Nov članek: Spreminjanje klicne identifikacije

Mehmed je 19. mar 2012 ob 21:45 izjavil:

Domnevam da sodisce nima tezav pridobiti se sezname klicev JJ v tem primeru, da preveri pristnost?

In December 2011 researcher Stefan Viehböck reported a design and implementation flaw that makes brute-force attacks against PIN-based WPS feasible to perform on WPS-enabled Wi-Fi networks. A successful attack on WPS allows unauthorized parties to gain access to the network. The only effective workaround is to disable WPS.[4]

The vulnerability centers around the acknowledgement messages sent between the registrar and enrollee when attempting to validate a PIN. The PIN, which is printed on the side of each WPS-enabled Wi-Fi router, is an eight digit number. Since the last digit is a checksum of the previous digits,[6] there are seven unknown digits in each PIN, yielding 107 = 10,000,000 possible combinations.

When an enrollee attempts to gain access using a PIN, the registrar reports the validity of the first and second halves of the PIN separately. Since the first half of the pin consists of four digits (10,000 possibilities) and the second half has only three active digits (1000 possibilities), at most 11,000 guesses are needed before the PIN is recovered. This is a reduction by three orders of magnitude from the number of PINs that would have to be tested absent the design flaw. As a result, a practical attack can be completed in just a few hours. The ease or difficulty of exploiting this flaw is implementation dependent, as Wi-Fi router manufacturers could defend against such attacks by slowing or disabling the WPS feature after several failed PIN validation attempts.[3]

A tool has been developed in order to show the attack is practical.[7] The firm that released the tool, Tactical Network Solutions in Maryland, says that it has known about the vulnerability since early 2011 and has been using it.[8]

Methods for disabling WPS have been published for some models of the following brands;

Belkin[9]
D-Link[10]
Netgear[11]
TP-Link[12]

In some devices, notably those made by Linksys, disabling WPS in the user interface does not result in the feature actually being disabled. The device remains vulnerable to attack.

This is unbeliveable...

DODATEK iz dne 20. marca 2012: Kot kaže je g. Vinko Gorenak v članku omenjeni prispevek umakni iz svojega bloga.

Živahna spletna izmenjava mnenj, ki se je po objavi razvila pod Kovačičevim prispevkom in na nekaterih zaprtih tehnoloških forumih, je pokazala, [...]

Tiskovni predstavnik NSi Jernej Vrtovec, organizacijski tajnik stranke Andrej Cimperšek in državni sekretar Matjaž Longar so v nedeljo zvečer prejeli grozilna SMS-sporočila.

Vrtovec je pojasnil, da je sam sporočilo prejel s svoje telefonske številke, Cimperšek z Longarjeve, Longar pa s Cimperškove.
Niso si pošiljali sporočil

V sporočilih je pisalo: "V peklu se boste cvrli, izdajalci slovenskega naroda. Povej naprej." Po besedah Vrtovca so že zahtevali pojasnila Telekoma Slovenije, saj si sporočil med seboj oziroma sami sebi niso pošiljali. Kot je pojasnil Vrtovec, so jim tam povedali, da je kaj takšnega mogoče, danes pa bodo Vrtovcu poslali še potrdilo o tem, da sporočila ni poslal sam sebi.