WPA broken?

: Wireless networks that use a popular form of security known as
: Wi-Fi Protected Access (WPA) are vulnerable to an attack that
: could compromise certain communications in less than 15 minutes,
: two researchers plan to tell attendees next week at the PacSec
: 2008 conference in Tokyo.

http://www.securityfocus.com/news/11537


--
2GB RAM should be enough for anyone.

Axel Hammerschmidt wrote:
> : Wireless networks that use a popular form of security known as
> : Wi-Fi Protected Access (WPA) are vulnerable to an attack that
> : could compromise certain communications in less than 15 minutes,
> : two researchers plan to tell attendees next week at the PacSec
> : 2008 conference in Tokyo.
>
> http://www.securityfocus.com/news/11537
>
>

Switch to WPA2-AES

Todd wrote:
> Axel Hammerschmidt wrote:
>> : Wireless networks that use a popular form of security known as
>> : Wi-Fi Protected Access (WPA) are vulnerable to an attack that
>> : could compromise certain communications in less than 15 minutes,

Not precisely accurate:

"The attack does not allow the key protecting the communications to be
recovered, one of the researchers stressed... The new attack on WPA is
not a complete key recovery attack... It just allows you to decrypt
packets and inject packets with custom content. But there is only a
single short-term key recovered during the attack."

So nobody is going to be using this to steal wireless connectivity from
you, or use your connection to send spam or viruses, or to hack your OS.
>
> Switch to WPA2-AES

If your firmware supports it.

On 7 Nov 2008 23:28:21 GMT, Axel Hammerschmidt <hlexa@hotmail.com>
wrote:

>: Wireless networks that use a popular form of security known as
>: Wi-Fi Protected Access (WPA) are vulnerable to an attack that
>: could compromise certain communications in less than 15 minutes,
>: two researchers plan to tell attendees next week at the PacSec
>: 2008 conference in Tokyo.
>
>http://www.securityfocus.com/news/11537

Yep. It's being installed in aircrack-ng source (but not yet in
pre-compiled distribution binaries):
<http://www.aircrack-ng.org/doku.php?id=tkiptun-ng>
Details:
<http://dl.aircrack-ng.org/breakingwepandwpa.pdf>

--
Jeff Liebermann jeffl@cruzio.com
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558