WPA2 Hacked

DustinB3403

Every encryption method that is tied to WPA2 is compromised as well, this just gets worse and worse.

Dashrender

@dustinb3403 said in WPA2 Hacked:

Every encryption method that is tied to WPA2 is compromised as well, this just gets worse and worse.

Considering it's a problem in the handshake, I guess I'm not surprised.

DustinB3403

WPA-TKIP or GCMP are the most vulnerability encryption methods as they allow for additional information to be injected.

DustinB3403

"Note that our attacks do not recover the password of the Wi-Fi network. They also do not recover (any parts of) the fresh encryption key that is negotiated during the 4-way handshake."

So changing your wireless password does nothing here.

Dashrender

Unifi page on latest firmware.

https://community.ubnt.com/t5/UniFi-Updates-Blog/FIRMWARE-3-9-3-7537-for-UAP-USW-has-been-released/ba-p/2099365

Mike Davis

I went in to my unifi controller under Settings -> Maintenance -> "Check Firmware Update" and it doesn't seem to be pulling down the new firmware. Should it?

Dashrender

@mike-davis said in WPA2 Hacked:

I went in to my unifi controller under Settings -> Maintenance -> "Check Firmware Update" and it doesn't seem to be pulling down the new firmware. Should it?

There was a 3.9 that wasn't pulled in last week either. I'm not sure at what point the controller auto updates (or updates via the button push) the firmware.

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

JaredBusch

@dashrender said in WPA2 Hacked:

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

It has been there since 5.0 was reelased

Obsolesce

...must be a Monday. News like this only comes on Mondays.

JaredBusch

The handshake has always been the weak spot of WPA and WPA2. WPA had other issues, but was only even supposed to be a stopgap until WPA2 hardware was readily available.

You can easily negate this entire thing by using PEAP to prevent malicious actors from spoofing disconnect frames that make your devices reconnect and thus require a new 4 way handshake.

JaredBusch

Also, while this is a serious flaw, it requires a malicious actor on site.

This is not anything that I am worried about at a business.

I will of course patch as soon as non-beta patches are available, but it is not some stupid OMG FUCKING PANIC situation.

JaredBusch

@jaredbusch said in WPA2 Hacked:

@dashrender said in WPA2 Hacked:

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

It has been there since 5.0 was reelased

Oh additionally, your UniFi instance will download updates on a schedule even without you pressing that button or updating the version.

DustinB3403

@jaredbusch said in WPA2 Hacked:

@jaredbusch said in WPA2 Hacked:

@dashrender said in WPA2 Hacked:

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

It has been there since 5.0 was reelased

Oh additionally, your UniFi instance will download updates on a schedule even without you pressing that button or updating the version.

Isn't this only enabled by the admin and not by default? (I'll have to double check my controller)

JaredBusch

@dustinb3403 said in WPA2 Hacked:

@jaredbusch said in WPA2 Hacked:

@jaredbusch said in WPA2 Hacked:

@dashrender said in WPA2 Hacked:

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

It has been there since 5.0 was reelased

Oh additionally, your UniFi instance will download updates on a schedule even without you pressing that button or updating the version.

Isn't this only enabled by the admin and not by default? (I'll have to double check my controller)

There is no button for it to my knowledge, but I am almost certain I read that in the guide. My devices occasionally have firmware updates when I have not clicked the button, nor updated the controller itself.

Dashrender

@jaredbusch said in WPA2 Hacked:

@dustinb3403 said in WPA2 Hacked:

@jaredbusch said in WPA2 Hacked:

@jaredbusch said in WPA2 Hacked:

@dashrender said in WPA2 Hacked:

In the past, I only got new firmware when updating the Unifi Controller software itself. The Firmware update button is kinda new (though I'm sure this is where JB will tell me it's been in there for years).

It has been there since 5.0 was reelased

Oh additionally, your UniFi instance will download updates on a schedule even without you pressing that button or updating the version.

Isn't this only enabled by the admin and not by default? (I'll have to double check my controller)

There is no button for it to my knowledge, but I am almost certain I read that in the guide. My devices occasionally have firmware updates when I have not clicked the button, nor updated the controller itself.

Yeah, I think I've seen this once - but I wrote it off as - I updated the controller, and then got side tracked and didn't push out the firmware to the APs.