Wps Flaw

[justsumhelp]

http://threatpost.co...ter-pins-122711

Heres the pdf http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf

Best solution is to disable WPS if you can, if unable look into flashing DD-WRT or one of its derivatives

if you feeling frisky get compiling http://code.google.com/p/reaver-wps/

[Lannig]

Er... maybe a few extra words of explanation is needed. WPS is a feature that allows you to connect a computer to a home network over wi-fi by just typing a 8-digit pin code instead of having to enter a long and error-prone WEP or WPA alphanumeric key.

Most of ADSL routers with wi-fi come with this feature enabled by default. It's been demonstrated that a brute-force attack can be conducted to guess this pin within a few hours (worst case) up to several days. Even in the best case this is still a threat e.g. from your neighbours since routers tends to be up 24x7 and this attack goes completely undetected.

Until there's a fix from your manufacturer you will want to disable this feature in your router... if possible at all.