I found an article on The Register which reckons that wireless security (particularly WEP even at 128-bit) is crackable within a few hours even if you don't broadcast your SSID.