WEP is truly the algorithm that won't stop giving. For example, did you know 
that even if you have no unencrypted networks in your Mac/Win7 box's profiles, 
you can still be attacked using the encrypted profiles that use WEP? I guess 
you may have theoretically known that, because you are so up on current day 
events! But it's one thing to "know" things are possible, and another thing to 
"right click to get person's home network's WEP key".

AKA:

SILICA now has the ability to recover WEP keys directly from clients by
tricking the client into disclosing the key. This attack does not
require an AP to be present in order to derive the key.
 
Video: http://silica.immunityinc.com/AP_less_WEP_cracking.mov


-- 
INFILTRATE 2012 January 12th-13th in Miami - the world's best offensive 
information security conference.
www.infiltratecon.com


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Dailydave mailing list
[email protected]
https://lists.immunityinc.com/mailman/listinfo/dailydave

Reply via email to