wpa2
Latest
Microsoft already has a fix for that severe WiFi security exploit (updated)
The "Krack Attack" WiFi encryption security flaw is more than a little frightening, but you should already be relatively safe if you're using a recent Windows PC. Microsoft has released a patch that fixes the vulnerability on all supported versions of Windows (effectively, 8 or later). Windows isn't as susceptible to the flaw as Linux-based platforms like Android, which don't demand a unique encryption key, but this fix may have a significant impact simply through the sheer ubiquity of Windows in the computing world.
Severe WiFi security flaw puts millions of devices at risk
Researchers have discovered a key flaw in the WPA2 WiFi encryption protocol that could allow hackers to intercept your credit card numbers, passwords, photos and other sensitive information. The flaws, dubbed "Key Reinstallation Attacks," or "Krack Attacks," are in the WiFi standard and not specific products. That means that just about every router, smartphone and PC out there could be impacted, though attacks against Linux and Android 6.0 or greater devices may be "particularly devastating," according to KU Leuven University's Mathy Vanhoef and Frank Piessens, who found the flaw.
Netgear's Universal WiFi Range Extender now available for balding home networks
Few things in life are more aggravating than WiFi dead spots -- especially when you've just settled in to stream the latest Game of Thrones episode, after a long and excruciating week of tech blogging. Good thing that Netgear's Universal WiFi Range Extender, first spotted at this year's CES, is now available for shipping. This discrete white cube promises to bring connectivity to remote regions of your lair by automatically mirroring the wireless signal emitted from your gateway. Just use the device's LED indicator to find the area where the extender would optimize its reach, plug it into any ol' AC outlet, and those ugly pockets of wireless death will suddenly spring back to life (think of it as Rogaine for your WiFi router). It also supports 802.11 b/g/n and is compatible with WEP, WPA and WPA2 security standards, in case you were wondering. You can find the extender at retailers located all over this green Earth, where it'll be priced at around $90. If that tickles your fancy, head past the break for the full PR.
FaceNiff makes Facebook hacking a portable, one-tap affair (video)
Remember Firesheep? Well, the cookie snatching Firefox extension now has a more portable cousin called FaceNiff. This Android app listens in on WiFi networks (even ones encrypted with WEP, WPA, or WPA2) and lets you hop on to the accounts of anyone sharing the wireless connection with you. Right now it works with Facebook, Twitter, YouTube, and Nasza-Klasa (a Polish Facebook clone), but developer Bartosz Ponurkiewicz promises more are coming. You'll need to be rooted to run FaceNiff -- luckily, we had such a device laying around and gave the tap-to-hack app a try. Within 30 seconds it identified the Facebook account we had open on our laptop and had us posting updates from the phone. At least with Firesheep you had to sit down and open up a laptop, now you can hijack Twitter profiles as you stroll by Starbucks and it'll just look like you're sending a text message (but you wouldn't do that... would you?). One more image and a video are after the break.
ElcomSoft turns your laptop into a one-touch WiFi cracking system
It's been a few years since we checked in with Elcomsoft's Wireless Security Auditor WiFi cracking software. As you'd expect, things have become easier, much easier. Elcomsoft now has an all-in-one solution that will locate wireless networks, intercept data packets, and crack WAP/WPA2 PSK passwords from any modern laptop with a discrete ATI AMD or NVIDIA graphics card. Here's the quote IT nerds will surely we love: Today, ElcomSoft is integrating a wireless sniffer into Elcomsoft Wireless Security Auditor. The integrated sniffer turns Elcomsoft Wireless Security Auditor into a one-button, all-in-one solution ready to be used by corporate security officers without specific experience in information security. Call us crazy, but if you're a C-level security officer with no specific information security experience then maybe you shouldn't be sniffing people's data packets. Then again, we're sure ElcomSoft will happily sell their $1,199 pro software or $399 standard edition to any hacker willing to pay, white hat or not.
Nintendo DSi XL review
Since Nintendo first asserted sole domination over the handheld gaming market with the release of the paperback-sized Game Boy in 1989, the company has striven time and again to make its pocket systems smaller, meeting fantastic financial success along the way. Nintendo did it with the Game Boy Pocket, the Advance SP, the Micro, the DS Lite and again ever so slightly with the DSi -- the last even at the expense of backwards compatibility and battery life. Now, for the first time in the company's history, it's made an existing platform bigger, with questionable reasons as to why. Does the Nintendo DSi XL squash its predecessors flat? Or is Nintendo compensating for something? Find out inside. %Gallery-89058%
PSA: Xbox mandatory update isn't 'The Big One,' adds WPA2 support for wireless adapter
Those of you who woke up extra early this morning to get in precious alone time with your Xbox 360 (we understand – we do it all the time) may have been tricked when a mandatory system update greeted you in place of the dashboard. Alas, the much ballyhoo'd Facebook/Twitter/Last.fm update has not yet arrived, as Microsoft's Major Nelson points out on his site. Instead, the update brings with it support for the now five-year-old WPA2 security protocol. With that new and improved 802.11n wireless adapter hitting retailers next month, and with WPA2 certification being mandatory for all new Wi-Fi devices as of March 2006, Microsoft seems to be rolling out that addition in software. That's good news for those of you with a four-year-old Xbox 360 Wireless Adapter!
WPA networks cracked in just under a minute, researchers claim
To think it was just a few months ago that we thought taking 15 minutes to crack WPA encryption was a feat. Researchers from Kobe University in Japan are claiming they can best that by a wide margin by cracking any WPA-protected connection using the TKIP algorithm within just one minute flat. The details will be revealed at a tech conference on September 25th. Feeling paranoid? Bump up your encryption to the still-secure AES algorithm or WPA2... and if you're just wanting to live life on the edge, consider downgrading to WEP -- it's as good as open at this point anyway.
WPA cracked in 15 minutes or less, or your next router's free
They always knew it could be done; that a hacker with enough time and processing power could watch your WPA-protected wireless network and, eventually, decrypt your precious datas. In under 15 minutes, though? "Inconceivable!" those hypothetical security experts would say -- but they're about to get a lesson from WiFi wizard Erik Tews. He'll be giving a presentation next week at the PacSec Conference in Tokyo, describing the "mathematical breakthrough" that, he says, enables him to crack WPA-TKIP in 12 to 15 minutes. There are some limitations, as the data sent from a connected device to the compromised router is apparently still safe, but anything headed t'other way is wide open, and could even be supplanted by bogus bits sent from a Cheetos-munching hacker slouching in a rusty Ford Taurus in the parking lot. Don't believe us? Tews was the guy able to crack WEP in under a minute last year, ironically advising people to switch to WPA ASAP at the time. We can only assume WPA2 is next.
Elcomsoft uses NVIDIA GPUs to crack WPA2
Elcomsoft has been using NVIDIA's CUDA GPU computing architecture to accelerate its Distributed Password Recovery tool for a while now, but it looks like the latest version of the cracking utility takes it to the next level -- it can break a WPA2 password using two GeForce GTX 280-based boards 100 times faster than with just a CPU. It's still a brute-force crack, but only a few packets need be sniffed, and the GPU accelerates the algorithm used to generate keys significantly -- even laptop-grade 8800M and 9800M GPUs speed things up 10 to 15 times. We wouldn't worry too much about wardrivers with trunk-mounted bladeservers going nuts, however -- the base version of the software costs $599, and things ramp up to $5,000 pretty quickly.[Via HotHardware]
Wi-Fi Alliance 802.11n Draft 2.0 testing begins -- certified products soon
In a move meant to ensure compatibility across vendors, the Wi-Fi Alliance has started interoperability testing of 802.11n Draft 2.0 products. That means "WiFi Certified" products should hit for retail before summer is out. Besides sporting that swank new logo, the certification should provide some peace of mind related to WPA2 security, WMM QoS for video streaming, and compatibility with legacy 802.11a/b/g regardless of the manufacturer. While cross-platform certification testing of a draft spec is unusual and likely won't guarantee 100% compatibility, it's still a welcome step by the industry given the troubled history of interconnecting disparate 802.11 draft devices in the past. Besides, with the final IEEE spec (already two and half years in the making) not expected until September 2008, what else could Apple, Dell, Sony, Nokia, Cisco and the other 250 or so members do in the face of such mucho demand?
Actiontec unveils range-extending Wireless FMC Router for mobile / WiFi hybrid phones
For those of you who happen to be in the predicament of owning a svelte hybrid cellular / WiFi phone, yet can't get cellphone service back in the boondocks where you reside, Actiontec is kicking out a range-extending router to help you make and receive calls on your mobile handset via WiFi. Touted as a "world's first," the Wireless FMC Router acts a standard four-port 802.11b/g/n router, supports WPA2 / WEP, and comes with a rather robust firewall to keep your conversations guarded from snoopers. Additionally, it facilitates call switching between the mobile and home WiFi networks as users move in and out of the house, giving you the option to connect via your cellular network or over VoIP with the same handset and same number. Aside from acting as a "middleman between the broadband and cellular networks," it can connect / drop from the WiFi / mobile networks on-the-fly while conversing, and can purportedly support "all major carriers" as well. So if you're thinking of consolidating the amount of phone numbers attached to your name, and don't mind picking up a hybrid handset, this multifaceted router will be able to simplify your conversations for $179.99 when it lands in Q2.
SpectraLink unveils NetLink 8000 series of 802.11a/b/g WiFi phones
For those of you who think VoIP just isn't good enough, or you manage an enterprise with hundreds of folks needing to yap it up simultaneously sans wires, you might be interested in SpectraLink's latest duo, which collectively claim the title of "world's first" 802.11a WiFi phones. The VoFi (voice over WiFi) handsets are part of the NetLink 8000 series, and both units feature 802.11a/b/g, WPA2 support for enhanced security, four programmable softkeys, audible / vibrating ringers, backlit displays, text messaging support via Open Application Interface (OAI), military grade shock resistance, speakerphone, and a software configuration tool to boot. The NetLink 8030 ups the ante by including dust / water resistance, rubberized grips for "improved ergonomics and durability," enlarged earpiece for noisy environments, and SpectraLink's "unique PTT feature." Both handsets should begin shipping during the first quarter of this year, and while the NetLink 8020 will run $595, the PTT-enabled NetLink 8030 will demand a whopping $675.[Via NetworkWorld]
Apple issues support doc for wonky AirPort performance on Intel Macs
Sketchy AirPort performance has been bugging me for weeks, probably over a month now, and I've been going through all forms of troubleshooting with my AirPort Express trying to squash the issue, but to no avail. My MacBook and iMac drop their Wi-Fi connection seemingly at random, sometimes right in the middle of Unreal online, and never regain it unless I manually re-select the network. I've been following the typical methods of changing channels on the APE, reducing range and using Interference Robustness - but it's all been for naught.Now, Apple has released a support document that might provide a solution for those like me who are experiencing less-than-stellar AirPort reliability and connectivity with their Intel Macs. The document specifies that these issues are related to the use of WPA2 and upgrading to 10.4.8, and I can't offer any feedback just yet as to whether my problem has been solved, but this doc is at least a step in a troubleshooting direction other than 'pull out more hair.' Feel free to share your experiences and any solutions in the comments.[via HardMac]
WPA-2 support left out
The manual for Microsoft's Xbox 360 Wireless Networking Adaptor clearly states, "Your wireless networking adaptor support WPA-2, WPA, and WEP security." Unfortunately, the device does not support WPA-2 and that got rSYN plenty steamed. After tracking down the Xbox connectivity project manager, gamertag Delta4, he was told, "We are aware that WPA2 is not supported by the Xbox360 Wireless adapter and that is by design." rSyn updated his page today writing, "Three more polite messages from Delta4. WPA2 was removed late in development. Apparently it shouldn't be in any documentation or any websites." For a $100 wireless adaptor I hope they update the software to support the feature. While it might not be the most widespread protocol, it does offer increased security. For the users that have a home network that relies on WPA-2, the option to revert down would be plenty frustrating. Other options include an wireless bridge that supports WPA-2 or a good old-fashioned LAN cable.Read on for a screenshot from the manual (PDF link). [Thanks, rSYN]
