TWiT Bits

May 5th 2015

TWiT Bits 1131

The "Pixie Dust" attack on WPS: Security Now 506

Some Wi-Fi APs generate weak WPS PINs that can be easily determined.
Category: TWiT Bits
A researcher Dominique Bongard discovered that some Wi-Fi APs have weak ways of generating the 28-bit E-S1 and E-S2 nonces... that MUST be unpredictable, so an attacker can easily determine the WPS PIN. For the full episode, go to Bandwidth for TWiT Bits is provided by Cachefly.