4 ms·
This story might want a caveat: "If the password doesn't change frequently." I think most people still don't think of "Key can be brute-forced in a few days of
by fixermark 8y ago
This story might want a caveat: "If the password doesn't change frequently."
I think most people still don't think of "Key can be brute-forced in a few days of offline processing" as "owned," necessarily.
- close04 8y ago"Several days" is orders of magnitude less than the interval between most password changes. The vast majority of users never change their WiFi password unless they get a new router.
- sp332 8y agoIt's a trade-off. If your data is valuable enough to change the password every day, it might be worth it for an attacker to rent a bunch of computing power and crack it in hours.
- LeifCarrotson 8y agoIt's a whole lot closer to "owned" than "key can be brute-forced after centuries of online processing". Previously, I believe, it was thought that you had to test the password against the actual router. An offline attack that lets you try millions of keys per second on as many machines as you want to spin up is pretty close to owned when compared to an online attack that only allows single-digit tests per second.