Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by Avamander on Sunday October 20, 2019 @07:32AM
(#21303508)
WPA2 cracking is usually done with rainbow tables generated based on some dictionary and its mutations, basically don't have a dictionary password and you should be secure from /most/ attackers.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by edoo on Sunday October 20, 2019 @08:02AM
(#21303603)
Your passsword should be made up of dictionary words though. If you do the math an 8 word sentence from the 10k most common words (just lowercase) is equivalent to a 16 character password from a full set of 100 characters and far easier to remember. Use some exotic words and punctuation and have a few random special characters in there and it is far far superior. WPA2 has a minimum of 8 characters and would take the same time to check every character as it would to check all combos of 4 lowercase words from the 10k most common set.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by Avamander on Sunday October 20, 2019 @11:10AM
(#21304621)
WiFi passwords aren't typed in frequently and can trivially be written down on the home router itself, CorrectHorseBatteryStaple has lower entropy than a random one of a bit smaller length.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by hombre_fatal on Sunday October 20, 2019 @02:24PM
(#21306002)
Wifi passwords are typed all the time if you have any friends that come over. And typing randomly generated special characters on a mobile device is especially awful.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by Avamander on Sunday October 20, 2019 @03:41PM
(#21306534)
No, they aren't if you create a nice QR code for people to scan.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by Fnoord on Monday October 21, 2019 @10:46AM
(#21312838)
You should have your friends on a guest network instead, have this on a DMZ, and tell them to use a VPN over such guest network.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by h4waii on Sunday October 20, 2019 @10:45AM
(#21304468)
Rainbow tables aren't really applicable to WPA2 due to the way offline cracking is done.
You would have to pre-generate them for each possible SSID. You're much better off using a small targeted dictionary with rules.
Re:Weaponizing and Gamifying AI for WiFi Hacking: Presenting...
by Avamander on Sunday October 20, 2019 @11:11AM
(#21304625)
You are absolutely correct, it's usually indeed dictionary-based but there are rainbow tables as well http://www.renderlab.net/projects/WPA-tables/
What can we glean about how to secure a password?