Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Security

Submission + - WiFi WPA2 vulnerability found (networkworld.com)

BobB-nw writes: Perhaps it was only a matter of time. But wireless security researchers say they have uncovered a vulnerability in the WPA2 security protocol, which is the strongest form of Wi-Fi encryption and authentication currently standardized and available.

Malicious insiders can exploit the vulnerability, named "Hole 196" by the researcher who discovered it at wireless security company AirTight Networks. The moniker refers to the page of the IEEE 802.11 Standard (Revision, 2007) on which the vulnerability is buried. Hole 196 lends itself to man-in-the-middle-style exploits, whereby an internal, authorized Wi-Fi user can decrypt, over the air, the private data of others, inject malicious traffic into the network and compromise other authorized devices using open source software, according to AirTight.

"There's nothing in the standard to upgrade to in order to patch or fix the hole," says Kaustubh Phanse, AirTight's wireless architect who describes Hole 196 as a "zero-day vulnerability that creates a window of opportunity" for exploitation.

Comment Apple to sell unlocked iPhones in Canada (Score 1) 359

In related news, Apple plans to sell iPhones unlocked in Canada. The Canadian cell-phone market has started becoming competitive this year, with Bell/Telus deploying HSPA networks compatible with the Rogers/Fido network. (They wanted to cash in on roaming visitors during the Olympics and the iPhone fad, no doubt.) Factory-unlocked iPhones are also available in Belgium, France, Italy, the UK, Hong Kong, Singapore, Australia, New Zealand. We laugh at you Americans who are stuck with AT&T, and who keep wishing for a Verizon iPhone. You don't seem to realize that Apple doesn't care to produce a special CDMA model just for one carrier in one country, when it is already selling one GSM phone worldwide faster than it can make them.

Comment New "feature" in 10.1: DRM (Score 4, Interesting) 272

There is a new clause in the Flash 10.1 EULA that was not present in 10.0:

7.6 Content Protection Technology. If you Use the Adobe Runtimes to access content that has been protected with Adobe Flash Media Rights Management Server or Flash Access software (“Content Protection”), in order to let you play the protected content, the Software may automatically request media usage rights and individualization rights from a rights server on the Internet, and may download and install required components of the Software, including any available Content Protection Updates. You can find more information on Content Protection at http://www.adobe.com/go/protected_content.

You have to download a 3.3 MB PDF with 280 pages to find this kind of stuff. There's no telling how far these updates will go (remember TurboTax DRM?).

Slashdot Top Deals

All power corrupts, but we need electricity.

Working...