{"id":31538,"date":"2019-10-31T21:41:45","date_gmt":"2019-10-31T18:41:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3\/"},"modified":"2019-10-31T21:41:45","modified_gmt":"2019-10-31T18:41:45","slug":"dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","title":{"rendered":"Dragonblood: individuate le prime vulnerabilit\u00e0 del Wi-Fi WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nel ottobre 2017, \u00e8 emerso inaspettatamente che il protocollo Wi-Fi Protected Access II (WPA2) presentava una grave vulnerabilit\u00e0 per la crittografia del traffico Wi-Fi, che consente di rivelare le password degli utenti e di intercettare le comunicazioni della vittima. La vulnerabilit\u00e0 \u00e8 stata chiamata KRACK (acronimo di Key Reinstallation Attack) ed \u00e8 stata scoperta dagli esperti Mathy Vanhoef ed Eyal Ronen. Dopo la scoperta, la vulnerabilit\u00e0 KRACK \u00e8 stata risolta con firmware aggiornati per i dispositivi, e il protocollo WPA3, che \u00e8 subentrato a WPA2 l'anno scorso, avrebbe dovuto farci dimenticare i problemi di sicurezza nelle reti Wi-Fi. <\/p>\n

\"Dragonblood:<\/p>\n

Sfortunatamente, gli stessi esperti hanno scoperto vulnerabilit\u00e0 altrettanto pericolose nel protocollo WPA3. Pertanto, \u00e8 nuovamente necessario aspettare e sperare in nuovi aggiornamenti per i punti di accesso wireless e i dispositivi, altrimenti dovremo vivere con la consapevolezza delle vulnerabilit\u00e0 delle reti Wi-Fi domestiche e pubbliche. Le vulnerabilit\u00e0 trovate in WPA3 sono state collettivamente denominate Dragonblood.<\/p>\n

Le radici del problema, come in precedenza, risiedono nel funzionamento del meccanismo di installazione della connessione o, come viene chiamato nello standard, il \u00abhandshake\u00bb. Questo meccanismo nello standard WPA3 \u00e8 chiamato Dragonfly (libellula). Prima della scoperta di Dragonblood, era considerato ben protetto. Il pacchetto Dragonblood includeva in totale cinque varianti di vulnerabilit\u00e0: denial of service, due vulnerabilit\u00e0 di downgrade della rete e due vulnerabilit\u00e0 con attacchi tramite canali laterali.<\/p>\n

<\/center>
\n\"Dragonblood:<\/p>\n

Le attacchi di denial of service non portano a perdite di dati, ma possono essere un evento fastidioso per l'utente che non riesce a connettersi alla rete ripetutamente. Le altre vulnerabilit\u00e0 consentono all'attaccante di recuperare le password per connettere l'utente al punto di accesso e di monitorare qualsiasi informazione critica per l'utente.<\/p>\n

Gli attacchi di downgrade della rete permettono di forzare il passaggio a una versione obsoleta del protocollo WPA2 o a varianti di crittografia WPA3 pi\u00f9 deboli, per poi continuare il hacking con metodi gi\u00e0 noti. Gli attacchi tramite canali laterali sfruttano le peculiarit\u00e0 degli algoritmi WPA3 e la loro implementazione, consentendo anche in questo caso di utilizzare metodi di hacking delle password gi\u00e0 noti. Maggiori dettagli qui. Un insieme di strumenti per rilevare le vulnerabilit\u00e0 Dragonblood \u00e8 disponibile a questo link.<\/p>\n

\"Dragonblood:<\/p>\n

L'Alliance Wi-Fi, responsabile dello sviluppo degli standard Wi-Fi, \u00e8 stata informata delle vulnerabilit\u00e0 trovate. Si riporta che i produttori hardware stanno preparando firmware modificati per colmare le falle di sicurezza riscontrate. Non sar\u00e0 necessario sostituire o restituire l'hardware.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KRACK (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Key Reinstallation Attack) \u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u0439\u0430\u043b\u043e\u043c \u0420\u043e\u043d\u0435\u043d\u043e\u043c (Eyal Ronen). \u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31538","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dragonblood: individuate le prime vulnerabilit\u00e0 nel Wi-Fi WPA3 | ProHoster","description":"Nell'ottobre 2017, \u00e8 emerso inaspettatamente che nel protocollo Wi-Fi Protected Access II (WPA2) c'era una grave vulnerabilit\u00e0 nella crittografia del traffico Wi-Fi, che consente di rilevare le password degli utenti e successivamente.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dragonblood: \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Wi-Fi WPA3 | ProHoster","og:description":"\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:45+00:00","article:modified_time":"2019-10-31T18:41:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31538","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:39:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:15:45","updated":"2026-01-21 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/31538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=31538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/31538\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/23463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=31538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=31538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=31538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}