Slashdot Mirror
Researchers Crack WPA Wi-Fi Encryption
narramissic writes "Researchers Erik Tews and Martin Beck 'have just opened the box on a whole new hacker playground, says Dragos Ruiu, organizer of the PacSec conference. At the conference, Tews will show how he was able to partially crack WPA encryption in order to read data being sent from a router to a laptop. To do this, Tews and Beck found a way to break the Temporal Key Integrity Protocol (TKIP) key, used by WPA, in a relatively short amount of time: 12 to 15 minutes. They have not, however, managed to crack the encryption keys used to secure data that goes from the PC to the router in this particular attack. 'Its just the starting point,' said Ruiu."
All your AP are belong to us.
You have no chance to survive make your time.
I use WEP!
[FUCK BETA]
Of course you can.
If you want to take it to its logical conclusion, you can make that person hand you all his passwords and personal information if you storm into his house swinging a baseball bat or a samurai sword. I have seen some hollywood movies where the the president hands over the codes to national treasury to criminal masterminds who threaten to detonate nuclear bombs in metropolitan areas during some ceremonial parade -- that is until the retarded hero (usually Bruce Willis) shows up.
Face your daemons!
I know I just got root access...BTW could you put in some bread? I'm trying to install pop-up's.
-Ours is the wisdom of Solomon, the magic of Merlyn, the fall of Icaris.
Meh, that's nothing, I use DOUBLE ROT13. Learn 2 secure your data you n00b!
Check out my blog!
I herd you liek TKIPs
Nerds like to sit.
You can sniff packets while sitting just about anywhere. In your kitchen. In your car. On the crapper.
To tap a line, you usually have to get up, and you often have to use some archaic toolset like Screw.Driver or Flash.Light that you haven't supported since 3 forks ago.
Its funny... my neighbors are probably thinking the same thing.
Bah... cat5 is already broken, and cat5e is next.
Got to think cat6 at least, if not cat7. They're much thicker; harder to break.
My security is a lot simpler and more effective: one of my neighbors has an open WAP with "linksys" for an ssid.
Don't worry, I changed the default admin password for them.
You can even do it without physical access on cheap routers and/or modems, by pointing a good digital camera and a telescope at the blinkenlights on the front of them. :D
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
They should tagged it "tagged" if it is tagged and "!tagged" if it's not tagged.
"People that quote themselves in their signatures bother me" - athakur999
Apparently you just haven't watched enough movies. Obtaining physical access IS trivial. All you need is a hot chick to go swipe the security guard's badge that he conveniently left lying on his desk, and you're guaranteed access anywhere in the building.
There is no -1 Disagree mod. Slashdot.org/faq defines mod options. USE IT.
Well duh, of course it's trivial. They're always swooning over you. (Well, except when they're pretending to fight with you, but even then they always come around just in time.) Haven't you learned anything from Hollywood??
There is no -1 Disagree mod. Slashdot.org/faq defines mod options. USE IT.
Look, obviously TKIP is more secure, becuase it has more letters.
You geek types are always saying I should use a longer password, right? This is the same thing.
And anyway, they wouldn't make it an option if it wasn't secure.
Yeah, except smarts and hotness are inversly proportianal in most cases.
What good is getting access when the bubblehead can't figure out what a wiring closet looks like.
WTF? Over?
What's also funny is that my router gives me better throughput with WPA/AES than WEP
That's because your router is laughing at you using WEP in between encrypting/decrypting the packets....that's why it takes longer.
WTF? Over?
If WPA is Cracked then is WPA2 Mad?
hey its "yes, you can08" to meet the new stricter password requirements
IranAir Flight 655 never forget!
over 9000.
DRM: Terminator crops for your mind!
Or I could just whip out my Mr. Fusion.
Is that what the kids are calling it nowadays?
A hole even!
smarts and hotness are inversly proportianal
Wow, you must be really hot...
LOL! Is there a patch for that? He probably just needs to pull the UDP plug out the bottom and let all the dropped packets drain out. Where do you think they go when they are "dropped?" Dropped packet buildup has killed more routers than I can count.