Slashdot Mirror
WPA Encryption Cracked In 60 Seconds
carusoj writes "Computer scientists in Japan say they've developed a way to break the WPA encryption system used in wireless routers in about one minute. Last November, security researchers first showed how WPA could be broken, but the Japanese researchers have taken the attack to a new level. The earlier attack worked on a smaller range of WPA devices and took between 12 and 15 minutes to work. Both attacks work only on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm. They do not work on newer WPA 2 devices or on WPA systems that use the stronger Advanced Encryption Standard (AES) algorithm."
Slashdot sucks, eat my shorts.
(Haha, we broke into your WPA v1, in less than a minute - Japanese Researchers)
But what if I want to provide free AND secure wireless in a user friendly way? What about the people who want to provide free wifi that doesn't allow users to eavesdrop on each other's traffic?
WiFi security is pretty dismal.
There's nothing at the level of https - where users can have confidential connections without messing about too much - no need even for "username and password".
With WiFi, either users have zero security, or they have to enter a username and password (and possibly jump through other hoops).
I'd love to know if there's an existing way and I'm missing something. Forcing users to use IPSEC does not count as "not jumping through hoops".
Yes I know, https users still have to beware of MITM attacks, but at least fix WiFi to the https level.
[citation needed]
--- "When you gotta do something wrong. You gotta do it right. (Fighter)"
If you are too oblivious to be able to look up the documentation for whatever individual security tools you want to use, then you probably have no business using them in the first place.
"linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)