{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Eksperiment kasutajate paroolide m\u00e4\u00e4ramiseks 70% Tel Avivi Wi-Fi v\u00f5rkudest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Iisraeli turvaekspert Ido Hoorvitch (Tel-Avivist) avaldas oma eksperimendi tulemused, mis uurisid traadita v\u00f5rkude juurdep\u00e4\u00e4su paroolide usaldusv\u00e4\u00e4rsust. Uuringu k\u00e4igus \u00f5nnestus tal, kasutades PMKID identifikaatoritega j\u00e4\u00e4ke, leida paroolid 3663-st 5000-st (73%) uuritud traadita v\u00f5rgust Tel-Avivis. J\u00e4relduseks sai, et enamik traadita v\u00f5rkude omanikke seavad ebausaldusv\u00e4\u00e4rseid paroole, mida on kergesti v\u00f5imalik r\u00fcndeabi j\u00e4rgi leida, ning nende traadita v\u00f5rgud on haavatavad tuntud t\u00f6\u00f6riistade, nagu hashcat, hcxtools ja hcxdumptool, abil. <\/p>\n

Ido kasutas traadita v\u00f5rkude pakettide p\u00fc\u00fcdmiseks portatiivset arvutit Ubuntu Linuxiga, mille ta pani seljakotti ja kolis linna ringi, kuni \u00f5nnestus tal p\u00fc\u00fcda PMKID (Pairwise Master Key Identifier) identifikaatoritega j\u00e4\u00e4ke viiest tuhandest erinevast traadita v\u00f5rgust. P\u00e4rast seda kasutas ta paroolide leidmiseks 8 GPU NVIDIA QUADRO RTX 8000 48GB arvutit, mis t\u00f6\u00f6tles PMKID identifikaatorist eraldatud h\u00e4\u00e4li, pakkudes muljetavaldavat j\u00f5udlust. serveril<\/a> koos oli peaaegu 7 miljonit hashi sekundis. V\u00f5rdluseks, tavalise s\u00fclearvuti j\u00f5udlus on umbes 200 tuhat hashi sekundis, mis on piisav 10 numbrist koosneva parooli leidmiseks umbes 9 minutiga. <\/p>\n

Selleks, et kiirendada paroolide tuvastamist, piirati v\u00f5imaluste valik 8 v\u00e4ikest t\u00e4hte ja 8, 9 v\u00f5i 10 numbriga kombinatsioonidega. See piirang oli piisav, et leida paroolid 3663 5000 v\u00f5rgu puhul. K\u00f5ige populaarsemad olid 10 numbriga paroolid, mida kasutati 2349 v\u00f5rgus. 8 numbriga paroole kasutati 596 v\u00f5rgus, 9 numbriga paroole 368 ja 8 v\u00e4iket\u00e4hega paroole 320. Peale rockyou.txt s\u00f5naraamatu, mille suurus oli 133 MB, kasutamist \u00f5nnestus kohe leida 900 parooli. <\/p>\n

Arvatakse, et paroolide usaldusv\u00e4\u00e4rsuse olukord juhtmeta v\u00f5rkudes on teistes linnades ja riikides ligikaudu sama ning enamik parooli saab k\u00e4tte m\u00f5ne tunni jooksul, kulutades ligikaudu 50 dollarit juhtmeta kaardile, mis toetab eetrire\u017eiimi j\u00e4lgimist (katsetes kasutati ALFA Network AWUS036ACH kaarti). PMKID-p\u00f5hine r\u00fcnnak on rakendatav ainult neid punkte, mis toetavad r\u00e4ndlust, kuid praktiline kogemus n\u00e4itab, et enamik tootjatest ei keela seda. <\/p>\n

R\u00fcnnaku jaoks kasutati t\u00fc\u00fcpilist meetodit WPA2 traadita v\u00f5rkude r\u00fcndamiseks, mis on tuntud alates 2018. aastast. Erinevalt klassikalisest meetodist, mis n\u00f5uab handshake-kaadrite haaramist kasutaja \u00fchendamise ajal, ei ole PMKID'i p\u00f5hine meetod seotud uue kasutaja v\u00f5rku sisenemisega ja seda saab rakendada igal ajal. \u00dche PMKID-i identifikaatoriga kaadri haaramiseks vajalike andmete saamiseks on piisav \u00fche kaadri tabamine. Selliseid kaadreid saab saada nii passiivses re\u017eiimis, j\u00e4lgides r\u00e4ndetegevust, kui ka sundides PMKID kaadrite edastamist raadiosagedusele, saates autentimisn\u00f5ude k\u00f5ikuvuse punktile. <\/p>\n

PMKID on hash, mis valmistatakse parooli, p\u00e4\u00e4supunkti MAC-aadressi, kliendi MAC-aadressi ja traadita v\u00f5rgu nime (SSID) kasutamise teel. Viimane kolm parameetrit (MAC AP, MAC Station ja SSID) on algselt teada, mis v\u00f5imaldab s\u00f5naraamatumeetodi kasutamist parooli m\u00e4\u00e4ramiseks, sarnaselt sellele, kuidas s\u00fcsteemi kasutajate paroolide h\u00fclgeid saab lekke korral tabada. Seet\u00f5ttu s\u00f5ltub traadita v\u00f5rku sisenemise turvalisus t\u00e4ielikult iga v\u00f5rgupassi tugevusest.

\"Eksperiment<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperiment 70% Wi-Fi v\u00f5rkude kasutajate paroolide m\u00e4\u00e4ramiseks Tel-Avivis | ProHoster","description":"Iisraeli turvauuringute spetsialist Ido Hoorvitch (Tel-Avivist) avaldas eksperimendi tulemused, mis uurisid paroolide usaldusv\u00e4\u00e4rsust, mis on kasutusel traadita v\u00f5rkude ligip\u00e4\u00e4su korraldamiseks. Uuringu k\u00e4igus, kasutades PMKID identifikaatoreid, suudeti tabada paroolid 3663-st 5000-st (73%) uuritud traadita v\u00f5rgust Tel-Avivis. Loodud oli j\u00e4reldus, et enamik traadita v\u00f5rgu omanike...","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}