1712413
story
Glenn Fleishman writes
"The reports earlier today on WPA's TKIP key type being cracked were incorrect. I spoke at length with Erik Tews, the joint author of the paper that discloses a checksum weakness in TKIP that allows individual short packets to be decrypted without revealing the TKIP key. I wrote this up for Ars Technica with quite a bit of background on WEP and WPA. Tews's paper, co-written with Martin Beck, whom he credits as discovering and implementing a working crack (in aircrack-ng as a module), describes a way to use a backwards-compatible part of TKIP to exploit a weakness that remains from WEP. ARP packets and similarly short packets can be decoded. Longer packets are likely still safe, and TKIP hasn't been cracked. Don't believe the hype, but the exploit is still notable."
1711407
story
narramissic writes
"Starting on Monday, researchers from Nokia and UC Berkeley will kick off the Mobile Millennium project. The researchers hope that thousands of volunteers will download a free Java program that figures out by their movement and location when they are driving, and then transmits that information to the project's servers, which then crunch it into a Bay Area traffic map. 'The whole concept here is that if everyone shares just a little bit of what they're seeing ... then everyone can benefit by seeing the conditions ahead of them,' said Quinn Jacobson, a research leader with Nokia in Palo Alto."
1711501
story
RobotsDinner writes
"In what sounds like a dystopian sci-fi plot, the Home Office has made public plans to outfit the country's Internet with upstream data recorders to log pretty much everything that passes through. 'Under Government plans to monitor internet traffic, raw data would be collected and stored by the black boxes before being transferred to a giant central database. The vision was outlined at a meeting between officials from the Home Office and Internet Service Providers earlier this week.'"
