WiFi Security: Gone in 60 Seconds
By Davey Winder in Editorial
Without repetition, hesitation or deviation WPA WiFi Encryption has been cracked wide open - in just a minute. Yep, Japanese researchers at Hiroshima and Kobe universities have reportedly managed to break the WPA encryption found on wireless routers in less than 60 seconds.
Toshihiro Ohigashi of Hiroshima University and Masakatu Morii of Kobe University will be explaining all to an eager audience in Hiroshima at a technical conference towards the end of September. It is, I am led to believe, the first time that previously purely theoretical WPA hacking techniques have been moved into the seriously practical realm. So whereas previous WPA attacks have been able to crack a relatively small set of routers, and took an admittedly still rather worryingly quick 15 minutes or so, the new method is said to be far more wide reaching and a whole heap quicker despite it using a similar approach in targeting the TKIP algorithm.
As far as I am aware, both WPA2 and AES remain safe from the techniques involved.
I have to admit that I am not entirely surprised by the new claims, only surprised that it has taken so long to destroy the integrity of what was only ever meant to be a stop gap encryption measure. Anyone serious about securing their WiFi networks would surely have moved to WPA2 yonks ago and dumped WPA with TKIP at the earliest opportunity. Indeed, it has been some three years now since all WiFi certified products have been required to support WPA2 so it is no new thing. Heck, it’s even relatively simple to step up from TKIP to AES on a lot of older WPA only routers. Mind you, even WPA2 encryption has come under attack recently with a Russian security company claiming it can crack WPA2 passwords quickly with a little help from NVIDIA graphics cards.
The full report “A Practical Message Falsification Attack on WPA” regarding the latest WPA attack methodology can be found here.
Rated: 100% (1 votes)
Loading ...
Gatecrashing the WiFi hotspot party
By Davey Winder in Editorial
I attended at flashy BT launch party held in the restaurant on the seventh floor of the Tate Modern art gallery in London last week. Peaches Geldof providing the predictably thump thump thump dance music to which nobody was dancing. There were, however, lots of people squeezed in, enjoying the full array of services on offer such as the food and drink. My colleague and I established ourselves near one group who had just returned from the bar area armed with a huge plate of food, lots of cold cuts and olive bread, sundried tomato and roasted peppers a-plenty. We sat there, waiting for our chance to pounce, and when nobody was looking pinched a little bread and a few cold cuts. Nobody seemed to notice, nor care, so we upped the ante and swiped the entire plate. Now despite sitting just a few feet away from the people whose food it was, they were oblivious to the fact that we were helping ourselves to something that belonged to them. They had erected no obstacles to make it more difficult to swipe the food, nobody stood between us and it, nobody questioned what we were doing when we moved the plate onto our table, nobody shouted at the tattooed man sharing their food without their consent to stop.
Exactly like WiFi it seems to me.
Vast numbers of users just plug in their wireless router and start playing, without fannying about with security stuff. Not just home users, the consumer oinks who know no better, but small business users at the corporate end of the WiFi stick who really should know better. Even the basics such as changing the default root access to the router itself so there is a different password, sometimes any password at all in fact, and an admin username other than root. Not doing this leaves the hardware compromised to anyone who goes and Googles for the default security information for the router in question. But the numbers of folk who do not bother implementing any kind of perimeter security to prevent passers-by, people in the next office, anyone within range from usurping the connection and making use of bandwidth they have not paid for is remarkable.
Which is why the irony that this was the launch party for a new venture between BT and FON to form the ‘world’s largest WiFi community’ did not escape me. You see the plan is that everyone on the BT Total Broadband scheme, all three million plus of them, will be able to join the share your WiFi party. By opening a secure channel on the wireless router a small part of their bandwidth will become available for use by any other member. In effect turning your home or office into a BT FON WiFi hotspot.
Great idea, and all that, but as I have pointed out one that hundreds, thousands and possibly hundreds of thousands of people are already making a reality today without even realising it.
Rated: 100% (1 votes)
Loading ...
Is this the fastest WiFi in the UK?
By Davey Winder in Editorial
Posted in WiFi on
In what promises to be a world first on a number of levels, Global Secure Systems
Not yet rated
Loading ...
Tag cloud
Archives
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
Most commented posts
- 80 percent of viruses love Windows 7
165 comments
- Has Microsoft gone mental?
- Has the US Army declared war on Windows 7?
- Cuil frozen out: market share drops to next to nothing
- Xbox 360 FAIL
- The 24GB RAM Desktop is born
- Use old version of Windows instead of Linux, says teacher
- Microsoft reveals time-based licensing model
- How Marblecake Hacked Time
- Nexus Two - The Next Generation
Highest Rated Blog Posts
- Why ecommerce fails (100%)
- Google Chrome stands alone at PWN2OWN (100%)
- Betting on Hubdub technology (100%)
- Has Google gone insane as GMail goes back to beta? (100%)
- Chinese whispers as government implicated in UK hack attacks (100%)
- Crimeware toolkit targets 10,000 trusted sites (100%)
- Black Hat risk to migrating VMs (100%)
- Tough on cyber crime, tough on the causes of cyber crime (100%)
- Firefox 3, Beta 4, Enhancements 900, Tested 5 (100%)
- Has the US Army declared war on Windows 7? (100%)
