Let's briefly discuss the working principles of wireless LANs set up a connection with an access point
need to determine a channel number which is the frequency of our access point ready access points by
share one channel at a time.
This means that there has to be a supplementary mechanism to identify and correctly associate the AP
This can be provided by service that identifiers as society's
an SS ID is the name of a wireless local area network.
Its not a mechanism for authenticating wireless clients its a standard defined mechanism that allows
a client to uniquely identify an access point for connection.
This implies that SS IDs have to be public can't be encrypted or secured in any other way.
If they were they wouldn't deliver the functions defined in the standard
is quite pointless to turn off.
SS ID broadcasting and as we will soon discover you can't simply turn it off if you wanted to secure
your home VLAN by turning off SSI broadcasting.
This could lead to the computers of your users to automatically try to connect to all access points
that are available in a given area.
As an access point is not broadcasting its name the client will actively send requests to available
APC's for their IDs this action which is complemented by sending certain authentication data during
the probing is it disabling that as the Sardi broadcast can lower the overall network security.
It will definitely not work to tighten the security in any way.
Turning off the broadcasting doesnt mean in this case that it will be harder for intruders to connect
to your network.
Its a behavior that can actually actively compromise a wife find outward We'll look into this more closely
wireless client configuration is relatively easy to set up.
We're all operating systems.
It's enough to simply choose an available access point and a creator or a graphic interface will set
up the connection.
Configuration can be as easy as submitting a password provided that the authentication is based on a
pre-shared key mechanism
to facilitate connecting to a network even further.
The Wi-Fi protected set up WPX protocol was developed
at this stage access point protection is essentially safeguarding the external register opin
setting up a connection is only possible if you provide the correct external register when the key is
usually printed by a manufacturer on a sticker on the device.
This helps to automate the configuration and launch of the devices.
The problem turned up in December 2011 it transpired that an access point could be made to disclose
information on its number answering in an external or a pin query and access point reports which half
of the submitted pin is invalid.
Note that the last digit of the number is its checksum.
This is not a secret.
You can extract a checksum from the known information
like this.
The pin length is even more reduced being able to separately attack the two halves allows for a greater
chance of cracking the pin than in the case of having to determine the entire number at a time.
The complexity of computing is worlds apart for both instances the first part of the number requires
as many as 10 to the fourth power attempts to be successfully cracked.
Because of the checksum determining the other half requires only tend to the third power in terms
access points and force No-Limit of failed attempts.
Even if a client is submitting a wrong external registrar open.
Over and over again it won't provoke a reaction.
Yeah people still give out hints.
For example by telling the client that the first half of the pin is incorrect This means that a successful
attack requires only a degree of patience depending on the connection rate it usually takes up to several
minutes to crack an external registry pin
once an attacker has determined the number you can connect to an access point and be granted admin status.
This means that it can change access point configuration
Unfortunately not all access point manufacturers took steps to solve this problem or took them too late.
Not all of them disabled this feature that as you've seen allows attackers to effectively determine
external registry Krans.
What can we do as users to enhance the security of our home networks.
Since this is a problem that relates mostly to home networks we need to disable the Wi-Fi protected
set up entirely or taking a few minutes to manually configure access points.
We do a lot to improve the security of our networks.