View Single Post
  #9 (permalink)  
Old 07-18-2007, 12:21 PM
Warren Oates
Guest
 
Posts: n/a
Default Re: ALERT: WPA isn't necessarily secure

In article <rfqq935suhvrj625a8qe8o425qr551l7t2@4ax.com>,
John Navas <spamfilter1@navasgroup.com> wrote:

> It's patently bad, as anyone in security would tell you. We have no
> idea how it actually works, who has access to the passwords, or who
> might have hacked the website. Without peer review, it's the same as
> unsafe sex. Worse, the statements on the website are patent baloney.


Unless I'm mistaken, WPA will only take an alphanumeric password up to
63 characters, right? This is trivial to generate on your own computer,
which is (hopefully) otherwise secured, using a decent "seed."

There's a lovely obscure and elegantly silly Bash shell script for this
in The Advanced Bash Scripting Guide, relies on this:

PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"

<http://www.faqs.org/docs/abs/HTML/contributed-scripts.html#PW>
--
W. Oates

Reply With Quote