239
votes
Accepted
Does pressing a car remote many times offer denial of service attack for rolling codes?
it is possible to render a key fob useless by pressing the button at least 256 times while out of the range of the car.
Not useless, but desynchronized. Any car will allow you to re-synchronize, and ...
- 53.5k
202
votes
Accepted
Why wasn't the KRACK exploit discovered sooner?
The 802.11 specification that describes WPA2 (802.11i) is behind a paywall, and was designed by a few key individuals at the IEEE. The standard was reviewed by engineers, not by cryptographers. The ...
- 135k
200
votes
Accepted
Company claims hardwire connections are a security issue
Warning: Conjecture, because none of us know their actual setup.
It is very likely that the organization has their own network, which is hard-wired, as well as a guest network, which is wireless-only....
- 72.7k
173
votes
Accepted
Consequences of the WPA2 KRACK attack
Citing the relevant parts from https://www.krackattacks.com:
Who is vulnerable?
Both clients and access points are listed in the paper as being vulnerable. See the tables 1 and 2 on pages 5 and 8 ...
- 32.7k
92
votes
Accepted
How safe are wifi enabled talking toys?
Be very, very careful. It's not KRACK that is the problem, it is a lax attitude to security and privacy in general. So called "smart" consumer products can often be hijacked, accessed from ...
- 65.4k
71
votes
Why wasn't the KRACK exploit discovered sooner?
In some sense, it feels like this should have been obvious.
Remember Heartbleed, Shellshock, POODLE, TLS Triple Handshake attack, "goto fail", ... ?
In hindsight, most of these problems seem to be ...
- 198k
60
votes
How to patch "keyless entry" car keys?
From a layman point, Yes its a design flaw and yes the signals are boosted to unlock the cars from far far away. This is knows as Relay Station Attack(RSA). Some of the ways to mitigate such attacks ...
- 742
51
votes
How to patch "keyless entry" car keys?
I have a car with such a keyless entry system. My dad saw a report about those ADAC findings on TV and he had an idea which works:
By placing the key in a steel can like the one above, the car does ...
- 581
48
votes
Does pressing a car remote many times offer denial of service attack for rolling codes?
A typical rolling code fob from a decade ago which used a 64-bit payload would unlock if it received one code that was within 16 of what it was expecting, or two consecutive codes that were within ...
- 2,059
29
votes
Why wasn't the KRACK exploit discovered sooner?
The paper describing KRACK discusses this very issue in section 6.6.
A couple of points: There were ambiguities in the specification. Also formal proofs of specification are based on a model of the ...
- 391
28
votes
Company claims hardwire connections are a security issue
It really depends on how they have set up their network, so we can only speculate. But I can provide a similar anecdote.
My local library has a wifi that you can log into using your library card. ...
- 58.8k
26
votes
Is UPnP still insecure?
Why is/was UPnP insecure anyway?
UPnP's bad name comes from implementation issues found in 2011-2013. It's like saying email is insecure and should be disabled because someone found a common issue in ...
- 32.7k
26
votes
Does pressing a car remote many times offer denial of service attack for rolling codes?
The problem with the attack as you're describing it is that it's glossing over a lot of details about how keyless entry and start systems work, and details about built-in backup systems, some of which ...
- 554
25
votes
How to reduce/mitigate the degree to which a Starlink terminal user in a war zone is giving their position in real time?
Starlink terminals are different from your average satellite phone in one important regard: their antenna is directional. It is a phased array.
This has two important consequences:
The total radio ...
- 3,488
24
votes
Accepted
EAP-TLS vs EAP-TTLS vs EAP-PEAP
On EAP-TLS you are right, both sides require a certificate. With a client-side certificate, a compromised password is not enough to break into EAP-TLS enabled systems because the intruder still needs ...
- 5,245
22
votes
How to reduce/mitigate the degree to which a Starlink terminal user in a war zone is giving their position in real time?
In another conflict, some people have allegedly been tracked and killed due their use of satellite phones or internet. One mitigation is to separate uplink location and site where the connection is ...
21
votes
Accepted
How to patch "keyless entry" car keys?
If you truly fear an RFID proximity relay attack, such that you would keep the key fob in a Faraday cage in your pocket, you must recognize that you will be giving up all the convenience of proximity, ...
- 34.1k
20
votes
Is UPnP still insecure?
Yes, UPnP is by design insecure.
UPnP is a protocol designed to automatically open ports in a firewall to allow an outsider to access a hosted server on a local machine that is protected by said ...
- 8,914
16
votes
Can one steal data using electric wire?
Yes, this is possible. It is not an easy task, though, and you are not likely to be a target.
There are series of equipment which are shielded so that such attempts are more difficult. They follow ...
- 9,028
15
votes
How safe are wifi enabled talking toys?
It really depends on your threat model. I wouldn't be particularly worried about a particular sexual predator in your local area having the technical skills necessary to utilize Krack to inject voice ...
- 42.1k
14
votes
Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?
When you use Tor, all data is encrypted between your computer and the exit node. As long as the exit node isn't on the same network that you are on (very, very unlikely to occur), the data will be ...
- 14.8k
13
votes
Consequences of the WPA2 KRACK attack
What are the real-world consequences of these attacks for users and owners of wireless networks
Already a great answer here, but thought I would add my viewpoint to a part of it. There have been a ...
- 3,997
13
votes
Accepted
WPA3 announced. Really needed?
According to The Hacker News, here are major improvements :
WPA3 protocol strengthens user privacy in open networks through individualised data encryption.
WPA3 protocol will also protect against ...
- 2,657
12
votes
How safe are wifi enabled talking toys?
Welcome to the Internet of Things(IoT). This is a... thing. Therefore, it can be assimilated
Mirai is a type of malware that automatically finds Internet of Things devices to infect and conscripts ...
- 3,818
11
votes
How to patch "keyless entry" car keys?
You could use a Faraday cage to create a physical security layer. By having a box with a built in cage to the correct specifications where the keys are stored, you remove the potential for this attack ...
- 212
11
votes
Accepted
Is WPA2-Enterprise affected by the KRACK attack?
Yes it is exploitable. WPA Enterprise still relies on a 4-way handshake. The main difference between enterprise and non enterprise is how the client is authenticated, which is not the same as how the ...
- 366
11
votes
Company claims hardwire connections are a security issue
I'm going to come at this from a network-engineering point-of-view (full disclosure: CCNA / N+, I work on enterprise-level network systems which include complex topics that we'll discuss here, as well ...
- 490
10
votes
Accepted
Can one steal data using electric wire?
First of all, a cracker is considered somebody that reverse engineers software in a way where copy protections or nags screens are removed.
From Wikipedia:
Software cracking (known as "breaking" ...
- 5,841
10
votes
Accepted
How do rolling code fobs and receivers synchronise?
Keeloq is used in many but not all key fobs/garage door openers. This article is writen by microchip who created keeloq Introduction to Ultimate KEELOQ Technology.
tl;dr
The remote(key fob/garage ...
- 291
9
votes
Accepted
What's the difference between pixie attack and other attacks on WPS?
Pixie works by exploiting weaknesses in the generation of the E-S1 and E-S2 nonces which are used to produce the enrollee hash, as described in the Pixie Dust Attack.
Traditional attacks attack the ...
- 135k
Only top scored, non community-wiki answers of a minimum length are eligible