The once thought 8 character length password may no longer be safe, after the GPU-accelerated password recovery attack can break weak WPA/WPA-2 PSK passwords.The Elcomsoft Wireless Security Auditor mentioned that its software can work completely off-line and find passwords by analyzing a dump of network communications, and display them in plain-text. The Wireless Security Auditor does require the source of a valid log of wireless communication.
Experts have urged IT managers to move from 8 character WMP passwords to 12 or 15, in a quote from David Hobson: "It's a wake-up call to IT managers, pure and simple. IT managers should now move to 12 and even 16 character keys as a matter of urgency. It's not very user-friendly, but the potential consequences of staying with eight character keys do not bear thinking about."
Places like Mumbai, India, have pushed law enforcement to take action with a wardriving police unit that locates insecure wireless networks, with laptops around the city, and notifies the owner of the network to secure their routers. Recent report suggestions that an estimated 88% of wireless networks in Mumbai are unsecured and encouraged police to take action to prevent the commission of a cognizable offence.
So what?
Glad to read about the steps taken in Mumbai.
I don't understand why people don't secure their networks and use a strong key. Like a 63 random alpha-numeric. That gives (52^63) = 1.283x10^108 combinatins if you exclude numbers.
Exactly (I own one) but I didn't think it will outperform 280's by a such large margin.
Yikes... I think it's time to move on from words and start using sentences for our passwords lol
Yikes... I think it's time to move on from words and start using sentences for our passwords lol
no the program only brute forces. you need to capture the data packets with another tool. commview for wifi etc.....
What exactly were you trying to say there, because that makes no sense?
Good question.. I was thinking the same..
It's the easiest to break.
You sniff up the network, find some MACs that connect to it and spoof it.
Bang ! You're in. Simple - ain't it ?
Did that in a few minutes.
You sniff up the network, find some MACs that connect to it and spoof it.
Bang ! You're in. Simple - ain't it ?
Did that in a few minutes.
MAC filtering will just give you a false sense of security. It should be banned because some people use it as the only security measure for their wireless network.
Last edited by Team C0re on 25 Jan 2009 - 23:52
Maybe something that works with the 4965AGN, or atheros chipset.
Maybe something that works with the 4965AGN, or atheros chipset.
Commview for Wifi, Wireshark, there are lots of tools. Google for them.
Maybe something that works with the 4965AGN, or atheros chipset.
Commview for Wifi, Wireshark, there are lots of tools. Google for them.
Actually Wireshark doesn't work afaik. It's not on their list of supported tools and Wireshark doesn't seem to have the ability to export the formats that this app requires.
-nm am drunk, just reread the article and i understand now. crazy stuff
because then you need to write it down, or save it in a text file for copy and paste, and that isn't very secure
The chars are around 70, meaning the combinations are 70^8. When I calculated with 50 chars and a 8000 pass per sec i got 159 years if i have not mistaken something.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.