[pchelpers] Article:Cafe Latte attack steals credentials from Wi-Fi clients

Would you like a corporate login with that espresso?
By John Leyden
Published Thursday 18th October 2007 18:40 GMT

Hackers have refined a new technique for breaking into Wi-Fi networks
protected by the aging (and increasingly misnamed) Wireless Equivalent
Protocol.

The so-called 'Cafe Latte' attack aims to retrieve the WEP keys from the
PCs of road warriors. The approach concentrates its attack on wireless
clients, as opposed to earlier attacks that cracked the key on wireless
networks after sniffing a sufficient amount of traffic on a network.

"At its core, the attack uses various behavioral characteristics of the
Windows wireless stack along with already known flaws in WEP," explains
Vivek Ramachandran, a security researcher at AirTight Networks, who will
demonstrate the approach at the Toorcon hacking conference in San Diego
this weekend (19-21 October). "Depending upon the network configuration
of the authorised network we will show that it is possible to recover
the WEP key from an isolated Client within a time slot ranging between
just a few minutes to a couple of hours."

More here:
http://www.theregister.co.uk/2007/10/18/cafe_latte_wi-fi_attack/
-- 
John Durham
Site http://modecideas.com
Server hosted on Ubuntu 4.10
Good advice is like good paint. It only works when applied.



-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: