Hacker News Reader

I'm pretty sure this has been discovered years ago. Or at least my brain is convinced it was.

Edit: Just saw the authors notes that this may have been found before... If anyone is curious, I found the one of the original reports on this:

https://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf

View on HN

I thought that too initially, but this appears to be a much faster method. For comparision, the "blackjack" attack uses 18 packets vs. 11000 for brute-force. I think we can say WPS is fairly unsafe at this point.

Yes this is old news, and here is software for recovering the password when WPS is enabled: https://code.google.com/p/reaver-wps/

This tool is doing the brute force of 11000 PINs, which is mentioned in the article but not this particular attack.

Reaver takes 4-6 hours, this takes seconds. I would say that's a step forward.

Reply on news.ycombinator.com