3 ms·
You could extract the handshake nonces and do this easily enough. It's fairly pointless though because WPA2 uses a weak hash function, so your "contacts" would
by nly 11y ago
You could extract the handshake nonces and do this easily enough. It's fairly pointless though because WPA2 uses a weak hash function, so your "contacts" would still be able to intercept enough to attempt to bruteforce your password.
Also this entire thing seems dumb. If you need to connect to Microsofts server before you have wifi then you already have data.
- yuhong 11y agoI think it is to deal with data caps. And brute force is always possible if one has the 4-way handshake and the password is only useful if you are near enough to actually connect to the network. AFAIK the PSK uses PBKDF2.