View Full Version : FAO Geeks, Wifi Security
I strongly urge you all to upgrade to WPA2 as soon as possible.
Why? Well, I heard a rumour a while back that WPA-TKIP could be cracked quite easily.
Well, I've just cracked a WPA-AES-CCMP (512bit key) in the amazing time of 16 minutes.
If you want a secure network, or you're paranoid & live in a tin-foil house, move to WPA2.</p>
How easy is it to crack a wifi network and say, insert a virus?
mr.anderson
19-01-09, 07:28 PM
Can you count to 25 with one eye closed?
Easy enough.
But who would actually bother with a home network? Far more lucrative or satisfyingly destructive (to hackers) to got for a company network.
Can you count to 25 with one eye closed?
Easy enough.
Good answer!
Can you count to 25 with one eye closed?
Easy enough.
But who would actually bother with a home network? Far more lucrative or satisfyingly destructive (to hackers) to got for a company network.
Not really true, it depends on how many layers of security you have.
For example, you could crack the wireless key and be dumped onto a DMZ where you can only access a VPN gateway and have to VPN onto the internal network.
Or if you do gain access to the internal network immediately you still need to compromise a host within that network.
Dan
Can you count to 25 with one eye closed?
Easy enough.
But who would actually bother with a home network? Far more lucrative or satisfyingly destructive (to hackers) to got for a company network.
Some people would want to bother, ahem.
Is there any software you would need to hack a home network?
the_lone_wolf
19-01-09, 07:36 PM
Is there any software you would need to hack a home network?
a car
drive through the town centre for 10 seconds until you pick up an unsecured network:rolleyes:
a car
drive through the town centre for 10 seconds until you pick up an unsecured network:rolleyes:
My car has a co-ax cable soldered to the frame, and a wifi aerial connector on the other end. This may/may not be related to the above quote.
Starting to ask about what software you'd need, well, my initial instinct is to tell you to google. :)
Jester666
19-01-09, 07:40 PM
Yup. There's 15 unsecured networks in Soho Square alone! :rolleyes:
Not really true, it depends on how many layers of security you have.
For example, you could crack the wireless key and be dumped onto a DMZ where you can only access a VPN gateway and have to VPN onto the internal network.
How many companies bother with a setup like this? Not many.
Or if you do gain access to the internal network immediately you still need to compromise a host within that network.
That is true of a home network as well. Unless you just want internet access.
How many companies bother with a setup like this? Not many.
True, ive done a setup like that, but its a bit of a mess when i need to get someone onto the internal network quickly
I read about the prog that uses GPUs to crack the keys quick.
Proportianly how much slower is WPA2 over WPA1?
Corops should look into certificate authentication, but its not easy to setup.
I read about the prog that uses GPUs to crack the keys quick.
Proportianly how much slower is WPA2 over WPA1?
I used a standard CPU (nothing bright), and my brain. I made one change per packet every 60secs, manually. 16 mins later I had the key. The software I used was notepad, an app I wrote to display packets & allow me to paste them, and another one I wrote to generate MIC/ICV's.
WPA2 with a short key (sub 5 chars), and you're looking maybe a couple of days sniffing, then maybe 24 hours to crack (sniffed data assumed to be in the region of 15Mb).
Proportianly how much slower is WPA2 over WPA1?
Not seen a difference, i've been using it at home for ~6months or so
Corops should look into certificate authentication, but its not easy to setup.
VPN users authenticated by certs on smartcards...It was a Pain in the **** solution, but quite secure.
I believe you could also do certs using EAP (802.1x) although it's part of the wpa2 protocol. I've never implemented it on wireless.
WPA2 with a short key (sub 5 chars), and you're looking maybe a couple of days sniffing, then maybe 24 hours to crack (sniffed data assumed to be in the region of 15Mb).
Sounds like a few mins worth of data for us when people are actualy using WiFi.
Ah, but you hit anything teccy with a hammer hard enough it'll crack! ;)
In fact if you hit techies hard enough with a hammer they crack too...
... and geeks. :twisted:
Jester666
19-01-09, 08:28 PM
:winner: :smt046
Ah, but you hit anything teccy with a hammer hard enough it'll crack! ;)
In fact if you hit techies hard enough with a hammer they crack too...
... and geeks. :twisted:
oooh...Kinky!
Oh wait...did I say that out loud? :rolleyes:
Kilted Ginger
19-01-09, 09:38 PM
I seem to have wandered into the Swahili section of the org, i'll leave now.
vBulletin® , Copyright ©2000-2025, Jelsoft Enterprises Ltd.