decoration decoration
Stories

GROKLAW
When you want to know more...
decoration
For layout only
Home
Archives
Site Map
Search
About Groklaw
Awards
Legal Research
Timelines
ApplevSamsung
ApplevSamsung p.2
ArchiveExplorer
Autozone
Bilski
Cases
Cast: Lawyers
Comes v. MS
Contracts/Documents
Courts
DRM
Gordon v MS
GPL
Grokdoc
HTML How To
IPI v RH
IV v. Google
Legal Docs
Lodsys
MS Litigations
MSvB&N
News Picks
Novell v. MS
Novell-MS Deal
ODF/OOXML
OOXML Appeals
OraclevGoogle
Patents
ProjectMonterey
Psystar
Quote Database
Red Hat v SCO
Salus Book
SCEA v Hotz
SCO Appeals
SCO Bankruptcy
SCO Financials
SCO Overview
SCO v IBM
SCO v Novell
SCO:Soup2Nuts
SCOsource
Sean Daly
Software Patents
Switch to Linux
Transcripts
Unix Books

Gear

Groklaw Gear

Click here to send an email to the editor of this weblog.


You won't find me on Facebook


Donate

Donate Paypal


No Legal Advice

The information on Groklaw is not intended to constitute legal advice. While Mark is a lawyer and he has asked other lawyers and law students to contribute articles, all of these articles are offered to help educate, not to provide specific legal advice. They are not your lawyers.

Here's Groklaw's comments policy.


What's New

STORIES
No new stories

COMMENTS last 48 hrs
No new comments


Sponsors

Hosting:
hosted by ibiblio

On servers donated to ibiblio by AMD.

Webmaster
WPA2 Security (PJ's comment re The iPad for LItigators) | 343 comments | Create New Account
Comments belong to whoever posts them. Please notify us of inappropriate comments.
Also helps to change the SSID
Authored by: OpenSourceFTW on Monday, December 10 2012 @ 12:47 PM EST
The passphrase is salted with the SSID IIRC, so always change that to something
unique to prevent the use of rainbow tables.

I don't think PJ was knocking WPA2's protection by saying it was bad, just that
it was not as airtight as physical wire is (unless you tap it :P).

---
I voted for Groklaw (Legal Technology Category) in the 2012 ABA Journal Blawg
100. Did you? http://www.abajournal.com/blawg100. Voting ends Dec 21.

[ Reply to This | Parent | # ]

WPA2 Security --> WPS security flaw
Authored by: Anonymous on Monday, December 10 2012 @ 01:07 PM EST
As far as I know some routers (maybe other items too) that have "wireless
protected setup" turned on (and some are even still turned on when you turn
it off) can be made to reveal the password for enabling that WPS, and by having
access to WPS the WPA2 password can be easilly retreaved as well. (that was the
whole purpose of having WPS)

Of course that is a bad design and of course one should not exploit that. But it
would be wise to test your own sys.
For people with an internet connection, the information is probably still
somewhere out there.

[ Reply to This | Parent | # ]

  • WPS - Authored by: Anonymous on Monday, December 10 2012 @ 08:57 PM EST
WPA2 Security (PJ's comment re The iPad for LItigators)
Authored by: Anonymous on Tuesday, December 11 2012 @ 11:39 AM EST
With the cost of hardware dropping you need to be more vigilant.
Gpus are now being used and are pretty cheap. The linked article talks about a machine that does 350 billion guesses a second.
Reaver can capture the keys.
jasager setup man in the middle attacks.

[ Reply to This | Parent | # ]

Groklaw © Copyright 2003-2013 Pamela Jones.
All trademarks and copyrights on this page are owned by their respective owners.
Comments are owned by the individual posters.

PJ's articles are licensed under a Creative Commons License. ( Details )