{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Eksperiment med at identificere brugernes adgangskoder til 70% af Wi-Fi-netv\u00e6rkene i Tel Aviv","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den israelske sikkerhedsforsker Ido Hoorvitch fra Tel Aviv offentliggjorde resultaterne af et eksperiment om p\u00e5lideligheden af adgangskoder, der anvendes til at organisere adgang til tr\u00e5dl\u00f8se netv\u00e6rk. I l\u00f8bet af unders\u00f8gelsen blev der fra indfangede rammer med identifikatorer PMKID fundet adgangskoder til 3663 ud af 5000 (73%) unders\u00f8gte tr\u00e5dl\u00f8se netv\u00e6rk i Tel Aviv. Konklusionen var, at de fleste ejere af tr\u00e5dl\u00f8se netv\u00e6rk s\u00e6tter usikre adgangskoder, der er s\u00e5rbare over for hash-baseret angreb, og deres tr\u00e5dl\u00f8se netv\u00e6rk kan angribes ved hj\u00e6lp af standardv\u00e6rkt\u00f8jer som hashcat, hcxtools og hcxdumptool. <\/p>\n

Ido brugte en b\u00e6rbar computer med Ubuntu Linux til at opsnappe pakker fra tr\u00e5dl\u00f8se netv\u00e6rk, placerede den i en rygs\u00e6k og gik rundt i byen, indtil han havde opsnappet rammer med identifikatorer PMKID fra fem tusinde forskellige tr\u00e5dl\u00f8se netv\u00e6rk. Derefter brugte han en computer med 8 NVIDIA QUADRO RTX 8000 48GB GPU'er til at cracke adgangskoder fra de hhv. identificerede PMKID-hashes. Hastigheden for cracking p\u00e5 denne serveren<\/a> var n\u00e6sten 7 millioner hashes per sekund. Til sammenligning ligger hastigheden p\u00e5 en almindelig b\u00e6rbar computer p\u00e5 cirka 200.000 hashes per sekund, hvilket er tilstr\u00e6kkeligt til at cracke en adgangskode best\u00e5ende af 10 cifre p\u00e5 ca. 9 minutter. <\/p>\n

For speeding up the selection process, the search was limited to sequences consisting only of 8 lowercase letters, as well as 8, 9, or 10 digits. This limitation was enough to identify passwords for 3663 out of 5000 networks. The most common were 10-digit passwords, used in 2349 networks. Passwords with 8 digits were used in 596 networks, 9 in 368, and 8 lowercase letter passwords in 320. Repeating the selection using the rockyou.txt dictionary, which is 133 MB in size, allowed for the immediate retrieval of 900 passwords. <\/p>\n

Det antages, at situationen med passwordsikkerhed i tr\u00e5dl\u00f8se netv\u00e6rk i andre byer og lande er cirka den samme, og at de fleste passwords kan findes p\u00e5 f\u00e5 timer med en investering p\u00e5 omkring $50 i et tr\u00e5dl\u00f8st kort med underst\u00f8ttelse af overv\u00e5gningsmode (i eksperimentet blev der anvendt et ALFA Network AWUS036ACH-kort). Angrebet baseret p\u00e5 PMKID er kun anvendeligt p\u00e5 adgangspunkter, der underst\u00f8tter roaming, men som praksis har vist, de fleste producenter deaktiverer det ikke. <\/p>\n

Til angrebet blev en standard metode til hacking af tr\u00e5dl\u00f8se netv\u00e6rk med WPA2 anvendt, som er kendt siden 2018. I mods\u00e6tning til den klassiske metode, der kr\u00e6ver opsamling af handshake-rammer under brugerens forbindelse, er metoden baseret p\u00e5 opsamling af PMKID ikke bundet til forbindelsen af en ny bruger til netv\u00e6rket og kan udf\u00f8res n\u00e5r som helst. For at indhente de data, der er n\u00f8dvendige for at starte password-gentagelsen, kr\u00e6ves det kun at opsamle \u00e9n ramme med PMKID-identifikatoren. S\u00e5danne rammer kan opn\u00e5s i passiv tilstand ved at overv\u00e5ge aktivitet relateret til roaming, eller man kan tvinge til overf\u00f8rsel af rammer med PMKID i luften ved at sende en godkendelsesforesp\u00f8rgsel til adgangspunktet. <\/p>\n

PMKID er en hash, der genereres ved brug af password, MAC-adresse for adgangspunktet, MAC-adresse for klienten og navnet p\u00e5 det tr\u00e5dl\u00f8se netv\u00e6rk (SSID). De sidste tre parametre (MAC AP, MAC Station og SSID) er oprindeligt kendte, hvilket muligg\u00f8r brugen af en ordbogsmetode til at bestemme passwordet, ligesom brugernes passwords i systemet kan findes ved l\u00e6kage af deres hash. Derfor afh\u00e6nger sikkerheden ved adgang til det tr\u00e5dl\u00f8se netv\u00e6rk fuldst\u00e6ndigt af styrken af det valgte password.

\"Eksperiment<\/center>
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperimentet med at identificere passwords for brugerne af 70% af Wi-Fi-netv\u00e6rkene i Tel Aviv | ProHoster","description":"Den israelske sikkerhedsforsker Ido Hoorvitch (fra Tel Aviv) har offentliggjort resultaterne af et eksperiment om p\u00e5lideligheden af de passwords, der bruges til at give adgang til tr\u00e5dl\u00f8se netv\u00e6rk.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}