The Final 'Final' Nail in WEP's Coffin?

crazijoe · 04-06-2007, 10:20 AM

Some good reading.

Researchers have discovered a new way of attacking Wired Equivalent Privacy that requires an amount of data "more than an order of magnitude" less than the best known key-recovery attacks. In effect, the cracking can be done within a minute, as the title of the paper suggests: Breaking 104 bit WEP in less than 60 seconds.

The ease of cracking WEP is nothing new; cryptanalysts showed six years ago that any WEP key can be cracked with readily available software in one minute or less. The protocol, which is part of the IEEE 802.11 wireless networking standard, was superseded by WPA (Wi-Fi Protected Access) in 2003, then by WPA2, another name for the full IEEE 802.11i standard.

http://www.eweek.com/article2/0,1895...EMNL040607EOAD

What's even worst is the amount of WiFi APs and wireless routers that are wide open.

**TheAtheist** · 04-06-2007, 12:06 PM

I'm glad my wireless netowork is WPA protected. It is amazing how lax people are with internet security these days. I use the example of your front door to explain the dangers. You wouldnt leave you front door open would you? why leave your internet connection open in the same way. It would be interesting to see a test case where someone go onto someones unproctected wireless network. Would they have grounds to appeal becuase force wasnt needed. Would be interesting to see what happened.

**Joefireline** · 04-06-2007, 12:23 PM

Wow, some kind of complicated forulars on that PDF artical on cracking in 60 secs:
K[i + 1] n S−1
i+1[(i + 1) − X[(i + 1) − 1]] − (Si+1[i + 1] + ji + Si[i] + K[i]) (3)
K[i] + K[i + 1] n S−1
i+1[(i + 1) − X[(i + 1) − 1]] − (Si+1[i + 1] + ji + Si[i]) (4)

I am actully still using WEP, and just check the MAC adresses every now and again, to check if anyone is on that shouldn't be on...

crazijoe · 04-09-2007, 06:04 AM

Yea I used to think my network was inpenetratable. Until someone decided to use my file server as there file server. But I won't get into that right know.

**Joefireline** · 04-09-2007, 06:35 AM

Quote:

Originally Posted by crazijoe

Yea I used to think my network was inpenetratable. Until someone decided to use my file server as there file server. But I won't get into that right know.

crazijoe, that is disgraceful grammar!

. 'there' and 'know'. Says me who keeps spelling 'Articles' wrong.

Hey, just noticed, only people called Joe have posted in this thread

**forcifer** · 04-09-2007, 06:28 PM

not anymore

our wireless is unprotected, but im just going too disable it. dont use it often..at all.

**Terrister** · 04-09-2007, 07:51 PM

Just changed my home router from WEP to WPA. When the script kiddies can download a program that makes WEP that easy to hack, time to change.

**Kalim** · 04-10-2007, 01:05 AM

That's pretty bad news. Hacking is already on a steep incline, as fashion.

ebackhus · 04-10-2007, 01:51 PM

As always I leave mine open, blocking unauthorized users as I see personally fit. I probably have more computers in my living room than the rest of the apartment complex does on average per building.

04-06-2007, 10:20 AM	#1 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	The Final 'Final' Nail in WEP's Coffin? Some good reading. Researchers have discovered a new way of attacking Wired Equivalent Privacy that requires an amount of data "more than an order of magnitude" less than the best known key-recovery attacks. In effect, the cracking can be done within a minute, as the title of the paper suggests: Breaking 104 bit WEP in less than 60 seconds. The ease of cracking WEP is nothing new; cryptanalysts showed six years ago that any WEP key can be cracked with readily available software in one minute or less. The protocol, which is part of the IEEE 802.11 wireless networking standard, was superseded by WPA (Wi-Fi Protected Access) in 2003, then by WPA2, another name for the full IEEE 802.11i standard. http://www.eweek.com/article2/0,1895...EMNL040607EOAD What's even worst is the amount of WiFi APs and wireless routers that are wide open. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

04-06-2007, 12:06 PM	#2 (permalink)
TheAtheist Mentor, Articles Team Join Date: May 2006 Location: Portishead, Bristol Posts: 1,316 OS: xp sp3 My System	Re: The Final 'Final' Nail in WEP's Coffin? I'm glad my wireless netowork is WPA protected. It is amazing how lax people are with internet security these days. I use the example of your front door to explain the dangers. You wouldnt leave you front door open would you? why leave your internet connection open in the same way. It would be interesting to see a test case where someone go onto someones unproctected wireless network. Would they have grounds to appeal becuase force wasnt needed. Would be interesting to see what happened.

04-06-2007, 12:23 PM	#3 (permalink)
Joefireline Enthusiastic TSFer~Joseph Join Date: Apr 2006 Location: Portishead (Bristol) England Posts: 5,319 OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop) My System	Re: The Final 'Final' Nail in WEP's Coffin? Wow, some kind of complicated forulars on that PDF artical on cracking in 60 secs: K[i + 1] n S−1 i+1[(i + 1) − X[(i + 1) − 1]] − (Si+1[i + 1] + ji + Si[i] + K[i]) (3) K[i] + K[i + 1] n S−1 i+1[(i + 1) − X[(i + 1) − 1]] − (Si+1[i + 1] + ji + Si[i]) (4) I am actully still using WEP, and just check the MAC adresses every now and again, to check if anyone is on that shouldn't be on...

04-09-2007, 06:04 AM	#4 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	Re: The Final 'Final' Nail in WEP's Coffin? Yea I used to think my network was inpenetratable. Until someone decided to use my file server as there file server. But I won't get into that right know. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

04-09-2007, 06:28 PM	#6 (permalink)
forcifer Registered User Join Date: Nov 2005 Location: Kansas City kansas Posts: 3,625 OS: Vista Premium 32 My System Blog Entries: 1	Re: The Final 'Final' Nail in WEP's Coffin? not anymore our wireless is unprotected, but im just going too disable it. dont use it often..at all. __________________ now i remember

04-09-2007, 07:51 PM	#7 (permalink)
Terrister Moderator Hardware Forum Join Date: Apr 2005 Location: West Georgia, USA Posts: 7,098 OS: Xp	Re: The Final 'Final' Nail in WEP's Coffin? Just changed my home router from WEP to WPA. When the script kiddies can download a program that makes WEP that easy to hack, time to change. __________________

04-10-2007, 01:05 AM	#8 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	Re: The Final 'Final' Nail in WEP's Coffin? That's pretty bad news. Hacking is already on a steep incline, as fashion.

04-10-2007, 01:51 PM	#9 (permalink)
ebackhus Manager, Design Join Date: Apr 2005 Location: SATX Posts: 14,249 OS: WinXP Pro SP3/Windows 7 RTM My System Blog Entries: 28	Re: The Final 'Final' Nail in WEP's Coffin? As always I leave mine open, blocking unauthorized users as I see personally fit. I probably have more computers in my living room than the rest of the apartment complex does on average per building. __________________ ----------------------------- There are no dumb questions, unless a customer is asking them. Help in the fight against cancer and other serious illnesses.