Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #188174

Re: [OT] Breaking WPA2 by forcing nonce reuse

Show all headers | View raw

On Thu 19 Oct 2017 at 20:53:50 (-0400), Celejar wrote:
> On Thu, 19 Oct 2017 13:46:08 -0500
> David Wright <deblis@lionunicorn.co.uk> wrote:
> 
> > On Thu 19 Oct 2017 at 18:07:20 (+0200), tomas@tuxteam.de wrote:
> > > On Thu, Oct 19, 2017 at 11:07:01AM -0400, Celejar wrote:
> > > > On Thu, 19 Oct 2017 12:05:23 +0100
> > > > Brian <ad44@cityscape.co.uk> wrote:
> > > > 
> > > > > On Wed 18 Oct 2017 at 21:30:48 -0400, Celejar wrote:
> > > 
> > > [...]
> > > 
> > > > Yes, what I'm probably going to do is use the printer's ethernet
> > > > connection along with a Powerline adapter into a nearby power outlet.
> > > 
> > > And how secure are the powerline adapters? Most probably they're
> > > broadcasting their stuff over your and your neighbour's AC net on
> > > top of some unspecified proprietary modulation. Just sayin'...
> > 
> > AIUI 128-bit AES on non-ancient ones. For your neighbour to eavesdrop,
> > they need to press their device's authenticate button when you press
> > yours. You can probably minimise the chances of the authentication
> 
> See this thread:
> 
> https://security.stackexchange.com/questions/9725/are-powerline-ethernet-adapters-inherently-secure
> 
> and this post in particular:
> 
> https://security.stackexchange.com/a/76266

Interesting that people posting to a technical site would run their
devices using the factory default settings.

I can't agree with Rory Alsop saying that sockets/outlets have to be
on the same phase. With a 220 volt supply, individual households are
going to be on the same phase anyway. In the US, where the voltage
splits at the main box, I've tested using opposite sides (and with
GFCI outlets) and found no problem. If there used to be a problem,
I think they solved it by using the neutral wire which is common.

I've read about using another device to "capture" the legitimate
network but I think you have to get a good connection to the power
circuit to achieve that. (We might be unusual in having interior
switches on all our external power outlets.)

I've tried measuring interference on the radio, and the devices
themselves do give off quite a bit within a metre or so (FM/MW/LW),
but I can only detect similar interference noises at distant outlets
by poking the telescopic aerial at the socket itself. None of this
affects the stations when you've tuned then in, even our preferred FM
station which transmits from 66 miles away.

I haven't tested DAB as my DAB radio only works on FM, but in that
role it works perfectly even though it's only three metres from the
main Powerline nexus and the router. If we had an HD radio (US's DAB)
I think it would be another source of analogue interference rather
than suffering from it. But thank goodness the days of CB radio
are long past.

Perhaps one day I'll climb a tree and see if we can get broadcast TV,
as the nearest local station we can Roku is 100 miles away. But
the amount of advertising they carry kills any motivation.

All in all, the Powerlines suit us perfectly and are quite secure
enough in our situation. Perhaps not so good in a condo.

Cheers,
David.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[OT] Breaking WPA2 by forcing nonce reuse Curt <curty@free.fr> - 2017-10-16 17:50 +0200
  Re: [OT] Breaking WPA2 by forcing nonce reuse "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2017-10-16 18:00 +0200
    Re: [OT] Breaking WPA2 by forcing nonce reuse "Alexander V. Makartsev" <avbetev@gmail.com> - 2017-10-16 19:00 +0200
      Re: [OT] Breaking WPA2 by forcing nonce reuse Henrique de Moraes Holschuh <hmh@debian.org> - 2017-10-18 15:40 +0200
        Re: [OT] Breaking WPA2 by forcing nonce reuse "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2017-10-18 19:10 +0200
    Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-16 21:20 +0200
      Re: [OT] Breaking WPA2 by forcing nonce reuse "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2017-10-17 05:20 +0200
        Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-17 17:00 +0200
          Re: [OT] Breaking WPA2 by forcing nonce reuse Brian <ad44@cityscape.co.uk> - 2017-10-17 20:30 +0200
            Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-19 03:40 +0200
              Re: [OT] Breaking WPA2 by forcing nonce reuse Brian <ad44@cityscape.co.uk> - 2017-10-19 13:10 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-19 17:10 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Brian <ad44@cityscape.co.uk> - 2017-10-19 17:40 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Dan Purgert <dan@djph.net> - 2017-10-19 18:10 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Ron Leach <ronleach@tesco.net> - 2017-10-19 18:20 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Brian <ad44@cityscape.co.uk> - 2017-10-20 15:00 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Dan Purgert <dan@djph.net> - 2017-10-20 19:30 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-19 18:20 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2017-10-20 06:40 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse rhkramer@gmail.com - 2017-10-20 17:30 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Brad Rogers <brad@fineby.me.uk> - 2017-10-20 17:40 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2017-10-20 18:50 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse <tomas@tuxteam.de> - 2017-10-19 18:10 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse David Wright <deblis@lionunicorn.co.uk> - 2017-10-19 20:50 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse Celejar <celejar@gmail.com> - 2017-10-20 03:00 +0200
                Re: [OT] Breaking WPA2 by forcing nonce reuse David Wright <deblis@lionunicorn.co.uk> - 2017-10-21 21:30 +0200
  Re: [OT] Breaking WPA2 by forcing nonce reuse Brian <ad44@cityscape.co.uk> - 2017-10-16 22:00 +0200
  Re: [OT] Breaking WPA2 by forcing nonce reuse Larry Dighera <LDighera@att.net> - 2017-10-17 17:30 +0200

csiph-web