Wi-Fi Protected Setup Design Flaw Affecting Millions Of Wireless Routers

Most modern routers who uses design flaws in the Wi-Fi Protected Setup (WPS) could easily retrieve a wireless network's password through brute force and leave it open to attack. Stefan Viehböck at first brought the issue to light by security researcher and has since prompted a vulnerability notice from the United States Computer Emergency Readiness Team (CERT).

Basically,it is the PIN authentication used by many wireless routers “significantly” decreases the time required to launch a brute force attack against the PIN because the flaw allows the Attacker (Hacker) to know when the first half of predefined 8 digit PIN printed on a sticker by the router manufacturer is correct. In plain word, entering the wrong PIN returns information that could be useful to a Hacker. The lack of a proper lock out policy after certain numbers of failed attempts leads to guess the PIN on wireless routers which makes this brute force attack.

“An attacker within range of the wireless access point may be able to brute force the WPS PIN and retrieve the password for the wireless network, change the configuration of the access point, or cause a denial of service”, US-CERT said.

WPS was created in 2007 by the Wi-Fi Alliance in order to ease the set up of a wireless home network. The PIN-based method is mandatory for WPS-certified devices. This authentication method called “external registrar” that only requires the router’s PIN. Exact 8 digit PIN code would produce a huge figure of 100,000,000 possible combinations. It will take few years to crack the code for an Attacker/Hacker. The last digit is actually the Checksum of the other seven digits. It means, an attacker just only has to try 11,000 instead of 100,000,000 different combinations to find the Perfect combination of PIN.

Unfortunately, an authentication attempt takes only between 0.5 and 3 seconds, allowing an attacker to go through all 11,000 combinations in less than 4 hours. “On average an attack will succeed in half the time,” Viehbock said.

Stefan Viehboeck said in a blog, “few really bad design decisions which enable an efficient brute force attack, thus effectively breaking the security of pretty much all WPS-enabled Wi-Fi routers. As all of the more recent router models come with WPS enabled by default, this affects millions of devices worldwide.”

This flaw problem can be sort out through simple software fix and inputting a little more security. Till then the US-Cert has recommended users to switch off WPS.

Buy Cheapest Related Product From Amazon.com

Recent Tech News

When Facebook acquired Instagram for a whopping billion dollars, many of us kept wondering that why on Earth would the social network pay such a hefty sum for a photo sharing service. However, when Facebook later stated its ambition to be successful across the mobile platform, it was understandable since Instagram has been a huge success on the mobile devices. A recent development suggests, Facebook might have started to utilize the Instagram know-how in their (Facebook’s) products already. You will know what I mean when you see the recently launched ‘Facebook Camera’ app.

While RIM may be deemed the company that launched the true smartphone revolution with its BlackBerry devices and coined the very concept, Apple will always be termed as the company which popularized the notion of smartphones. And its not surprising to note now that iOS and Android smartphones dominate the total shipments of the smartphones made during the last quarter of 2012.

Facebook has become increasingly important for the brands to stay relevant and important on the social media. Facebook pages are a central hub for most brands to connect with their millions of fans and the social network keeps adding newer features to make this more easy and convenient. Now, Facebook has added yet another feature to pages.

Smile is a great way to express pleasure or joy at something or someone. But more often than not, it has to be forced and is fake. While that may work for a lot of people perfectly well, things are about to change. A new technology from MIT can now detect if your smile is true or fake, thus busting you right on spot for pulling that false grin.

  On December 31, 2011(4 months, 26 days ago.)

Recent Search

Tags
3D 3G Amazon Android App Apple Application Apps App Store AT&T Bluetooth. breaking news camera download entertainment Facebook features free free app Game Gaming Google HD HDMI How To HTC intel iOS iPad iPad 2 iPhone iPhone 3GS iPhone 4 iPhone app iPod ipod touch itunes iTunes link jailbreak Laptop MAC Microsoft Mobile news PC review samsung smartphone Software Sony Tablet tablets Tutorial Twitter update Verizon version video Wi-Fi Windows Windows 7
Close You Have To Login
User:
Pass:
Login With »Login With TwitterLogin With Facebook