those MAC address you specify. So, in our network, only 3 wireless cards can connect at all.
In short, if you set up the base correctly, you can keep the casual hacker/script kiddie out. I'm sure an uber-leet hax0r could get into our setup. But I feel reasonably safe that no such people are within the range of our network.