WPA encryption cracked

tweetiepooh · 10-11-2008, 09:25

http://www.vnunet.com/vnunet/news/22...hers-crack-wpa

OK so it only applies to data from the router to the clients not the other way round and it only applies to the older TKIP form WPA2/AES is not vulnerable but the researches claim to be able to break the encryption in 15 mins.

WPA2 has been mandatory on new equipment since March 2008 but I think most bigger name equipment will have it, may need new firmware.

DocDutch · 10-11-2008, 11:48

was bound to happen sooner then later.
at least I'm running on WPA2 but even that can be hacked.

Raistlin · 10-11-2008, 11:53

Quote:

Originally Posted by DocDutch

was bound to happen sooner then later.
at least I'm running on WPA2 but even that can be hacked.

At present there isn't a 'hack' for it as such, WPA2 is vulnerable to a brute force attack (but there's no great surprise there) - it doesn't really matter what you do though, that's always going to be the case.

Best advice is to use WPA2 with a long and strong passphrase. Don't use dictionary words, use mixed case, use numbers, use special characters, make it loooooooooong.

10-11-2008, 11:57

They cant hack my wireless as its switched off lol

Raistlin · 10-11-2008, 11:58

Quote:

Originally Posted by David F

They cant hack my wireless as its switched off lol

True (or is it?)

Wicked_and_Crazy · 10-11-2008, 13:13

Quote:

Originally Posted by David F

They cant hack my wireless as its switched off lol

The dont want to hack your radio anyhow

Uncle Peter · 10-11-2008, 14:42

If you don't really need it switch it off is probably the best advice indeed but it's high time that we saw a SOHO router with a decent WIDS/Containment capability. Last time I checked you could buy a Zonealarm router with a subscription based security schema but I'd be highly suspicious of anything bearing that name

I know that IDS is only as good as the person who sets up the rules and metrics but it is possible to at least offer a basic level of hard-coded containment protection against rogue threats.

BenMcr · 10-11-2008, 15:37

Anyone who has an Xbox 360 and wireless is in a bit of trouble. The official wireless adapter for it only does WPA

The PS3 does WPA2

Wicked_and_Crazy · 10-11-2008, 15:47

Quote:

Originally Posted by BenMcr

Anyone who has an Xbox 360 and wireless is in a bit of trouble. The official wireless adapter for it only does WPA

The PS3 does WPA2

I believe the DS only does WEP

tweetiepooh · 11-11-2008, 11:11

Quote:

Originally Posted by Wicked_and_Crazy

I believe the DS only does WEP

Yup that's true and no plans for anything else.

I use WPA2/AES and where I am that's sufficient. Thinking about getting the Belkin N1 Vision now the price is dropping (currently use Belkin) as the display on the device can indicate misuse.

Folk in higher density population areas have more of an issue.

The problem is that the more secure a system is the harder to set it up and so more likely to be not used or misconfigured to make life easy.

I'd like to unbridge all the LAN side so it can run on different networks and set the network masks to only allow limited IP addresses on each. Minimum useful would be 4 (1 for router, 2 for devices and 1 for broadcast). That could limit possibilities for external sources to hack.

Or maybe depeneding on your requirments some form of induction loop system to only have the wireless within your property. (No good if wanting to use in garden unless can run loop to enclose that too.)