WEP things that you give thanks for

[Dave Aitel <dave () immunityinc com>]

WEP is truly the algorithm that won't stop giving. For example, did you know that even if you have no unencrypted 
networks in your Mac/Win7 box's profiles, you can still be attacked using the encrypted profiles that use WEP? I guess 
you may have theoretically known that, because you are so up on current day events! But it's one thing to "know" things 
are possible, and another thing to "right click to get person's home network's WEP key".

AKA:

SILICA now has the ability to recover WEP keys directly from clients by
tricking the client into disclosing the key. This attack does not
require an AP to be present in order to derive the key.
 
Video: http://silica.immunityinc.com/AP_less_WEP_cracking.mov


-- 
INFILTRATE 2012 January 12th-13th in Miami - the world's best offensive information security conference.
www.infiltratecon.com

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave