Superhub : What does the big glowing button do

[qasdfdsaq]

So does this

What was that!!?

[JadeFalcon]

i'm being serious... WPS is a security flaw and can be brute forced, revealing your wpa/wpa2 key

Not sure if this is any help but,

http://virgin.lithium.com/t5/Fibre-o...PEN/m-p/954531

[JadeFalcon]

will look into that in the morning tnx, but thats the exploit i was talking about though

Yes, I understood what you meant by the security flaw. Just not sure if that is the definitive answer

[Milambar]

Well, it may comfort you to know that after 8hrs of watching a disco (running reaper against the superhub), I can report the following.

1) Its blatently obvious someone is trying to crack your WPS PIN, the superhub lights up and flashes like a discotheque. You'd have to be blind not to notice it.

2) It withstood the bruteforce attack for 8hrs without success. Its still running, I shall leave it running throughout the night.

3) Looking at the reaper logs, every 30th attempt, I got a lot of "Error: Recieve timeout" kind of messages. It seems that for every 30 failed attempts, the superhub enforces a short timeout, before allowing any futher attempts. However the "timeout" seems to be variable, so it could just be a network error.

[qasdfdsaq]

Originally Posted by Milambar

Well, it may comfort you to know that after 8hrs of watching a disco (running reaper against the superhub), I can report the following.

1) Its blatently obvious someone is trying to crack your WPS PIN, the superhub lights up and flashes like a discotheque. You'd have to be blind not to notice it.

Other people have recently reported this behaviour on this forum and been told it's "normal" or "because of the speed upgrades".

[kwikbreaks]

Originally Posted by jempalmer

What was that!!?

Prototype Superhub 3

[Blackened]

Originally Posted by jempalmer

What was that!!?

A still from The Young Ones?

[Skie]

Originally Posted by Milambar

3) Looking at the reaper logs, every 30th attempt, I got a lot of "Error: Recieve timeout" kind of messages. It seems that for every 30 failed attempts, the superhub enforces a short timeout, before allowing any futher attempts. However the "timeout" seems to be variable, so it could just be a network error.

Could quite possibly just be the superhub failing under the load.

I've noticed, since my doubling from 30 to 60, that the activity lights on the Shub are constantly flashing. I did turn off WPS but it hasn't made any difference. I'm not sure that it is an attack on the device.

[adduxi]

Originally Posted by jempalmer

I did turn off WPS but it hasn't made any difference.

Does Modem Mode negate the need to turn off WPS? I assume it does, but with the S'Hub you never know

[Milambar]

Final result is that it cracked my wps pin, and recovered my wpa2-psk password in just a little shy of 10hrs total.

I've noticed, since my doubling from 30 to 60, that the activity lights on the Shub are constantly flashing. I did turn off WPS but it hasn't made any difference. I'm not sure that it is an attack on the device.

The flashing I was referring to, was the flashing of the large wps button on the front. The activity lights on the side were entirely normal. The WPS button flashed from red, to blue, to purple, back to red, etc, constantly during the brute force attack.

Ah, I misunderstood your post. My activity lights have been doing disco impressions since the upgrade. The WPS button is blue as normal. If WPS is disabled on the Shub is it still vulnerable to attack? If so then how do you protect against it?