News for hackers. Stuff that matters.

A comment on Wifiphisher: Fast automated phishing attacks against WPA networks. Parent comment

Re:Wifiphisher: Fast automated phishing attacks against WPA ... by ikeboy on Sunday January 04, 2015 @07:31PM (#8836526)
What about setting up a WEP access point to impersonate the WPA one, then getting the password from that? Still seems more likely to work than what it's doing now.
[ Parent | on HN ]
Re:Wifiphisher: Fast automated phishing attacks against WPA ... by jagermo on Monday January 05, 2015 @03:10AM (#8837822)
You'd still need the Pre-Shared key to create a legitemate looking access point, so it is kind of a catch-22.

WPA/WPA2 as a system is actually not that bad (for home use).

[ Parent | on HN ]
Re:Wifiphisher: Fast automated phishing attacks against WPA ... by ikeboy on Monday January 05, 2015 @11:51AM (#8839681)
Why? If WEP is vulnerable, then if victim connects to a WEP fake and enters their password, we should be able to read that. Like a downgrade attack.
[ Parent | on HN ]