<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" > <channel><title>Comments on: Russian researchers achieve 100-fold increase in WPA2 cracking speed</title> <atom:link href="http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/feed/" rel="self" type="application/rss+xml" /><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/</link> <description>News and opinions about security, the internet and more</description> <lastBuildDate>Sun, 31 Jan 2010 10:43:42 +0000</lastBuildDate> <generator>http://wordpress.org/?v=2.9.2</generator> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <item><title>By: Technology for Mortals &#187; Debunking the latest fear mongering news on WPA security</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-1574</link> <dc:creator>Technology for Mortals &#187; Debunking the latest fear mongering news on WPA security</dc:creator> <pubDate>Mon, 20 Jul 2009 02:34:37 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-1574</guid> <description>[...] wireless LANs.&#160; Today I&#8217;m going to wear my myth busters hat again and alert you to the latest bunk news on the latest WPA cracking method and the irrelevant fear mongering &#8220;experts&#8221; that are [...]</description> <content:encoded><![CDATA[<p>[...] wireless LANs.&nbsp; Today I&#8217;m going to wear my myth busters hat again and alert you to the latest bunk news on the latest WPA cracking method and the irrelevant fear mongering &#8220;experts&#8221; that are [...]</p> ]]></content:encoded> </item> <item><title>By: We&#8217;re Going West &#187; Password Cracking</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-1222</link> <dc:creator>We&#8217;re Going West &#187; Password Cracking</dc:creator> <pubDate>Wed, 13 May 2009 18:19:28 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-1222</guid> <description>[...] http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-... [...]</description> <content:encoded><![CDATA[<p>[...] <a href="http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-.." rel="nofollow">http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-..</a>. [...]</p> ]]></content:encoded> </item> <item><title>By: Cracking Wifi In 3 Minute</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-527</link> <dc:creator>Cracking Wifi In 3 Minute</dc:creator> <pubDate>Mon, 29 Dec 2008 03:26:22 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-527</guid> <description>hi,what software can i use for cracking wpa? how long time to cracking wpa if i use standard machine? thanks.</description> <content:encoded><![CDATA[<p>hi,what software can i use for cracking wpa?<br /> how long time to cracking wpa if i use standard machine?<br /> thanks.</p> ]]></content:encoded> </item> <item><title>By: WWWednesday - Hektik Forums</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-183</link> <dc:creator>WWWednesday - Hektik Forums</dc:creator> <pubDate>Wed, 12 Nov 2008 09:42:06 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-183</guid> <description>[...] unveiled. For now... Guy Builds F-35 Fighter Jet On His Own. The 10 richest tech companies. Russian researchers achieve 100-fold increase in WPA2 cracking   speed. Make your own icons. Scientists Create Beer That Could Extend Life. The Internet For Plants. [...]</description> <content:encoded><![CDATA[<p>[...] unveiled. For now&#8230; Guy Builds F-35 Fighter Jet On His Own. The 10 richest tech companies. Russian researchers achieve 100-fold increase in WPA2 cracking   speed. Make your own icons. Scientists Create Beer That Could Extend Life. The Internet For Plants. [...]</p> ]]></content:encoded> </item> <item><title>By: Using Nmap to detect rogue Wireless Access Points &#171; InfoSec Philippines</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-115</link> <dc:creator>Using Nmap to detect rogue Wireless Access Points &#171; InfoSec Philippines</dc:creator> <pubDate>Thu, 06 Nov 2008 03:00:54 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-115</guid> <description>[...] articles regarding cracking of Wireless Access Points using Nvidia cards can be found in SCmagazineUK and Heise [...]</description> <content:encoded><![CDATA[<p>[...] articles regarding cracking of Wireless Access Points using Nvidia cards can be found in SCmagazineUK and Heise [...]</p> ]]></content:encoded> </item> <item><title>By: WPA2 cracked with NVidia Graphics Cards &#124; Blogspots</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-108</link> <dc:creator>WPA2 cracked with NVidia Graphics Cards &#124; Blogspots</dc:creator> <pubDate>Wed, 29 Oct 2008 04:22:59 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-108</guid> <description>[...] you don&#8217;t stutter your way through Crysis. Luckily the clever folks at Elcomsoft are finding other uses for those [...]</description> <content:encoded><![CDATA[<p>[...] you don&#8217;t stutter your way through Crysis. Luckily the clever folks at Elcomsoft are finding other uses for those [...]</p> ]]></content:encoded> </item> <item><title>By: WAP and WAP2 unsecure? WAP et WAP2 insésures? &#171; Alexis Laliberte&#8217;s Blog</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-107</link> <dc:creator>WAP and WAP2 unsecure? WAP et WAP2 insésures? &#171; Alexis Laliberte&#8217;s Blog</dc:creator> <pubDate>Tue, 28 Oct 2008 18:23:48 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-107</guid> <description>[...] http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-... [...]</description> <content:encoded><![CDATA[<p>[...] <a href="http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-.." rel="nofollow">http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-..</a>. [...]</p> ]]></content:encoded> </item> <item><title>By: Is my WiFi safe&#8230;? &#171; Technical Discussions</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-99</link> <dc:creator>Is my WiFi safe&#8230;? &#171; Technical Discussions</dc:creator> <pubDate>Sat, 25 Oct 2008 19:19:28 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-99</guid> <description>[...] http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-... [...]</description> <content:encoded><![CDATA[<p>[...] <a href="http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-.." rel="nofollow">http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-..</a>. [...]</p> ]]></content:encoded> </item> <item><title>By: fresh wordpress installation &#187; Russen kraken WPA2-sleutel op turbosnelheid</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-87</link> <dc:creator>fresh wordpress installation &#187; Russen kraken WPA2-sleutel op turbosnelheid</dc:creator> <pubDate>Sat, 18 Oct 2008 12:28:19 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-87</guid> <description>[...] ontwikkelde een nieuwe methode om WPA en WPA2-sleutels in slechts enkele dagen in plaats van jaren te kraken. Het bedrijf noemt de methode heel onschuldig Elcomsoft Distributed Password Recovery, maar zo [...]</description> <content:encoded><![CDATA[<p>[...] ontwikkelde een nieuwe methode om WPA en WPA2-sleutels in slechts enkele dagen in plaats van jaren te kraken. Het bedrijf noemt de methode heel onschuldig Elcomsoft Distributed Password Recovery, maar zo [...]</p> ]]></content:encoded> </item> <item><title>By: Russian researchers achieve 100-fold increase in WPA2 cracking speed - Attuworld.com</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-83</link> <dc:creator>Russian researchers achieve 100-fold increase in WPA2 cracking speed - Attuworld.com</dc:creator> <pubDate>Thu, 16 Oct 2008 04:05:16 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-83</guid> <description>[...] you can build a network of 20 workstations dedicated to “recovering” your “lost” WPA keys. This means that a WPA or WPA2 key could be cracked in days or weeks instead of years.  Tags: password recovery, tech, wpa, wpa2    You can follow any responses to this entry through [...]</description> <content:encoded><![CDATA[<p>[...] you can build a network of 20 workstations dedicated to “recovering” your “lost” WPA keys. This means that a WPA or WPA2 key could be cracked in days or weeks instead of years.  Tags: password recovery, tech, wpa, wpa2    You can follow any responses to this entry through [...]</p> ]]></content:encoded> </item> <item><title>By: Intermezzo (9) &#171; Blue Archive</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-82</link> <dc:creator>Intermezzo (9) &#171; Blue Archive</dc:creator> <pubDate>Wed, 15 Oct 2008 16:34:17 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-82</guid> <description>[...] Wochen statt Jahre [...]</description> <content:encoded><![CDATA[<p>[...] Wochen statt Jahre [...]</p> ]]></content:encoded> </item> <item><title>By: Richard</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-81</link> <dc:creator>Richard</dc:creator> <pubDate>Wed, 15 Oct 2008 14:15:17 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-81</guid> <description>I know many organizations require to use 802.11x and even hardware token to authenticate users. In addition, PCI-DSS has similar requirements of WPA. This might help mitigate the risks.</description> <content:encoded><![CDATA[<p>I know many organizations require to use 802.11x and even hardware token to authenticate users. In addition, PCI-DSS has similar requirements of WPA. This might help mitigate the risks.</p> ]]></content:encoded> </item> <item><title>By: Byte Into It - 15 Oct 08 &#171; Byte Into It - Computing and new technology</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-80</link> <dc:creator>Byte Into It - 15 Oct 08 &#171; Byte Into It - Computing and new technology</dc:creator> <pubDate>Tue, 14 Oct 2008 23:07:05 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-80</guid> <description>[...] Into It - 15 Oct&#160;08  Russian researchers achieve 100-fold increase in WPA2 cracking speed - Security and the Net Russian security company Elcomsoft just posted a press release (original PDF) detailing a new [...]</description> <content:encoded><![CDATA[<p>[...] Into It &#8211; 15 Oct&nbsp;08  Russian researchers achieve 100-fold increase in WPA2 cracking speed &#8211; Security and the Net Russian security company Elcomsoft just posted a press release (original PDF) detailing a new [...]</p> ]]></content:encoded> </item> <item><title>By: Micheal</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-75</link> <dc:creator>Micheal</dc:creator> <pubDate>Tue, 14 Oct 2008 18:23:18 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-75</guid> <description>Hiding your SSID is completely useless as Kevin has said it is in every packet. It&#039;s easy to find hidden networks.</description> <content:encoded><![CDATA[<p>Hiding your SSID is completely useless as Kevin has said it is in every packet. It&#8217;s easy to find hidden networks.</p> ]]></content:encoded> </item> <item><title>By: gonz0&#8217;s Blog &#187; Blog Archive &#187; Wireless security, once again defied</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-70</link> <dc:creator>gonz0&#8217;s Blog &#187; Blog Archive &#187; Wireless security, once again defied</dc:creator> <pubDate>Tue, 14 Oct 2008 02:37:28 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-70</guid> <description>[...] The article at Security and the Net [...]</description> <content:encoded><![CDATA[<p>[...] The article at Security and the Net [...]</p> ]]></content:encoded> </item> <item><title>By: Kevin</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-69</link> <dc:creator>Kevin</dc:creator> <pubDate>Mon, 13 Oct 2008 20:12:42 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-69</guid> <description>How does keeping your SSID hidden help since the SSID is placed as clear text in the header of every packet flying around.</description> <content:encoded><![CDATA[<p>How does keeping your SSID hidden help since the SSID is placed as clear text in the header of every packet flying around.</p> ]]></content:encoded> </item> <item><title>By: Shoal Creek</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-68</link> <dc:creator>Shoal Creek</dc:creator> <pubDate>Mon, 13 Oct 2008 17:53:14 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-68</guid> <description>WPA2-PSK keys can contain spaces and all sorts of things that complicate brute force attacks on passwords. I suggest you use a short (4-10 words), easy to remember pass-phrase with standard punctuation and capitalization. It also helps if you keep your SSID hidden. One other thing, use at least one archaic word or the brand name of some commonplace, unrelated item in your home for one or more words in your pass-phrase. That drastically increases the complexity of a successful brute force attack.</description> <content:encoded><![CDATA[<p>WPA2-PSK keys can contain spaces and all sorts of things that complicate brute force attacks on passwords. I suggest you use a short (4-10 words), easy to remember pass-phrase with standard punctuation and capitalization. It also helps if you keep your SSID hidden. One other thing, use at least one archaic word or the brand name of some commonplace, unrelated item in your home for one or more words in your pass-phrase. That drastically increases the complexity of a successful brute force attack.</p> ]]></content:encoded> </item> <item><title>By: Your WPA-PSK Wireless Network Is At Risk&#8230; If You Are An Idiot &#124; securosis.com</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-66</link> <dc:creator>Your WPA-PSK Wireless Network Is At Risk&#8230; If You Are An Idiot &#124; securosis.com</dc:creator> <pubDate>Mon, 13 Oct 2008 16:22:39 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-66</guid> <description>[...] was some great hype in the wireless security world this weekend thanks to an article that made it on to Slashdot, and some FUD pumping so-called security consultants. Elcomsoft issued a press release that they [...]</description> <content:encoded><![CDATA[<p>[...] was some great hype in the wireless security world this weekend thanks to an article that made it on to Slashdot, and some FUD pumping so-called security consultants. Elcomsoft issued a press release that they [...]</p> ]]></content:encoded> </item> <item><title>By: ToddH</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-65</link> <dc:creator>ToddH</dc:creator> <pubDate>Mon, 13 Oct 2008 13:55:52 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-65</guid> <description>I blogged on this over the weekend at http://www.napera.com/blog/?p=96.What makes this the perfect storm for WPA-PSK is two factors.1. The increased speed of brute force attacks against WPA, whether via this GPU accelerated method or rainbow tables.2. The typical simplicity of shared WPA-PSK passwords. Because they are shared by design, these passwords tend to be shorter, within a restricted character set and easily guessable.The solution is not deploying VPN&#039;s however. The solution is to deploy WPA Enterprise, which any WAP made since March 2006 supports.Of course, WPA Enterprise is another can of worms because many people are not comfortable with RADIUS, rolling your own certs and 802.1X.</description> <content:encoded><![CDATA[<p>I blogged on this over the weekend at <a href="http://www.napera.com/blog/?p=96" rel="nofollow">http://www.napera.com/blog/?p=96</a>.</p><p>What makes this the perfect storm for WPA-PSK is two factors.</p><p>1. The increased speed of brute force attacks against WPA, whether via this GPU accelerated method or rainbow tables.</p><p>2. The typical simplicity of shared WPA-PSK passwords. Because they are shared by design, these passwords tend to be shorter, within a restricted character set and easily guessable.</p><p>The solution is not deploying VPN&#8217;s however. The solution is to deploy WPA Enterprise, which any WAP made since March 2006 supports.</p><p>Of course, WPA Enterprise is another can of worms because many people are not comfortable with RADIUS, rolling your own certs and 802.1X.</p> ]]></content:encoded> </item> <item><title>By: zz: Russian researchers achieve 100-fold increase in WPA2 cracking speed &#124; En.dogeno.us</title><link>http://securityandthe.net/2008/10/12/russian-researchers-achieve-100-fold-increase-in-wpa2-cracking-speed/comment-page-1/#comment-64</link> <dc:creator>zz: Russian researchers achieve 100-fold increase in WPA2 cracking speed &#124; En.dogeno.us</dc:creator> <pubDate>Mon, 13 Oct 2008 07:52:24 +0000</pubDate> <guid isPermaLink="false">http://securityandthe.net/?p=395#comment-64</guid> <description>[...] Remark: with the power of GPU, no secure wireless networking now. Even WPA and WPA2 could be hacked in minutes. Let&#8217;s put gigabyte wired home networking to real!  from Security and the Net. [...]</description> <content:encoded><![CDATA[<p>[...] Remark: with the power of GPU, no secure wireless networking now. Even WPA and WPA2 could be hacked in minutes. Let&#8217;s put gigabyte wired home networking to real!  from Security and the Net. [...]</p> ]]></content:encoded> </item> </channel> </rss>
<!-- Served from: ps20275.dreamhostps.com @ 2010-03-10 09:24:39 by W3 Total Cache -->