Flaw Lets Hackers Break Your Wi-Fi Router's Security with One Guess

Typically, Attacks against your Wi-Fi Router Require a Lengthy Attempt to Guess any Codes and Passwords. Not if you Use '0xcite's' New Technique, however; the Research Firm has Detailed a Flaw in Some Router Chipsets that Lets Hackers Bypass the Push-Button Security of Wi-Fi Protected Setup (WPS) almost Instantly. Instead of Trying to Guess a Hotspot's PIN Code, which Can Take Hours, you Simply Take a Single Shot Based on a Series of Offline Calculations. Once you're Ready to Attack, it Takes Roughly "One Second" to Get in.


The Vulnerability Isn't Present in Every Router but, '0xcite' Believes that, it's in Relatively Common Chipsets from Both Broadcom and Another, Unnamed Company that's Scrambling to Implement a Fix. The Wi-Fi Alliance, for its Part, Tells Ars Technica that, the Flaw likely Stems from How Companies Implement Wireless Networking, Rather than Anything Inherent to How the Technology Works. Whatever the Root Cause May be, the Easiest Way to Protect against this Exploit Right Now is, to Turn WPS Off -- Not a Big Problem if you're Comfortable with a Router Setup Page but, probably More of a Hassle than you'd Like.




Info Sources:

http://arstechnica.com/security/2014/08/offline-attack-shows-wi-fi-routers-still-vulnerable/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+arstechnica%2Findex+%28Ars+Technica+-+All+content%29

http://www.slideshare.net/0xcite/offline-bruteforce-attack-on-wifi-protected-setup