New attack cracks common Wi-Fi encryption in a minute

Network World ^ | 27 August 2009 | Robert McMillan

[mowowie]

“Don’t forget to change the default login and password for the WAP admin account.”

Thats a biggie, if they can get into your wireless they can acess your router pretty easily.

[Billthedrill]

WPA2 is still good for now. We’ll see for how long. BTT.

[mowowie]

“but there are so many unsecured (no password) home networks out there....”

I have one right here.
Last week while on my back deck listening to tunes on my laptop i realized that an un-secured network somewhere had a higher power reception than my own wireless router so i used their internet instead of mine for the day.
Worked great.

[Califelephant]

Thanks to all for the good suggestions.

[Nervous Tick]

>> Mac address filtering is your friend. :)

Wow, you’re even more paranoid than me... you aren’t letting ANY mac ids connect! :-)

[Nervous Tick]

>> MACs can be spoofed quite easily

True, but you kinda need to know what ID to spoof; that’s a little bit harder of a problem. Not insurmountable, but harder.

[astyanax]

Interesting this originated in Japan.
From what I understand the laws are much harsher there.
You are held responsible for what is done with your equipment and a “hostile takeover” is not a valid excuse.
I’d be surprised if very many in Japan still used WEP.

[RobRoy]

>>>> Mac address filtering is your friend. :)

Wow, you’re even more paranoid than me... you aren’t letting ANY mac ids connect!<<

On my old Microsoft router, It was all I could get to work. I just got a new router and tried using actual security. It worked but when my daughter tried to get in using vista, instead of asking for the security code, it asked for a password and other data. We gave up and just had her use a neighbor’s unsecured wifi.

[Nervous Tick]

>> We gave up and just had her use a neighbor’s unsecured wifi.

ROFL! Another happy Vista customer.

[rabscuttle385]

Then break out Wireshark and start sniffing traffic. ;)

[Nervous Tick]

>> Then break out Wireshark and start sniffing traffic. ;)

Yeah, I guess a hacker could do that. Then he could break my WEP, and by golly, he’d be in!

I might get suspicious of that car in the cul-de-sac for a week, though. Not really close enough to any neighbors for someone to do it from an adjacent house.

I don’t know which is more pathetic — a guy like me who has a really boring on-line life, or a guy who would spend a lot of effort hacking the boring wifi comms of a guy like me. :-)

[Bloody Sam Roberts]

A great man I once worked for used to say, "Locks are made to keep out honest people."

Lock up something of value and a crook will always find a way to break the lock.

[rabscuttle385]

I might get suspicious of that car in the cul-de-sac for a week, though. Not really close enough to any neighbors for someone to do it from an adjacent house.

I would set up a small self-contained box somewhere nearby but in a hidden area...and just let that sniff traffic for a while. Pick it up later and analyze the results.

[RobRoy]

;)

Setting up my wifes Vista laptop was less of a challenge. I don’t remember why. With my daughter’s, I would click on my connection and it asked for information completely irrelevant to the actual key.

[Nervous Tick]

>> I would set up a small self-contained box somewhere nearby but in a hidden area...and just let that sniff traffic for a while. Pick it up later and analyze the results.

Oh, THAT’S what that box is. You might want to find a more interesting location for it!

[rabscuttle385]

Lol.

[Nervous Tick]

>> Setting up my wifes Vista laptop was less of a challenge. I don’t remember why.

On my brother’s, it went pretty well if he jacked into the router to set up his wireless. Fairly automatic, then unplug the cable and away you go.

Your daughter, on the other hand, must be on that special “federal watch list”. ;-)

[Brookhaven]

A great man I once worked for used to say, “Locks are made to keep out honest people.”
Lock up something of value and a crook will always find a way to break the lock.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Criminals (like water) always follow the path of least resistance.

As long as you have a bigger lock than your neighbor you are good.

[dayglored]

> Last week while on my back deck listening to tunes on my laptop i realized that an un-secured network somewhere had a higher power reception than my own wireless router so i used their internet instead of mine for the day. Worked great.

I don't doubt it. But you may have been compromised already, and if not you will be eventually.

An unsecured wireless is an obvious invitation to others. Well guess what? When you connect to such a network, you are a "peer" (on the same local net) to any other wireless user on that access point.

Including, of course, the guy who set it up, who has been waiting for you. Or the guy in the car, war-driving, and looking for victims. Bet on it -- there's a hacker who knows about, or set up, that unsecured wireless.

He is the spider in that web. As soon as you connect, he can connect to your computer. Unless you have strong passwords on your login accounts, he will be able to access your hard drive (e.g. on Windows using the default C$ share) with "administrator" privilege.

Connecting to an unsecured wireless is like having unprotected sex daily with strangers. Sooner or later you WILL get infected, or have your identity stolen, or your credentials copied.

It's a free country -- do as you wish. But at least, please use strong passwords, and a strong firewall that actively warns you of attempts to connect to your computer. That'll mitigate the danger a little.

[Political Junkie Too]

Is this enough for Obama to declare a cyber-threat and shut down the nations's private internet?

See ya... it's been nice chatting with everyone...

-PJ