{"id":31424,"date":"2019-10-31T21:41:11","date_gmt":"2019-10-31T18:41:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\/"},"modified":"2019-10-31T21:41:11","modified_gmt":"2019-10-31T18:41:11","slug":"uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","title":{"rendered":"Dob\u00ebsit\u00eb n\u00eb teknologjin\u00eb e mbrojtjes s\u00eb rrjeteve wireless WPA3 dhe n\u00eb EAP-pwd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 &#8212; CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0442\u043e\u0434  \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Dragonfly, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 offline-\u0440\u0435\u0436\u0438\u043c\u0435. \u041a\u0440\u043e\u043c\u0435 WPA3 \u043c\u0435\u0442\u043e\u0434 Dragonfly \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0441\u043b\u043e\u0432\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 EAP-pwd, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0432 Android, RADIUS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432 hostapd\/wpa_supplicant.<\/p>\n<p>Gjat\u00eb hetimit u zbuluan dy lloje kryesore t\u00eb problemeve arkitekturore n\u00eb WPA3. T\u00eb dyja llojet e problemeve mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb riprodhuar fjal\u00ebkalimin e aksesit. Lloji i par\u00eb lejon kthimin n\u00eb metoda t\u00eb pamjaftueshme kriptografike (sulmi i zbretjes): mjetet p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebri me WPA2 (rezhimi transit, i cili lejon p\u00ebrdorimin e WPA2 dhe WPA3) lejojn\u00eb sulmuesin t\u00eb detyroj\u00eb klientin t\u00eb kryej\u00eb negociat\u00ebn kat\u00ebrhapi t\u00eb lidhjes WPA2, e cila lejon p\u00ebrdorimin e sulmeve klasike p\u00ebr gjetjen e fjal\u00ebkalimeve, t\u00eb aplikueshme p\u00ebr WPA2. P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb zbuluar mund\u00ebsia e nj\u00eb sulmi zbret\u00ebs direkt n\u00eb metod\u00ebn e negociat\u00ebs s\u00eb lidhjeve Dragonfly, q\u00eb lejon kthimin n\u00eb lloje m\u00eb pak t\u00eb sigurta t\u00eb kurbave eliptike.<\/p>\n<p>Lloji i dyt\u00eb i problemeve \u00e7on n\u00eb rrjedhjen e informacionit p\u00ebr karakteristikat e fjal\u00ebkalimit p\u00ebrmes kanaleve t\u00eb jashtme dhe bazohet n\u00eb mang\u00ebsit\u00eb e metod\u00ebs s\u00eb kodimit t\u00eb fjal\u00ebkalimit n\u00eb Dragonfly, t\u00eb cilat lejojn\u00eb q\u00eb, me informacion indirekt, si ndryshimi i vonesave gjat\u00eb operacioneve, t\u00eb riprodhohet fjal\u00ebkalimi origjinal. Algoritmi i p\u00ebrdorur n\u00eb Dragonfly p\u00ebr transformimin e hash-it n\u00eb nj\u00eb kurb\u00eb eliptike (hash-to-curve) \u00ebsht\u00eb i ndjesh\u00ebm ndaj sulmeve p\u00ebrmes gjurmimit t\u00eb informacionit n\u00eb cache-in e procesorit (sulmi i cache-it), dhe algoritmi i transformimit t\u00eb hash-it n\u00eb grup (hash-to-group) \u00ebsht\u00eb i ndjesh\u00ebm ndaj sulmeve p\u00ebrmes matjes s\u00eb koh\u00ebs s\u00eb ekzekutimit t\u00eb operacioneve (sulmi temporal).<\/p>\n<p> P\u00ebr t\u00eb realizuar sulme p\u00ebrmes analiz\u00ebs s\u00eb cache-it, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb ekzekutoj\u00eb kod t\u00eb pakualifikuar n\u00eb sistemin e p\u00ebrdoruesit q\u00eb lidhet me rrjetin wireless. T\u00eb dy metodat ofrojn\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb marr\u00eb informacionin e nevojsh\u00ebm p\u00ebr t\u00eb verifikuar sakt\u00ebsin\u00eb e zgjedhjes s\u00eb pjes\u00ebve t\u00eb fjal\u00ebkalimit gjat\u00eb procesit t\u00eb tij t\u00eb gjetjes. Efektiviteti i sulmit \u00ebsht\u00eb mjaft i lart\u00eb dhe lejon gjetjen e nj\u00eb fjal\u00ebkalimi 8-shifror, duke p\u00ebrfshir\u00eb simbole me shkronja t\u00eb vogla, duke kapur vet\u00ebm 40 seanca lidhjeje (handshake) dhe duke shpenzuar burime q\u00eb korrespondojn\u00eb me qiran\u00eb e kapacitetit t\u00eb Amazon EC2 p\u00ebr 125 dollar\u00eb. <\/p>\n<p>Bazuar n\u00eb dob\u00ebsit\u00eb e zbuluara, jan\u00eb propozuar disa skenar\u00eb sulmi:<\/p>\n<ul>\n<li class=\"l\"> Sulmi i zbretjes n\u00eb WPA2 me mund\u00ebsin\u00eb e gjetjes s\u00eb fjal\u00ebve. N\u00eb kushte kur klienti dhe pika e aksesit mb\u00ebshtesin si WPA3 ashtu edhe WPA2, sulmuesi mund t\u00eb vendos\u00eb nj\u00eb pik\u00eb aksesimi t\u00eb falsifikuar me t\u00eb nj\u00ebjtin em\u00ebr rrjeti, e cila mb\u00ebshtet vet\u00ebm WPA2. N\u00eb nj\u00eb situat\u00eb t\u00eb till\u00eb, klienti do t\u00eb p\u00ebrdor\u00eb metod\u00ebn e negociat\u00ebs s\u00eb lidhjes t\u00eb WPA2, gjat\u00eb procesit t\u00eb s\u00eb cil\u00ebs do t\u00eb p\u00ebrcaktohet jotolerueshm\u00ebria e till\u00eb, por kjo do t\u00eb b\u00ebhet n\u00eb nj\u00eb faz\u00eb kur mesazhet e negociat\u00ebs s\u00eb kanalit jan\u00eb d\u00ebrguar dhe t\u00eb gjith\u00eb informacioni i nevojsh\u00ebm p\u00ebr sulmin \u00ebsht\u00eb rrjedhur tashm\u00eb. Nj\u00eb metod\u00eb e ngjashme \u00ebsht\u00eb e aplikueshme p\u00ebr kthimin n\u00eb versionet problematike t\u00eb kurbave eliptike n\u00eb SAE.\n<p>\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0434\u0435\u043c\u043e\u043d iwd, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Intel \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b wpa_supplicant, \u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u0435\u043a Samsung Galaxy S10 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b downgrade-\u0430\u0442\u0430\u043a\u0435 \u0434\u0430\u0436\u0435 \u0432 \u0441\u0435\u0442\u044f\u0445, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0442\u043e\u043b\u044c\u043a\u043e WPA3 &#8212; \u0435\u0441\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0441 WPA3-\u0441\u0435\u0442\u044c\u044e, \u043e\u043d\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e WPA2 \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c.<\/p>\n<li class=\"l\"> Sulmi p\u00ebrmes kanaleve t\u00eb jashtme me nxjerrjen e informacionit nga cache-i i procesorit. Algoritmi i kodimit t\u00eb fjal\u00ebkalimeve n\u00eb Dragonfly p\u00ebrmban deg\u00ebzim t\u00eb kushteve dhe sulmuesi, duke pasur mund\u00ebsin\u00eb t\u00eb ekzekutoj\u00eb kodin n\u00eb sistemin e p\u00ebrdoruesit t\u00eb rrjetit wireless, mund t\u00eb identifikoj\u00eb se cili blok i shprehjes if-then-else \u00ebsht\u00eb zgjedhur n\u00eb baz\u00eb t\u00eb analiz\u00ebs s\u00eb sjelljes s\u00eb cache-it. Informacioni i marr\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kryer nj\u00eb gjetje t\u00eb vazhdueshme t\u00eb fjal\u00ebkalimit, duke p\u00ebrdorur metoda t\u00eb ngjashme me ato t\u00eb sulmeve offline t\u00eb gjetjes s\u00eb fjal\u00ebkalimeve WPA2. P\u00ebr mbrojtje, sugjerohet kalimi n\u00eb p\u00ebrdorimin e operacioneve me koh\u00eb t\u00eb vazhdueshme, q\u00eb nuk varen nga natyra e t\u00eb dh\u00ebnave q\u00eb trajtohen;\n<li class=\"l\"> Sulmi p\u00ebrmes kanaleve t\u00eb jashtme me vler\u00ebsimin e koh\u00ebs s\u00eb ekzekutimit. N\u00eb kodin Dragonfly, p\u00ebr kodimin e fjal\u00ebkalimeve p\u00ebrdoren disa grupe multiplikative (MODP) dhe nj\u00eb num\u00ebr variab\u00ebl iteracionesh, numri i t\u00eb cilave varet nga fjal\u00ebkalimi i p\u00ebrdorur dhe adresa MAC e pik\u00ebs s\u00eb qasjes ose e klientit. Nj\u00eb sulmues i larg\u00ebt mund t\u00eb p\u00ebrcaktoj\u00eb se sa iteracione jan\u00eb kryer gjat\u00eb kodimit t\u00eb fjal\u00ebkalimit dhe t'i p\u00ebrdor\u00eb ato si nj\u00eb tregues gjat\u00eb prov\u00ebs progresive t\u00eb fjal\u00ebkalimit.\n<li class=\"l\"> Thirrja e refuzimit t\u00eb sh\u00ebrbimit. Sulmuesi mund t\u00eb bllokoj\u00eb funksione t\u00eb caktuara t\u00eb pik\u00ebs s\u00eb qasjes p\u00ebr shkak t\u00eb shterimit t\u00eb burimeve t\u00eb disponueshme p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb numri t\u00eb madh k\u00ebrkesash p\u00ebr pajtim t\u00eb kanaleve t\u00eb komunikimit. P\u00ebr t\u00eb anashkaluar mbrojtjen e parashikuar n\u00eb WPA3 kund\u00ebr p\u00ebrmbytjes, mjafton d\u00ebrgimi i k\u00ebrkesave nga adresa MAC t\u00eb pretenduara dhe t\u00eb pa p\u00ebrs\u00ebritura.\n<li class=\"l\">  Rikthimi n\u00eb grupe kriptografike m\u00eb t\u00eb dob\u00ebta, t\u00eb p\u00ebrdorura n\u00eb procesin e pajtimit t\u00eb lidhjeve n\u00eb WPA3. P\u00ebr shembull, n\u00ebse kliente suporton kthesat eliptike P-521 dhe P-256, dhe p\u00ebrdor P-521 si opsion prioritar, sulmuesi, pavar\u00ebsisht se mb\u00ebshtet P-521 n\u00eb an\u00ebn e pik\u00ebs s\u00eb qasjes, mund t\u00eb detyroj\u00eb klientin t\u00eb p\u00ebrdor\u00eb P-256. Sulmi realizohet duke filtruar disa mesazhe gjat\u00eb procesit t\u00eb pajtimit dhe duke d\u00ebrguar mesazhe t\u00eb rreme me informacion mbi munges\u00ebn e mb\u00ebshtetjes p\u00ebr disa lloje t\u00eb kthesave eliptike.<br \/>\nP\u00ebr t\u00eb verifikuar pajisjet p\u00ebr pranin\u00eb e dob\u00ebsive, jan\u00eb p\u00ebrgatitur disa skripte me shembuj t\u00eb sulmeve:<\/p>\n<\/ul>\n<p>P\u00ebr t\u00eb kontrolluar pajisjet p\u00ebr vulnerabilitete, jan\u00eb p\u00ebrgatitur disa skripte me shembuj sulmesh:<\/p>\n<ul>\n<li class=\"l\"> Dragonslayer &#8212; \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 EAP-pwd;\n<li class=\"l\"> Dragondrain  &#8212; \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u0432\u0435\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SAE (Simultaneous Authentication of Equals), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438;\n<li class=\"l\"> Dragontime &#8212; \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u043f\u0440\u043e\u0442\u0438\u0432 SAE, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u043d\u0438\u0446\u0443 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0433\u0440\u0443\u043f\u043f MODP 22, 23 \u0438 24;\n<li class=\"l\"> Dragonforce &#8212; \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (\u043f\u043e\u0434\u0431\u043e\u0440 \u043f\u0430\u0440\u043e\u043b\u044f) \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e \u0440\u0430\u0437\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0441\u0435\u0434\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448\u0435.\n<\/ul>\n<p>Bashkimi i Wi-Fi Alliance, q\u00eb zhvillon standardet p\u00ebr rrjetet e paq\u00ebllimshme, shpalli se problemi prek nj\u00eb num\u00ebr t\u00eb kufizuar realizimesh t\u00eb hershme t\u00eb WPA3-Personal dhe mund t\u00eb zgjidhet p\u00ebrmes p\u00ebrdit\u00ebsimeve t\u00eb softuerit dhe firmware-it. Nuk jan\u00eb regjistruar raste t\u00eb p\u00ebrdorimit t\u00eb dob\u00ebsive p\u00ebr t\u00eb kryer veprime t\u00eb d\u00ebmshme. P\u00ebr t\u00eb forcuar mbrojtjen, Wi-Fi Alliance ka shtuar prova shtes\u00eb n\u00eb programin e certifikimit t\u00eb pajisjeve pa tela p\u00ebr t\u00eb kontrolluar sakt\u00ebsin\u00eb e realizimeve dhe gjithashtu \u00ebsht\u00eb kontaktuar me prodhuesit e pajisjeve p\u00ebr t\u00eb koordinuar s\u00eb bashku zgjidhjen e problemeve t\u00eb identifikuara. Patches p\u00ebr rregullimin e problemeve jan\u00eb l\u00ebshuar tashm\u00eb p\u00ebr hostap\/wpa_supplicant. P\u00ebrdit\u00ebsimet e paketave jan\u00eb t\u00eb disponueshme p\u00ebr Ubuntu. N\u00eb Debian, RHEL, SUSE\/openSUSE, Arch, Fedora dhe FreeBSD, problemet ende mbeten t\u00eb pazgjidhura.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 &#8212; CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31424","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb teknologjin\u00eb e mbrojtjes s\u00eb rrjeteve pa tela WPA3 dhe n\u00eb EAP-pwd | ProHoster","description":"Mathy Vanhoef, autori i sulmit KRACK ndaj rrjeteve pa tela me WPA2, dhe Eyal Ronen, bashk\u00ebautori i disa sulmeve ndaj TLS, zbuluan informacione mbi gjasht\u00eb dob\u00ebsi (CVE-2019-9494 - CVE-2019-9499) n\u00eb teknologjin\u00eb e mbrojtjes s\u00eb rrjeteve pa tela WPA3, t\u00eb cilat lejojn\u00eb riprodhimin e fjal\u00ebkalimit t\u00eb lidhjes dhe qasjen n\u00eb rrjetin pa tel pa pasur njohuri p\u00ebr fjal\u00ebkalimin. Dob\u00ebsit\u00eb jan\u00eb t\u00eb grupuara n\u00ebn emrin kodor Dragonblood.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster","og:description":"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:11+00:00","article:modified_time":"2019-10-31T18:41:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31424","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:08:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:17:25","updated":"2026-01-21 06:08:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31424"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31424\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}