3 ms·
* True, but I doubt anybody is going to sniff my wireless, force me to de–auth and capture the 4–way handshake which she saves to crack offline in the comfort o
by jradd 10y ago
* True, but I doubt anybody is going to sniff my wireless, force me to de–auth and capture the 4–way handshake which she saves to crack offline in the comfort of her home, using cloud computing or gpu's. [0]
* The WPS attack doesn't work with every router that supports it, but allows for an easy way to compromise most modern routers. [1]
* RADIUS/EAP-TTLS is still rock solid. We all know WEP has already been broken and forgotten.
[0]: https://wiki.installgentoo.com/index.php/Breaking_WPA2 https://wiki.installgentoo.com/index.php/Breaking_WPA2
[1]: https://docs.google.com/spreadsheets/d/1uJE5YYSP-wHUu5-smIMTmJNu84XAviw-yyTmHyVGmT0/edit#gid=0 https://docs.google.com/spreadsheets/d/1uJE5YYSP-wHUu5-smIMT...
- d33 10y agoShe doesn't necessarily have to go offline given that everyone has a phone with internet access nowadays. Also, with week passwords, dictionary attacks, rainbow tables etc you might actually get compromised in minutes. And instead of de-auth, she might just as well wait. As for "I doubt anybody would do that" - it's not really a good security argument when we have the means easily available.