Slashdot Mirror
On The Current State of WiFi Security
An anonymous reader writes "A Flexbeta article covers the basics of WiF security. The article mentions mentions various ways of securing a WiFi network, how easy it is to crack WEP, and what the IEEE is doing about WiFi security. From the article: 'In order to address the security issues of WEP and the current Wi-Fi standards of 802.11a/b/g, the Institute of Electrical and Electronics Engineers (IEEE) is developing a new standard that is called 802.11i. This standard was developed with security in mind. The new standard implements new security entitled Wi-Fi Protected Access (WPA), which takes advantage of the Temporal Key Integrity Protocol (TKIP), is easier to setup using a pre-shared key, and can use RADIUS authentication.'"
I'm not even sure how shit like this gets posted. Editors need to learn to be fucking editors, and not bloggers.
The entire discussion of what's wrong with the IV usage under WEP is wrong. As is the "vulnerabilities" of CRC-32. It has no cryptographic purpose: it's intent is to ensure data integrity (i.e., not corrupted due to radio interference).
Anyone with any professional wireless experience knows that MAC filtering is a useless security measure, and shouldn't be bothered with.
There's more, but there's no real need to waste words on this tripe.