{"id":31538,"date":"2019-10-31T21:41:45","date_gmt":"2019-10-31T18:41:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3\/"},"modified":"2019-10-31T21:41:45","modified_gmt":"2019-10-31T18:41:45","slug":"dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","title":{"rendered":"Dragonblood: individuate le prime vulnerabilit\u00e0 del Wi-Fi WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nell'ottobre 2017 \u00e8 emerso inaspettatamente che nel protocollo Wi-Fi Protected Access II (WPA2) esiste una grave vulnerabilit\u00e0 per la crittografia del traffico Wi-Fi, che consente di rivelare le password degli utenti e successivamente monitorare lo scambio di dati della vittima. La vulnerabilit\u00e0 \u00e8 stata chiamata KRACK (abbreviazione di Key Reinstallation Attack) ed \u00e8 stata scoperta dagli esperti Mathy Vanhoef ed Eyal Ronen. Dopo la rilevazione, la vulnerabilit\u00e0 KRACK \u00e8 stata chiusa con firmware correttivi per i dispositivi, e il protocollo WPA3, che \u00e8 subentrato l'anno scorso al WPA2, dovrebbe far dimenticare i problemi di sicurezza nelle reti Wi-Fi. <\/p>\n

\"Dragonblood:<\/p>\n

Purtroppo, gli stessi esperti hanno scoperto vulnerabilit\u00e0 altrettanto pericolose nel protocollo WPA3. Pertanto, \u00e8 nuovamente necessario attendere e sperare in nuovi firmware per i punti di accesso wireless e i dispositivi, altrimenti si dovr\u00e0 vivere con la consapevolezza delle vulnerabilit\u00e0 delle reti Wi-Fi domestiche e pubbliche. Le vulnerabilit\u00e0 trovate nel WPA3 sono state collettivamente denominate Dragonblood.<\/p>\n

Le radici del problema, come prima, risiedono nel funzionamento del meccanismo di stabilimento della connessione o, come vengono definiti nel standard, nel \u00abhandshake\u00bb. Questo meccanismo nel protocollo WPA3 \u00e8 chiamato Dragonfly (libellula). Fino alla scoperta di Dragonblood, si considerava ben protetto. In totale, il pacchetto Dragonblood comprendeva cinque varianti di vulnerabilit\u00e0: un attacco denial-of-service, due vulnerabilit\u00e0 di downgrade della sicurezza della rete e due vulnerabilit\u00e0 con attacchi attraverso canali laterali (side-channel).<\/p>\n

<\/center>
\n\"Dragonblood:<\/p>\n

L'attacco denial-of-service non porta a perdite di dati, ma pu\u00f2 essere un evento spiacevole per l'utente, che di volta in volta non riesce a connettersi al punto di accesso. Le altre vulnerabilit\u00e0 consentono all'attaccante di recuperare le password per connettere l'utente al punto di accesso e monitorare qualsiasi informazione critica per l'utente.<\/p>\n

Gli attacchi con downgrade della sicurezza della rete consentono di forzare il passaggio a una versione precedente del protocollo WPA2 o a varianti pi\u00f9 deboli degli algoritmi di crittografia WPA3, per poi continuare a violare utilizzando metodi gi\u00e0 noti. L'attacco tramite canali laterali sfrutta le peculiarit\u00e0 degli algoritmi WPA3 e le loro implementazioni, il che, in ultima analisi, consente anche di utilizzare tecniche di violazione delle password note. Maggiori dettagli qui. Un set di strumenti per identificare le vulnerabilit\u00e0 di Dragonblood pu\u00f2 essere trovato a questo link.<\/p>\n

\"Dragonblood:<\/p>\n

L'alleanza Wi-Fi, responsabile dello sviluppo degli standard Wi-Fi, \u00e8 stata informata delle vulnerabilit\u00e0 riscontrate. Si riporta che i produttori di apparecchiature stanno preparando firmware modificati per chiudere le falle di sicurezza scoperte. Non sar\u00e0 necessaria la sostituzione o la restituzione delle apparecchiature.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KRACK (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Key Reinstallation Attack) \u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u0439\u0430\u043b\u043e\u043c \u0420\u043e\u043d\u0435\u043d\u043e\u043c (Eyal Ronen). \u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31538","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dragonblood: scoperte le prime vulnerabilit\u00e0 del Wi-Fi WPA3 | ProHoster","description":"Nel mese di ottobre 2017, \u00e8 emersa inaspettatamente una grave vulnerabilit\u00e0 nel protocollo Wi-Fi Protected Access II (WPA2) utilizzato per la crittografia del traffico Wi-Fi, che consente di individuare le password degli utenti.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dragonblood: \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Wi-Fi WPA3 | ProHoster","og:description":"\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:45+00:00","article:modified_time":"2019-10-31T18:41:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31538","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:39:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:15:45","updated":"2026-01-21 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/31538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=31538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/31538\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/23463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=31538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=31538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=31538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}