Internetna povezava preko routerja

1qay1qay:

za WPS imaš delujoč BDE (brain dead exploit) click'n'run program :

http://en.wikipedia.org/wiki/Wi-FiProtectedSetup

In December 2011, researcher Stefan Viehböck reported a design and implementation flaw that makes brute-force attacks against PIN-based WPS feasible to perform on WPS-enabled Wi-Fi networks. A successful attack on WPS allows unauthorized parties to gain access to the network. The only effective workaround is to disable WPS ..... A tool has been developed in order to show the attack is practical.The firm that released the tool, Tactical Network Solutions in Maryland, says that it has known about the vulnerability since early 2011 and has been using it ....

za WPA2 imajo script kiddies tle razlago v stripu, da ne traja predolgo :

Today i am going to show you how to a crack a Wp2-psk password with windows machine.

"... now within minutes it will found your password and it will show you the password ..."

Ne delajo zastonj stavb brez oken .... ... seveda se da kriptirat prenos da je varen, samo ne z cpu enoto za 100 € :)))

Tisti link, kako "pohekajo" WPA je navaden dictionary attack, kar pomeni da more bit geslo v slovarju. Če imaš pa ti geslo like "pWvfSmXYf9DJRstzL" nimajo šans, tudi z rainbow tabelami ne.

@krejzi:

glede napada s slovarjem:

Ne selektivno brat :)

Preberi cel stavek (od pike do pike) :

now click on the Start attack option and select the Dictionary Attack option. *However you have other attack options are also available***

glede WPS :

"pa obvezno vklopit WPS funkcijo in te nebo noben pohekal :)"

verjetno si mislil ravno obrato (lapsus linguae ali pa vsaj lapsus calami):

"pa obvezno vklopit WPS funkcijo in VSAK te bo pohekal"

Podrobnosti si lahko prebereš tukaj :

http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf

*Although WPS is marketed as being a secure way of configuring a wireless device, there are design

and implementation flaws which enable an attacker to gain access to an otherwise sufficiently

secured wireless network.

Some vendors did not implement any kind of blocking mechanism to prevent brute force attacks.

This allows an attacker to try all possible PIN combinations in less than four hours (at 1.3

seconds/attempt).

On average an attack will succeed in half the time.*

Mikrotik je, ko ga enkrat skonfiguriraš, top zadevica. Priporočam!

1qay1qay:

now click on the Start attack option and select the Dictionary Attack option. However you have other attack options are also available

"pa obvezno sklopit WPS funkcijo in te nebo noben pohekal :)"

verjetno si mislil obrato:

"pa obvezno sklopit WPS funkcijo in VSAK te bo pohekal"

Some vendors did not implement any kind of blocking mechanism to prevent brute force attacks.

This allows an attacker to try all possible PIN combinations in less than four hours (at 1.3

seconds/attempt).

On average an attack will succeed in half the time.

The Netgear device has lock down functionality implemented, but the lock down phases are not

long enough to make an attack impractical. In this case an attack will on average succeed in less than

a day (timing data can be found on the next page).

Maš druge opcije ja, ampak nimaš opcije, ki dejansko izkorišča varnostno ranljivost WPA2 enkripcije, vse temelji na bruteforcih.

In ne, mislil sem izklopit WPS funkcijo (torej, disable WPS), ker če imas vklopljen wifi protected setup (WPS) enostavno uporabiš program reaver in skrekaš PIN.

@krejzi

sorry, se pravi si res mislil sklopit kot "disable" ... se opravičujem :(

sem razumel "sklopit" kot "vklopit" z tvojim typom .... sem že mislil da mu svetuješ naj vklopi WPS ... sem prehitro sklepal :(

Odločil sem se, da router vrnem v garancijo, ker je pomoje kak hw problem s tem wirelessom - tako slabo ne more lovit.

Želel sem nazaj namestit TP-Linkow firmware, katerega sem potegnil s te strani: Klik

Upgrade gre brez problema skozi, vendar pa mi po upgradu zopet odpre DD-WRT vmesnik. Sem router še resetiral, pa ista zgodba. Kar ne dobim TP-Linkovega uporabniškega vmesnika... Morda kdo ve, kje je težava? Rad bi tole poštimal, da router jutri vrnem v garancijo. Hvala!

mogoče ti bo tole pomagalo - uf, zgleda da ne bo simpl - dobro pazi kaj delaš:

http://www.tp-link.com/en/support/download/?pcid=201&model=TL-WR841ND

http://forum.tp-link.com/showthread.php?2475-Restoring-factory-firmware-TL-WR841N

https://www.google.com/search?q=TP-Link&oq=TP-Link&aqs=chrome..69i57&sourceid=chrome&espv=210&essm=122&ie=UTF-8#essm=122&espv=210&q=tp-link+factory+reset+firmware&safe=off

Tole sem naložil na router, če bo še kdo potreboval. Sedaj imam nazaj stari fw: Klik

Močno si želim, da bo ta težava odpravljena, ker je v ostalih pogledih router top: preko kabla oddaja skoraj isto hitrost kot modem, print server mi deluje…

Tudi ta izjava je površna. 5Ghz pas se uporablja za povezovanje na usmerjevalnik v recimo enakem prostoru, oz. nedaleč stran. Prek tega pasu se dosegajo tudi največje hitrosti. Če imate večjo hišo in želite loviti signal med večimi nadstopju, priporočam 2,4 Ghz, ki je namenjan za daljše razdalje. lp