Home » Uncategorized » Brute Force Attack On WiFi Protected Setup Only Takes 4 Hours
111229-wps

Brute Force Attack On WiFi Protected Setup Only Takes 4 Hours


If you’ve purchased a wireless router in the last three or four years, there’s a good chance that it comes with support for Wi-Fi Protected Setup (WPS). This is supposed to make it easy for non-techies to get connected, but it is apparently making it easier for hackers to force their way onto your wireless network too.

As you know, WPS can work two different ways. First, there is that button. You push the WPS button on your router, push the WPS button your wireless device (printer, laptop, etc.) and they automagically recognize each other to give you network access. There isn’t any problem with this method.

The security flaw that has now been revealed has to do with the second method: PIN. The PIN for WPS is supposed to be an eight-digit random number that is predefined by the manufacturer. As such, there are 100 million variations. A brute force attack would just take too long.

However, there is a flaw in how the PIN is addressed. When you enter an incorrect PIN on the wireless device, the router sends a reply saying it’s wrong. But that’s not all the reply indicates. It also tells you whether the first or second halves of the PIN are correct. What’s more, the final digit is a checksum of the other seven digits. Working this all out, a brute force attack can take only 11,000 attempts. That’s a 9000-fold difference. In effect, a brute force PIN attack on a WPS router can take less than four hours.

This apparently affects a wide range of router manufacturers, including such big names as Linksys, Netgear, D-Link, Belkin, and ZyXEL. I’m not saying you need to put on your tinfoil hats and put your home on lockdown, but if you are worried about these brute force attacks, the only way to prevent them is to disable WPS on your router.

About Michael Kwan

A freelance writer and tech geek from Vancouver. Find me at michaelkwan.com and follow me on Twitter @michaelkwan.

Check Also

wii-oculus-rift-hoverboard

Try Oculus Rift And Wii To Roam Around On The Back To The Future Hoverboard

Check out how you can fly in virtual space by using an Oculus Rift and a Wii Balance Board.

131129-amz

Amazon Appstore for Android Holiday Deals, Including Free Apps

There are tons of deals from the Amazon Appstore that will be offered starting now and throughout the holiday shopping season. They say that they will have "hundreds of titles that are eitehr free... or available between 50-90% off" the regular price.

131129-google

Black Friday: Google Play Store Apps, Games and Content on Sale All Weekend

Case in point, if you head over to the Google Play Store right now, you'll find that Google is celebrating all Cyber Weekend with discounts on all sorts of content. This includes many popular apps and games

131129-gtab

Black Friday Deal: Samsung Galaxy Tab 3 10.1-Inch for $100 Off

Did you manage to score any epic Black Friday deals this morning? Are you still ...

131128-diy

Arduino Co-Creator Releases Plans for $200 DIY Mobile Phone

Mellis was one of the people who came up with the now hugely popular Arduino platform and now he has come up with plans for people to build their own cell phone for about $200 in parts.

131128-apple

No Discounts for Apple Black Friday, Just Free Gift Cards

If you were hoping to save yourself some cash as you brave the Black Friday shopping crowds, you'll want to go somewhere other than the official Apple Stores.