Slashdot Mirror
WPA Encryption Cracked In 60 Seconds
carusoj writes "Computer scientists in Japan say they've developed a way to break the WPA encryption system used in wireless routers in about one minute. Last November, security researchers first showed how WPA could be broken, but the Japanese researchers have taken the attack to a new level. The earlier attack worked on a smaller range of WPA devices and took between 12 and 15 minutes to work. Both attacks work only on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm. They do not work on newer WPA 2 devices or on WPA systems that use the stronger Advanced Encryption Standard (AES) algorithm."
You'll be able to provide more free wireless too!
The question is can anything be secure in the long term if an attacker can monitor the conversation between alice and bob 24/7? Sometimes a bit of obscurity can go a long way. Good luck trying to sniff my shielded network cables. Yes, I've heard the tempest stories but I'm jumping to the conclusion that those techniques are only available to big $$ governements institutions and are not used by the random drive-by hacker (yet..)
Wired ethernet. Not only is it vastly more secure, it's also an order of magnitude or two faster than wireless.
Game! - Where the stick is mightier than the sword!
I challenge you to show me a consumer available wireless that actually runs at 1 gigabit.
Are you *positive* that the VPN connection is uncrackable? If it's going over wireless, then if someone is recording the cyphertext, they will be able to recover the VPN cyphertext out of the WPA cyphertext. If they then know of a way to recover the 'cleartext' from the VPN cyphertext, then you are still leaking your data. If the VPN system is so secure, why aren't we using it for the wireless connection? That is, make the wireless network a VPN using the same algorithms you use for your VPN?
While I am not commenting on the security or lack of security in a VPN connection, I believe I can answer this. The simple fact is, most routers can't handle the encryption load of a full blown VPN, especially one with multiple users. Even dedicated routers that are made to handle this can only handle 5 or 10 at a time until you start plopping down the big bucks for the serious VPN routers.
So using VPN level of encryption on a home router is not going to happen until processing power is increased dramatically on the cheap CPUs they use.
> They do not work on...
Yet.
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
Old?
Wardriving happens more now than it ever did.
How is manually entering a MAC address into your router's configuration easier than entering a password into your friend's laptop?
IMHO that's *more* work, and does not even quality being called "not much security", it's none at all. MAC access lists don't even qualify as a security mechanism.
WPA2-AES is good. Use it.
What? A 7 year old Linksys WRT54G can handle 24-30Mbps with AES encryption, current versions are even faster, and if you choose wisely you can find 80-90Mbps home routers from Dlink/Netgear today.
These routers are more than adequate for more than "light surfing".
As they say, locks are only good for honest people.
The main reason you want a strong lock is not because they're unbreakable, but because your neighbor should be the easier target.
Because they are transmitted bright and clear all over the place? Whitelisting the authorised MAC addresses assumes that you do not trust the encryption (or there is none). If you assume the encryption is broken, you assume anyone can listen to the network and intercept any and all MAC addresses being transmitted (in [nearly?] every single packet).
They've found a way to decrypt TINY packets only a few bytes long (like ARP) and inject fake ones of the same length.
So no real traffic sniffing, and definitely no WPA key recovery.
I cant see really how this would be a useful tool in aircrack as you have no way of doing anything else with the network!
You are a waste of time, and those that modded you up are too. If all you have to say is RTFM, then don't say anything at all ass hole.
Mac address whitelists are a waste of time. Anyone who is competent can just monitor your network long enough to discover the mac address of a trusted device and switch his device to that address. Anyone who isn't competent isn't going to be able to bypass WPA.
If you want to get really paranoid you can back up your encryption with a non-permissive firewall that will only pass traffic for your device after you authenticate with it somehow. I used to do this back in the days when WEP was our only option. I ran my network wide open (since WEP is utterly pointless) but had a Linux box setting in front of it that refused to pass traffic unless I authenticated with it.
If you want to get creative you can program the firewall to redirect all unauthenticated http requests to goatse.cx instead of dropping them. That'll teach em to try and mooch off your network without permission ;)
I want peace on earth and goodwill toward man.
We are the United States Government! We don't do that sort of thing.
That's borderline retarded. The security isn't worth a damn and those who bypass it won't even be traceable via their MAC address, because you made them imitate your computer.