NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Build a LAN with a WNDR3400v2
I'm trying to make a wifi LAN with 4 devices for sharing. I don't need full time internet as it's a metered connection and I want to keep data usage down to a minimum. (It seems I need the internet c...
FredReed wrote:
I forgot to mention this, I read about and watched a demonstration on "Pixiedust".
I'm not sure if it was a "brute force" attack over the internet or over the wifi signal.
Do you know? I'm sure there are newer ones since then too.
These attacks are to break into wifi. Your router is not vulnerable to Pixie Dust. I haven't seen anything specific on WPS brute force attacks. But if you simply disable WPS on your router, you won't be vulnerable to this whole class of attacks.
Passphrases (and pins) can always be attacked by brute-force (which amounts to trying all possible passphrases). There are ways to slow these attacks down - for instance, if the router is slow to respond after a couple of failed connection attempts, then the brute-force attack will take a lot longer. Even a small delay is enough to make these attacks useless (because there are so many passphrases to try).
If you are worried about this particular threat, you can reduce the risk by turning your router's wifi off when you aren't using it, and by changing the passphrase from time to time. In general, longer passphrases will be harder to discover by brute force guessing.
I forgot to mention this, I read about and watched a demonstration on "Pixiedust".
I'm not sure if it was a "brute force" attack over the internet or over the wifi signal.
Do you know? I'm sure there are newer ones since then too.
FredReed wrote:
I forgot to mention this, I read about and watched a demonstration on "Pixiedust".
I'm not sure if it was a "brute force" attack over the internet or over the wifi signal.
Do you know? I'm sure there are newer ones since then too.
These attacks are to break into wifi. Your router is not vulnerable to Pixie Dust. I haven't seen anything specific on WPS brute force attacks. But if you simply disable WPS on your router, you won't be vulnerable to this whole class of attacks.
Passphrases (and pins) can always be attacked by brute-force (which amounts to trying all possible passphrases). There are ways to slow these attacks down - for instance, if the router is slow to respond after a couple of failed connection attempts, then the brute-force attack will take a lot longer. Even a small delay is enough to make these attacks useless (because there are so many passphrases to try).
If you are worried about this particular threat, you can reduce the risk by turning your router's wifi off when you aren't using it, and by changing the passphrase from time to time. In general, longer passphrases will be harder to discover by brute force guessing.