Viewing profile — gipsies

In the future people might think the same about Bitcoin and AI.

There needs to be extra evidence before claiming that "virtually all VPNs apps" are vulnerable. From my understanding, they tested WireGuard on multiple platforms. However, other V…

Looks like many VPNs allow access to the local network. And you can assign public IP ranges to the local network which.. is enough to make clients leak traffic to those IP addresse…

Several of the implementation flaws allow an attacker to essentially inject plaintext frames in a Wi-Fi network. All that's needed is being within range of the network (with an ext…

What's actually interesting is that they have some world-top cryptographers and security researchers (e.g. invented AES and SHA-3). So part of that money goes to academia, and with…

I again feel that most of these points are all discussed in the paper. Trust-on-first-usage is also used in SSH. Attack uses spoof MAC addresses, hard to rate-limit that. Modern cr…

If we look at the paper then these remarks are all discussed: - Defending against downgrade attack: "A client should remember if a network supports WPA3-SAE. That is, after success…

This is very similar to our earlier work on the security of MAC address randomization: http://papers.mathyvanhoef.com/asiaccs2016.pdf They provide some more practical details if yo…

Exactly, since there is no state machine, an attacker can immediately send the last message. The client will try to check the integrity of this message. But it will use an uninitia…

No, the standard is secure. This is a vulnerability in the implementation. The comment in the code merely says that the explicit definition of the state machine behind a 4-way hand…

Not really. The STA may know that its message was received, but can never be sure whether the AP replied. The reply from the AP could have been missed due to noise, or maybe it did…

If you're using a pre-shared key, the password is verified during the 4-way handshake. The thing is, if your password is wrong, then the Message Authentication Code (MAC) of the me…

A wild claim without any source. The owner set the IP to localhost himself. https://twitter.com/briankrebs/status/779144394360381440

That will be an interesting read. Though not having a table of contents for a 117 page (double column!) report really isn't ideal..

- At least in computer science, it's generally professors who organise the peer review (the Program Commitee) - I've heard from several collegues that the editor introduced spellin…

Accurate Wi-Fi based indoor location positioning already exists, though with different pros and cons. For example, the following system still works reliably when walking around, bu…

Or by using a trusted minifier on the source code yourself, as mentioned in the link.

Because in the paper they tested the attack with 1x2^27 requests, then with 2x2^27 requests, then 3x2^27, etc etc.

Yes, but we present several techniques on how to generate these amounts of data. For TLS and HTTPS you can use JavaScript. For WPA-TKIP you need control of one TCP connection, and …

> I don't really see someone sitting there for 75 hours while this takes place without closing the browser/window/tab. But that's not a problem. If the user closes the browser or t…

> No offense, but it doesn't sound like you know fully what you're talking about. About that ... MAC addresses are not checked unless you use an extra tool for this. For example, a…

All WPA or WPA2 secured networks use mutual authentication. Since you do not know the password of my home network, my device will refuse to connect to it. In particular the 4-way E…

A bruteforce attack against the PSK handshake requires only a single handshake to be captured. There are no known techniques to speed up the attack if more handshakes are captured.…