News for hackers. Stuff that matters.

A comment on OpenWifiPass – Open-Source Implementation of Apple's Wi-Fi Password Sharing. Parent comment

Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by AshamedCaptain on Wednesday January 27, 2021 @01:41PM (#25932066)
Whatever issue you mean, it cannot be worse than the issues these "Wireless Password Sharing" systems have. Or at least the WPS-Button system cannot be worse than any of these systems, which seem very prone to MITM attacks.
[ Parent | on HN ]
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by Nextgrid on Wednesday January 27, 2021 @01:57PM (#25932272)
I believe the problem with the WPS button is that it comes with a WPS PIN (might be optional, but enabled by default in most cases) which means brute-force attacks are possible even without having to press the button, where as the solution described in the repo would at least require you to eavesdrop on an active key exchange between 2 users.
[ Parent | on HN ]
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by nemothekid on Wednesday January 27, 2021 @01:45PM (#25932122)
WPS was laughably insecure. If Apple's solution was piggybacked off of iMessage's key infrastructure then MITM is a non-issue.
[ Parent | on HN ]
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F... by girvo on Wednesday January 27, 2021 @06:13PM (#25935478)
Oh no it was far worse: the WPS PIN implementations led to straight up non-interactive wifi hacks. That hasn’t happened with these sharing systems (yet) so far as I know.
[ Parent | on HN ]