12 ms·
Do you have a citation for that claim about WPS and home users? While it certainly could be the crowd I hang out with (not all of which are techies, mind you),
by tjohns 13y ago
Do you have a citation for that claim about WPS and home users?
While it certainly could be the crowd I hang out with (not all of which are techies, mind you), but I've never met anyone who uses WPS.
- tytso 13y ago"In December 2011, researcher Stefan Viehböck reported a design and implementation flaw that makes brute-force attacks against PIN-based WPS feasible to perform on WPS-enabled Wi-Fi networks. A successful attack on WPS allows unauthorized parties to gain access to the network. The only effective workaround is to disable WPS.[4]" - http://en.wikipedia.org/wiki/Wi-Fi_Protected_Setup#Security http://en.wikipedia.org/wiki/Wi-Fi_Protected_Setup#Security [4] http://www.kb.cert.org/vuls/id/723755 http://www.kb.cert.org/vuls/id/723755
- throwaway2048 13y agoWPS is enabled by default on practically every wifi router sold in the last 7ish years.
- gpvos 13y agoWell, not on mine, and it's a somewhat common one (Fritz!Box) in northwest Europe.
- x0054 13y agoMy buddy, who does security research, tells me that on stock firmwares of a lot of routers WPS is turned on and can not be turned off. He claimed that he encountered several routers where after turning off WPS in the settings he was still able to use WPS vulnerability to crack the key. He thinks it has to do with the setting not being fully applied, as in, the check mark changes, but nothing happens on the backend. Mind you, I think with open source firmware like TomatoUSB and good password you should be good.