The Norman Transcript


February 9, 2014

How hackable is your wireless network router?

NORMAN — Most everyone these days uses some sort of wireless network to distribute an Internet connection around their house or business to multiple devices. Most people also know they should password-protect their wireless network to keep away unwanted guests.

But, what if there is something wrong with the wireless router, itself? What if it is flawed in a way that all the passwords in the world won’t protect?

In early December 2011, reports began to surface about a fundamental flaw that had been revealed in some of the most commonly used wireless routers found in millions of homes and businesses around the world.

This flaw, called Wi-Fi Protected Setup (WPS), allows any bad guy with a semi-fast computer and half an ounce of brains to hack right into a wireless network, steal its password, sign right in and set up shop.

Not all wireless routers have the problem, and some can actually be fixed. For some, the fix simply involves changing a setting in the routers’ internal configuration.

Some can be fixed by downloading and installing new “firmware,” available from the manufacturer, a process akin to installing a new operating system. Some can be fixed by installing firmware made by independent, third-party programmers.

In all cases, the “fix” results in some way of turning off the flawed WPS capability.

WPS was originally designed as an easy way for technically challenged folks to set up their own “secure” wireless network.

Instead of having to fiddle about with obscure things called WPA2-PSK AES, Joe Sixpack could just push a button, type in a four-digit PIN code from the sticker on the bottom of the router and, suddenly, easily, “with the push of a button,” his wireless network was secure. Except, it wasn’t.

It wasn’t until the WPS flaw was fully revealed by a humble researcher named Stefan Viehboch that the major wireless router manufacturers had their “Oh, no. Duh!” moment and realized that protecting a secure wireless network with a four-digit PIN number is like protecting Fort Knox with a trillion-dollar vault door on the front but a two-dollar padlock on the back.

Text Only | Photo Reprints


Must Read


SKorea Ferry Toll Hits 156, Search Gets Tougher Video Shows Possible Syrian Gas Attack Cubs Superfans Celebrate Wrigley's 100th Raw: Cattle Truck Overturns in Texas Admirers Flock to Dole During Kansas Homecoming Raw: Erupting Volcanoes in Guatemala and Peru Alibaba IPO Could Be Largest Ever for Tech Firm FBI Joining Probe of Suburban NY 'Swatting' Call U.S. Paratroopers in Poland, Amid Ukraine Crisis US Reviews Clemency for Certain Inmates Raw: Violence Erupts in Rio Near Olympic Venue Raw: Deadly Bombing in Egypt Raw: What's Inside a Commercial Jet Wheel Well Raw: Obama Arrives in Japan for State Visit Raw: Anti-Obama Activists Fight Manila Police Motels Near Disney Fighting Homeless Problem Michigan Man Sees Thanks to 'bionic Eye' S.C. Man Apologizes for Naked Walk in Wal-Mart Chief Mate: Crew Told to Escape After Passengers