Slashdot Mirror


New Wireless Security Standard Has Old Problem?

eggboard writes "Wireless security expert Robert Moskowitz, who sits on IEEE and IETF committees on that subject, sent me a short paper on a glaring weakness in the Wi-Fi Protected Access (WPA) protocol that's replacing the weak and broken WEP system well discussed here at Slashdot. His paper, which I've posted here, proves definitively that while WPA itself remains robust and secure, the interface for choosing consumer passwords makes it simple to snarf a tiny bit of network traffic and perform an offline dictionary attack. For Slashdot readers, this probably seems trivial, but because Linksys, Apple, and others are letting users enter My Dog Has Fleas as their passphrase, WPA might be less secure for home users than WEP."

11 of 249 comments (clear)

  1. 1st by Anonymous Coward · · Score: -1, Offtopic

    FIRST

  2. Major sky show and new North America speed record by Triquint · · Score: -1, Offtopic

    Off topic but relevant to Slashdot in general. Earlier today I submitted a story about a speed record attempt over North America this afternoon that people could go out and look at. It came out around 1pm that a coast-to-coast supersonic passenger jet - one of the final Concorde flights - was just about to start. I posted to Slashdot, and it still isn't up. The flight has now landed. Given all the excitement the plane has generated recently - see:

    Mystery Fireball a Concorde Contrail?
    http://science.slashdot.org/article.pl?sid=03/10/1 6/1320233&mode=thread&tid=134&tid=160

    it could have been serious for slashdotters in Canada and possibly northern US States incl Washington State to check out possible sonic booms and contrails/fireball appearance overhead, knowing there was a world speed record attempt on. Also, see the flast flight of a supersonic passenger plane over North America for who knows how long. How many times do you get to see that as it happens with your own eyes?

    The story had not made it to any news outlets I'm aware of yet. It only came to light through various plane aficionados keeping in touch with what North America air traffic control and airlines are planning. It went out on JFK air traffic control at 1pm, and hence became public knowledge. This would have been a Slashdot Internet scoop.

    So - question - if you know of something major about to happen, and want to alert slashdotters who are obviously interested given prior threads - how do you let everyone on Slashdot know about it while it is still happening? How do you get it through the submissions process before the story is dead? What about the next time something seriously interesteing is about to happen?

    Update - just posted on Seattle Museum of Flight website
    Page updated 4:00 p.m. PST, November 5, 2003
    http://www.museumofflight.org/visit/concorde.html
    Concorde has landed and set a new World's Record for New York to Seattle.

  3. first greased yoda doll post shizznogg! by Anonymous Coward · · Score: -1, Offtopic
    THE GREASED YODA DOLL GREASED YODA !

    8 steps to greasing your anus for yoda doll insertion

    1) defecate. preferably after eating senna, ex lax, prunes, cabbage and hot sauces.
    2) wipe ass with witch hazel, soothes horrific burns
    3) prime anus with anal ease.
    4) slather richly a considerable amount of vaseline or other anal lubricants into your rectum at least until the bend and also take your yoda doll or yoda soap on a rope and liberally apply it.
    5) pucker your ballon knot several times actuating the sphincter muscle in order to work it in
    6) slowly rest yourself onto your yoda figurine
    7) make sure to have a mechanism by which to fish yoda out of your rectum, the soap on the rope is especially useful because that is built in.
    8) gyrate gleefully in your computer chair while your fat sexless geek nerd loser fat shit self enjoys the prostate massage you'll be getting. Read slashdot. Masturbate to anime. Email one of the editors hoping they will honor you with a reply. Join several more dating services - this time, you dont check the (desired - speaks english) and (desired - literate). You figure you might get a chance then. Order some fucking crap from Think Geek. Get Linux to boot on a Black And Decker Appliance. Wish you could afford a new computer. Argue that IDE is better than SCSI because you cant afford SCSI. Make claims about how Linux rules. Compile a kernel on your 486SX. Claim to hate windows but use it for Everquest. Admire Ghyslain's courage in making that wonderful star wars movie. Officially convert to the Jedi religion. Talk about how cool Mega Tokyo is. Try and make sure you do your regular 50 story submissions to Slashdot, all of which get rejected because people who arent fatter than CowboyNeal can't submit. Fondle shrimpy penis while making a yoda voice and saying, feel the force, padawan, feeel the foooorce, hurgm. Yes. Yes. When 900 years you reach, a dick half as big you will not have.

    All in a days work with a yoda figurine rammed up your ass.

    Ground Control to Yoda Doll
    Ground Control to Yoda Doll
    Take your ass grease pills and put your helmet on
    Ground Control to Yoda Doll
    Commencing countdown, engines on
    Check ignition and may God's love shove up you
    Ten, Nine, Eight, Seven, Six, Five, Four, Three, Two, One, Shove Up
    This is Ground Control to Yoda Doll
    You've really made the grade
    And the papers want to know whose butts you tear
    Now it's time to leave the suppository if you dare
    "This is Yoda Doll to Ground Control
    I'm stepping through the door
    And I'm stinking in a most peculiar way
    And the ass look very different today
    For here am I sitting in an ass can
    Far inside the butt
    My face is turning blue
    And there's nothing I can do
    Though I'm past one hundred thousand bowels
    I'm feeling very still
    And I think my buttship knows which way to go
    Tell my wife I ream her very much, she knows"
    Ground Control to Yoda Doll
    Your circuit's dead, there's something wrong
    Can you hear me, Yoda Doll?
    Can you hear me, Yoda Doll?
    Can you hear me, Yoda Doll?
    Can you....
    "Here am I floating in my ass can
    Far inside his Moon
    My face is turning blue
    And there's nothing I can do."

    1. Re:first greased yoda doll post shizznogg! by floodo1 · · Score: -1, Offtopic

      im dead from laughing :)

      --
      I KUT J00 M4NG!!!
    2. Re:first greased yoda doll post shizznogg! by Anonymous Coward · · Score: -1, Offtopic

      I'm lauging so hard and I shat myself!!!

  4. taco is adicted to self fellatio by Anonymous Coward · · Score: -1, Offtopic

    treos rock

    I hope you choke on your own spunk you smarmy fuck

    <P> <A> <LI> <OL> <UL> <EM> <BR> <TT> <STRONG> <BLOCKQUOTE> <DIV> <ECODE>
    Important Stuff:
    Please try to keep posts on topic.
    Try to reply to other people's comments instead of starting new threads.
    Read other people's messages before posting your own to avoid simply duplicating what has already been said.
    Use a clear subject that describes what your message is about.
    Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
    If you want replies to your comments se

  5. My cat's breath smells like cat food. by Anonymous Coward · · Score: -1, Offtopic

    My cat's breath smells like cat food.

  6. rob malda fucks goats by Anonymous Coward · · Score: -1, Offtopic

    ghh mportant Stuff: Please try to keep posts on topic. Try to reply to other people's comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic,mportant Stuff: Please try to keep posts on topic. Try to reply to other people's comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic,

  7. MY BEST FREND IS A WHORE by Anonymous Coward · · Score: -1, Offtopic


    This has nothing to do with anything remotely Slashdot related, but I need to do something before my head explodes...

    As I type this, my roomate and my best friend/recent lover are fucking in the next room over. WHAT THE FUCK. After 10 years of friendship and built-up sexual tension, we finally hooked up and now less than a week later she's banging my roomate. I am so fucking incensed right now I can't think straight. I wouldn't mind if they went to a hotel or otherwise didn't make it known, but she just FUCKING WALKED PAST MY ROOM TOPLESS AND SHUT THE DOOR IN MY FUCKING FACE. How fucking insensitive can you be?!

    This sucks. It's 3AM and I'm telling strangers (GEEK strangers, no less) about my personal problems. I am a big pussy and will most likely not say anything to either one of them so I expect this to go on for a while. Fuck.

    Feeling low? There's someone else out there that's having a worse day than you. Trust me.

  8. morons raise bounty on corepirate nazi felons by Anonymous Coward · · Score: -1, Offtopic

    that's right. talk about malicious behaviour? these fauxking payper liesense stock markup FraUD billyonerrors, have done more damage to US, with their felonious softwar gangster crimewave/shoddy products, than can be measured accurately.

    so, in typical ?pr? ?firm? hypenosys gangster fashion, rather than repair the infactdead BugWear(tm) blight, they endeavor to shift the focus from their owned greed/fear/ego based foibles, to place the bullame (with the support of the georgewellian fuddite murderers) onto some vandals who did not much more than to eXPose the ongoing shoddiness of the felons' 'products'.

    they know J. Public has no clue as to the facts, & they continue (pretending) to deny the very existence of the creators, & the newclear power plan.

    lookout bullow. the daze of the greed/fear/ego based felonious payper liesense ?pr? ?firm? hypenosys stock markup fraud execrable, is WANing into coolapps/the abyss, at the (increasing) speed of right.

    pay no mind/money to the felonious payper liesense corepirate nazi softwar gangster stock markup FraUD execrable. they are self-dissolving by their owned MiSdeeds/whoreabull motives.

    that's won way to help to disempower unprecedented evile.

    consult with/trust in yOUR creator... get ready to see the light.

  9. Passphrase sucks... by craenor · · Score: 0, Offtopic

    Carry on, nothing to see here.