The ease of hacking a WEP network

WPA or WPA2 ?

How do I tell what I have when the connection software labels it 'WPA and WPA2 Personal'? On the router I can see I have only 'WPA-PSK' with 'TKIP' encryption. I think a bit more detail is needed to know if the connection is safe.

By pictonic on 20 Mar 2010

Aircrack......

It may take longer than minutes, but Aircrack for linux is free. I tried it out as a 'project' and it, er, works.

By Waderider on 20 Mar 2010

pictonic
I think that is just plain WPA, do you have AES as an option instead of TKIP encryption?

For some reason I can't access the second page of the article...is it just me?

By stokegabriel on 23 Mar 2010

The WEP cracking is known for at least last 5 years and I do not find "brute force attack" an indication of substantial weakness in WPA. You could say the same about any other password protected system such as ssh, domain passwords, etc. http://docs.alkaloid.net/index.php/Cracking_WEP_an
d_WPA_Wireless_Networks

By pkubecka on 24 Mar 2010

I agree with pkubecka......

......lumping WPA in any form in with WEP is unfair. Cracking WEP can be done as easy as, WPA takes effort and an element of luck.

By Waderider on 25 Mar 2010

I'm not made of money....

"if I suggest you chuck out these devices you’ll resist and tell me that WEP is secure enough as it can keep most people out."

No, i'll resist and tell you that throwing out a perfectly useable laptop that cost £900 when new and a PSP that was over a £100 is not something i could afford to do. Neither of these devices will connect with anything other than WEP. Maybe someone could suggest a modem/router that will allow more than one type of encryption so older devices can still connect while my newer gear can use WPA2.

By blueleader01 on 31 Mar 2010

Wireless security

Blueleader, you can probably inprove your wireless security by restricting access to your router by MAC address. Give it a google.

By Waderider on 2 Apr 2010

hidden

i suspected someone was help themselves to my broadband but could not prove it. I have now hidden my SSID and set up a wireless access list. Then one holiday Monday last year a message popped up asking to join my network i took the plug out of the router and he/she went away.I have tried to WPA to work but it failed. Hiding the SSID is probably the best option for people my niece came in with her IPod and did not find my network and was very close to the router.

By IMACOMPUTERBUDD1 on 8 Apr 2010

Restricting by MAC Address. . .

Restricting MAC address is no barrier at all to sniffing, only to connecting. WEP is fundamentally flawed, and should only be used if you don't care about your security (or are using another layer of encryption)

By simnfs on 18 Apr 2010

Homeplug, anyone?

I dumped WEP when I discovered that even I could work out how to crack it. Since then, I've been using a couple of homeplugs to route my internet traffic, and what's not broadcast can't be hacked.

By pike_by_nature on 22 Apr 2010

pike_by_nature - A lot of radio amateurs would argue strongly with you on your assertion that Homeplug isn't broadcast. In fact, many of them claim that Homeplug is killing their hobby. I wrote about this a few months back, so you'll probably find it if you do a search.

By PaulOckenden on 22 Apr 2010

Paul - I remember reading the article (but searching didn't find it) - it must have been after your article in June last year when you suggested Homeplug as a real alternative to wireless ;-)

To be fair; I haven't heard that my homeplug broadcasts anything useable; as it were. I don't doubt it's doing something (though I'm not too sure what is in my plug that isn't in other electrical appliances that aren't interfering with anyone) but it's not providing my bank passwords to anyone.

By pike_by_nature on 22 Apr 2010