{"id":"sec-sb-router-settings-review","audience":"small-business","category":"security","track":"security","technique":"constraints","title":"Check your shop's Wi-Fi router against a checklist","free":false,"task":"Check your café's router settings against the checklist your IT helper gave you. List only the settings that fail, numbered, as 'setting: now -> change to', in the checklist's order. Plain text, under 70 words.","materialLabel":"Router settings and checklist (attached to your prompt automatically)","material":"Checklist from Ken (BrightDesk IT):\n1. Router admin password is not the factory default\n2. Staff Wi-Fi uses WPA2 or WPA3\n3. Guest Wi-Fi is separate from staff Wi-Fi and can't reach the card reader\n4. Remote management from the internet is off\n5. Firmware updates automatically\n6. WPS button pairing is off\n\nRouter settings page (Copper Kettle Café), screenshots typed out:\n- Admin login: user \"admin\", password \"admin\" (Default: yes)\n- Network \"CopperKettle-Staff\": Security WPA2-Personal\n- Network \"CopperKettle-Guest\": Security Open (no password), Guest isolation: OFF, same network as staff devices\n- Remote management (WAN access): Enabled, port 8080\n- Firmware: version 3.2.1, auto-update: ON, last updated Oct 28\n- WPS: Enabled\n- Parental controls: Off\n- Band steering: On\n\nNotes: The card reader is plugged into the router by cable. Customers like that the guest Wi-Fi has no password. Ken said an open guest network is OK as long as it's separate.","rules":[{"type":"numberedItems","count":4},{"type":"plainText"},{"type":"maxWords","max":70}],"mistakes":[{"title":"Grading by general advice","why":"The AI tells you to put a password on guest Wi-Fi, which Ken said is fine.","fix":"Say: \"Check only against Ken's checklist.\"","checks":["r1"]},{"title":"Listing everything","why":"The AI comments on every setting, including the ones that pass.","fix":"Add: \"List only the settings that fail, in checklist order.\"","checks":["r0","numberedItems"]},{"title":"No exact change","why":"The AI says 'secure your router' instead of the setting to flip.","fix":"Show the shape: \"setting: now -> change to.\"","checks":["r2"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 70 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 50 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in a printed note for Ken they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Uses the checklist","patterns":["checklist","ken","only against"]},{"label":"Lists only failures","patterns":["only (the )?(settings|failures|ones)","fail","don'?t list"]},{"label":"Shows the line shape","patterns":["->","now","change to"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Your IT helper already decided what matters. Point the AI at the checklist, ask only for failures, and show it the line shape.","rubricLabels":["Lists exactly these 4, in this order: admin password (still default), guest Wi-Fi not separate (isolation off), remote management on, WPS on","Does not flag WPA2 on staff Wi-Fi, firmware, parental controls, band steering, or the guest network having no password","Each line shows the current setting and what to change it to (for example 'Guest isolation: OFF -> ON')"]}