Wi-Fi 'protected set-up' not so protected after all

Just Playin · Dec 29, 2011

http://news.cnet.com/8301-30686_3-5...t-so-protected-after-all/?tag=mncol;cnetRiver

US-CERT said in its warning that there is no known fix to the security problem. Instead, the group recommends that users disable the WPS function on their routers. The warning lists several wireless router vendors as selling devices that are affected by the security hole: Buffalo, D-Link, Cisco Linksys, Netgear, Technicolor, TP-Link, and ZyXEL.

US-CERT indicated in its warning that it notified router vendors that are affected by the security issue in early December, but so far the vendors have not offered a response nor have any of them issued statements.

CNET also contacted the vendors listed by US-CERT, but has not yet received a response from any of them.
Click to expand...

Bazinga · Dec 30, 2011

http://news.cnet.com/8301-30686_3-5...hed-that-exploit-router-flaw/?tag=mncol;posts

Tools published that exploit router flaw

Stefan Viehbock, who first reported the vulnerability to the U.S. Computer Emergency Readiness Team, released a tool that can crack a home Wi-Fi network in two hours. And Craig Heffner of Tactical Network Solutions, who had been working independently on figuring out the same vulnerability that Viebock reported to US-CERT, has also developed a tool that will allow hackers to gain access to some secure Wi-Fi networks in four to 10 hours. His tool called Reaver is hosted on Google Code.

augiedoggie · Dec 30, 2011

Just lovely, they release code that %90 of folks wouldn't even know about by those who regularly steal bandwidth like spammers, cheap bastards etc. I better check the ISP's usage meter to see if I've been compromised again by a new neighbour, mind you I didn't have it secured in the first place.:-o

I wonder if Gibson's 63 character P/W would slow the brute force attack if I understood this article correctly after I disable WPS. I'm good in some things but I'm having a hard time wrapping my head around the article.

I'm thinking of getting one of those adapter sets to run on my electric wiring and kill wi/fi altogether. Here's my original thread for reference. Damn cost me enough!:mad

DavidGP · Dec 31, 2011

As with all security its the week link in passwords! use your pet, house number, maiden name etc and all are easily worked out by the determined or an app.

I tend to use WPA2 and have SSID off, and use for the router a very strong password, which without giving too much away are a mix of upper/lower case, symbols and numbers all intertwined in a phrase from a not so used language these days.

But I really dont think my router has WPS built in anyways, but may give one of the brute force tools a go for fun.

Log in or Sign up

Wi-Fi 'protected set-up' not so protected after all

Just Playin MajorGeek

Bazinga Private E-2

augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member