May 5th 2015
Tech Break 1131
The "Pixie Dust" Attack on WPS: Security Now 506
Hosted by
Steve Gibson,
Leo Laporte
Some Wi-Fi APs generate weak WPS PINs that can be easily determined.
This feed has been discontinued, but you can find the clips in our archives.
A researcher Dominique Bongard discovered that some Wi-Fi APs have weak ways of generating the 28-bit E-S1 and E-S2 nonces... that MUST be unpredictable, so an attacker can easily determine the WPS PIN.
For the full episode, go to https://twit.tv/shows/security-now/episodes/506
Bandwidth for TWiT Bits is provided by CacheFly.