4 ms·

It depends on your password: https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2 https://hashcat.net/wiki/doku.php?id=cracking_wpawpa2

bilbo0s 7y ago
Isn't that link telling people how to crack a password? What can we glean about how to secure a password?
- Avamander 7y ago
  WPA2 cracking is usually done with rainbow tables generated based on some dictionary and its mutations, basically don't have a dictionary password and you should be secure from /most/ attackers.
  - edoo 7y ago
    Your passsword should be made up of dictionary words though. If you do the math an 8 word sentence from the 10k most common words (just lowercase) is equivalent to a 16 character password from a full set of 100 characters and far easier to remember. Use some exotic words and punctuation and have a few random special characters in there and it is far far superior. WPA2 has a minimum of 8 characters and would take the same time to check every character as it would to check all combos of 4 lowercase words from the 10k most common set.
    - Avamander 7y ago
      WiFi passwords aren't typed in frequently and can trivially be written down on the home router itself, CorrectHorseBatteryStaple has lower entropy than a random one of a bit smaller length.
      - hombre_fatal 7y ago
        Wifi passwords are typed all the time if you have any friends that come over. And typing randomly generated special characters on a mobile device is especially awful.
        Avamander 7y ago
        No, they aren't if you create a nice QR code for people to scan.
        Fnoord 7y ago
        You should have your friends on a guest network instead, have this on a DMZ, and tell them to use a VPN over such guest network.
  - h4waii 7y ago
    Rainbow tables aren't really applicable to WPA2 due to the way offline cracking is done. You would have to pre-generate them for each possible SSID. You're much better off using a small targeted dictionary with rules.
    - Avamander 7y ago
      You are absolutely correct, it's usually indeed dictionary-based but there are rainbow tables as well http://www.renderlab.net/projects/WPA-tables/ http://www.renderlab.net/projects/WPA-tables/
- tomcooks 7y ago
  As much as a tutorial on how leaving your front door open lets burglars in your house.

bilbo0s 7y ago

Isn't that link telling people how to crack a password? What can we glean about how to secure a password?

Avamander 7y ago
WPA2 cracking is usually done with rainbow tables generated based on some dictionary and its mutations, basically don't have a dictionary password and you should be secure from /most/ attackers.
- edoo 7y ago
  Your passsword should be made up of dictionary words though. If you do the math an 8 word sentence from the 10k most common words (just lowercase) is equivalent to a 16 character password from a full set of 100 characters and far easier to remember. Use some exotic words and punctuation and have a few random special characters in there and it is far far superior. WPA2 has a minimum of 8 characters and would take the same time to check every character as it would to check all combos of 4 lowercase words from the 10k most common set.
  - Avamander 7y ago
    WiFi passwords aren't typed in frequently and can trivially be written down on the home router itself, CorrectHorseBatteryStaple has lower entropy than a random one of a bit smaller length.
    - hombre_fatal 7y ago
      Wifi passwords are typed all the time if you have any friends that come over. And typing randomly generated special characters on a mobile device is especially awful.
      - Avamander 7y ago
        No, they aren't if you create a nice QR code for people to scan.
      - Fnoord 7y ago
        You should have your friends on a guest network instead, have this on a DMZ, and tell them to use a VPN over such guest network.
- h4waii 7y ago
  Rainbow tables aren't really applicable to WPA2 due to the way offline cracking is done. You would have to pre-generate them for each possible SSID. You're much better off using a small targeted dictionary with rules.
  - Avamander 7y ago
    You are absolutely correct, it's usually indeed dictionary-based but there are rainbow tables as well http://www.renderlab.net/projects/WPA-tables/ http://www.renderlab.net/projects/WPA-tables/
tomcooks 7y ago
As much as a tutorial on how leaving your front door open lets burglars in your house.