Nice, even better. So that means a lot of the higher end APs that use sophisticated techniques (smaller IV pools, dynamic, etc) are going to be much less effective. I know a few large entities that will be affected negatively. Time to seriously upgrade the wireless security!
<br><br>People who don't think they need more than wep are fooling themselves. Kids will a) build that cool pringles can antenna to experiment... b) run kismet to explore the wireless around them, and c) practice their wepcracking on your network. what's next? Exploring your windows machines once they're on.
<br><br>They'll be destructive just b/c they can. Keylogger on your home pc? cake. Do you patch every day? All they need is one windows vulnerability to get access to all your data. Anything think that if they wait long enough, a windows flaw will come around? hrm? and *then* your network will be... their network.
<br><br>It's really not that far fetched. <br><br><br><br><div><span class="gmail_quote">On 4/6/07, <b class="gmail_sendername"><a href="mailto:george_ou@lanarchitect.net">george_ou@lanarchitect.net</a></b> <<a href="mailto:george_ou@lanarchitect.net">
george_ou@lanarchitect.net</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>
With the newest crack released earlier this week from the German
researchers that reduces the number of packets by an order of magnitude, that's under 1 minute on average with ARP replay on an 802.11g network. About 20 seconds average if the network is going full blast on its own.
</div>
<div><a href="http://blogs.techrepublic.com.com/Ou/?p=464" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://blogs.techrepublic.com.com/Ou/?p=464</a></div>
<div> </div>
<div> </div>
<div>George</div>
<div name="wmMessageComp">
<blockquote style="border-left: 2px solid blue; padding-left: 8px; margin-left: 8px;"><div><span class="q" id="q_111c8a138ea43715_1">-------- Original Message --------<br>Subject: Re: [Full-disclosure] WEEPING FOR WEP<br>
From: "Mike Vasquez" <<a href="mailto:mike.vasquez@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mike.vasquez@gmail.com</a>><br>Date: Fri, April 06, 2007 1:22 pm<br>To:
<a href="mailto:full-disclosure@lists.grok.org.uk" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">full-disclosure@lists.grok.org.uk</a><br><br>
And traffic rate shouldn't be in the discussion either, since arp-replay
allows enough packets to be captured, on most home equipment, in about 20 minutes if you're unlucky, and attacking 128-bit wep. 64 bit keys can be had in under 5 minutes, 128 in under 10, and all you have to do is be connected for that length of time.
<br><br><br><br>
<div><span class="gmail_quote">On 4/6/07, <b class="gmail_sendername"><a href="mailto:george_ou@lanarchitect.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">george_ou@lanarchitect.net</a></b> <
<a href="mailto:george_ou@lanarchitect.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">george_ou@lanarchitect.net </a>> wrote:</span>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>
But WPA-PSK mode is even easier to use than WEP. Why would you use
WEP. Distance isn't really a problem with a pringle can antenna.</div>
<div> </div>
<div><br>George</div></blockquote></div><br></span></div>
<hr><span class="q">
<pre>_______________________________________________<br><br>Full-Disclosure - We believe in it.<br><br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://lists.grok.org.uk/full-disclosure-charter.html</a><br><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/%3C/pre" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://secunia.com/
</a></pre>>
</span></blockquote></div>
</blockquote></div><br>