{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Katse kindlaks teha 70% Tel Avivi Wi-Fi v\u00f5rkude paroolidest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Iisraeli turvauuringute spetsialist Ido Hoorvitch (Tel Avivist) avaldas katse tulemused, mis k\u00e4sitlevad paroolide usaldusv\u00e4\u00e4rsust, mida kasutatakse juhtmevabade v\u00f5rkude juurdep\u00e4\u00e4su korraldamiseks. Uuringu k\u00e4igus \u00f5nnestus tuvastada paroolid 3663-st 5000 (73%) uuritud juhtmevast v\u00f5rgust Tel Avivis, kasutades PMKID-idede p\u00f5hjal p\u00fc\u00fcdetud kaadreid. J\u00e4relduseks tuli, et enamik juhtmevabade v\u00f5rkude omanikke seab ebaturvalisi paroolid, mis on vastuv\u00f5tlikud r\u00fcnnakutele hashide kaudu, ning nende juhtmevabade v\u00f5rkude r\u00fcndamine on v\u00f5imalik kasutada t\u00fc\u00fcpilisi utiliite nagu hashcat, hcxtools ja hcxdumptool. <\/p>\n

Ido kasutas juhtmevabade v\u00f5rkude paketide p\u00fc\u00fcdmiseks kaasaskantavat arvutit, millel oli Ubuntu Linux, pani selle seljakotti ja jalutas ringi linnas, kuni \u00f5nnestus tabada PMKID-idega kaadreid viie tuhande erineva juhtmevaba v\u00f5rgu kohta. P\u00e4rast seda kasutas ta 8 GPU NVIDIA QUADRO RTX 8000 48GB arvutit paroolide r\u00fcndamiseks, mis on saadud PMKID identifikaatorist. Paroolide r\u00fcndamise tootlikkus sellel serveris<\/a> oli peaaegu 7 miljonit hash'i sekundis. V\u00f5rdluseks: tavalise s\u00fclearvuti tootlikkus on umbes 200 000 hash'i sekundis, mis on piisav, et leida \u00fche 10 numbrist koosneva parooli umbes 9 minuti jooksul. <\/p>\n

Selleks, et kiirendada paroolide otsimist, piirati valik 8 v\u00e4ikese t\u00e4hega ja 8, 9 v\u00f5i 10 numbrit sisaldavatele j\u00e4rjestustele. Sellest piirangust piisas, et tuvastada paroolid 3663 5000 v\u00f5rgust. K\u00f5ige populaarsemad olid 10 numbri sisaldavad paroolid, mida kasutati 2349 v\u00f5rgus. 8 numbri paroolid olid kasutusel 596 v\u00f5rgus, 9 numbrit omavad paroolid 368 ja 8 v\u00e4ikese t\u00e4hega paroolid 320 v\u00f5rgus. Rockyou.txt s\u00f5naraamatu kasutamine, mille suurus on 133 MB, v\u00f5imaldas kohe leida 900 parooli. <\/p>\n

Eeldatakse, et paroolide usaldusv\u00e4\u00e4rsuse olukord juhtmevabades v\u00f5rkudes teistes linnades ja riikides on ligikaudu sama ning enamik paroolidest on v\u00f5imalik leida m\u00f5ne tunni jooksul, kulutades umbes 50 dollarit juhtmevaba kaardi ostmiseks, millel on toetatud j\u00e4lgimisre\u017eiim (katsetes kasutati ALFA Network AWUS036ACH kaarti). PMKID-p\u00f5hised r\u00fcnnakud on rakendatavad ainult v\u00f5rguseadmete, mis toetavad r\u00e4ndlust, kuid nagu praktika on n\u00e4idanud, ei l\u00fclita enamus tootjatest seda v\u00e4lja. <\/p>\n

R\u00fcndamiseks kasutati tavalist meetodit WPA2 traadita v\u00f5rkude h\u00e4kkimiseks, mis on tuntud alates 2018. aastast. Erinevalt klassikalisest meetodist, mis n\u00f5uab handshake-kaadrite pealtkuulamist, kui kasutaja v\u00f5rkudele \u00fchendub, p\u00f5hineb meetod PMKID pealtkuulamisel ja ei ole seotud uue kasutaja v\u00f5rku \u00fchendamisega, seega v\u00f5ib seda rakendada igal ajal. Andmete saamiseks, mis on piisavad parooli katsetamiseks, on piisav \u00fche PMKID-ga kaadri pealtkuulamine. Selliseid kaadreid saab hankida nii passiivre\u017eiimis, j\u00e4lgides r\u00e4ndetegevust, kui ka sunniviisiliselt algatada PMKID-kaadrite edastamine eetrisse, saates autentimise p\u00e4ringu juurdep\u00e4\u00e4supunktile. <\/p>\n

PMKID on hashes, mis genereeritakse koos parooli, juurdep\u00e4\u00e4supunkti MAC-aadressi, kliendi MAC-aadressi ja traadita v\u00f5rgu nime (SSID) kasutamisega. Viimased kolm parameetrit (MAC AP, MAC Station ja SSID) on algselt tuntud, mis v\u00f5imaldab kasutada s\u00f5nastiku meetodit parooli m\u00e4\u00e4ramiseks, sarnaselt sellele, kuidas s\u00fcsteemi kasutajate paroole saab tuvastada, kui nende hash lekib. Seega s\u00f5ltub traadita v\u00f5rku sisenemise kaitstus t\u00e4ielikult seadistatud parooli tugevusest.

\"Katse<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperiment 70% Tel Avivi Wi-Fi-v\u00f5rkude kasutajate paroolide m\u00e4\u00e4ramiseks | ProHoster","description":"Iisraeli turvauuringute teadlane Ido Hoorvitch (Tel Avivist) avaldas eksperimendi tulemused traadita v\u00f5rkudele juurdep\u00e4\u00e4su tagamiseks kasutatavate paroolide usaldusv\u00e4\u00e4rsuse uurimiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}