May 5th 2015
Tech Break 1131
The "Pixie Dust" attack on WPS: Security Now 506
Some Wi-Fi APs generate weak WPS PINs that can be easily determined.
This feed has been discontinued, but you can find the clips in our archives.
Guests:
Steve Gibson,
Leo Laporte
A researcher Dominique Bongard discovered that some Wi-Fi APs have weak ways of generating the 28-bit E-S1 and E-S2 nonces... that MUST be unpredictable, so an attacker can easily determine the WPS PIN.
For the full episode, go to twit.tv/show/security-now/506
Bandwidth for TWiT Bits is provided by Cachefly.