[aklug] Re: Also surprising

It's a VERY LARGE dictionary, with lots of cores supporting it.

Something to remember, is that just like the tool cowpatty from back in the early days of wpa cracking, that they need that client/wap handshake. A way to defeat this is simple mac addr acls. A crazy random key will protect you too, as will wpa2.

2 cents,
--eddie

> Subject: [aklug] Re: Also surprising
> From: jimgribbin@gmail.com
> To: barjunk@attglobal.net
> CC: aklug@aklug.org
> Date: Wed, 9 Dec 2009 20:18:59 -0900
>
> I read that too, and I think one of us is misunderstanding what they're
> doing.
>
> I'm under the impression that you send them some captured packets and
> they figure out what your password is. It would have to already be in
> their dictionary for them to figure it out.
>
> I get the impression reading their FAQ that if someone is actually using
> a secure password, they probably won't find it. "bob" they'll probably
> find pretty quickly.
>
> Jim G
>
>
> On Tue, 2009-12-08 at 11:01 -0900, barsalou wrote:
> > I saw this article on slashdot as well:
> >
> > http://it.slashdot.org/story/09/12/07/2322235/WPA-PSK-Cracking-As-a-Service
> >
> > The interesting parts of this to me are two fold:
> >
> > - Do I want to be submitting my passwords to a service that might
> > capture them and add them to the "dictionary"?
> >
> > - The potentially reduces the whole idea that it would take someone
> > too long to crack a password with a certain key strength argument.
> >
> > I'm not an expert in this area, so my perceptions of the last issue
> > may be flawed.
> >
> > Mike B.
> >
> > ----------------------------------------------------------------
> > This message was sent using IMP, the Internet Messaging Program.
> >
> > ---------
> > To unsubscribe, send email to <aklug-request@aklug.org>
> > with 'unsubscribe' in the message body.
> >
>
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
                                               
_________________________________________________________________
Windows Live Hotmail gives you a free,exclusive gift.
http://www.microsoft.com/windows/windowslive/hotmail_bl1/hotmail_bl1.aspx?ocid=PID23879::T:WLMTAGL:ON:WL:en-ww:WM_IMHM_7:092009
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Thu Dec 10 09:05:36 2009