Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Kadzar]

I'm now some 800 or so pages (at default of 15ppp, I think it is) into The Warrens of Oric the Awesome, so over the halfway point.

Spoiler: Major TWoOtA Spoiler (click to show/hide)

SLOG LIVES!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!1
BLORBLE!!!!!!!!!

[Bauglir]

Finally got a big chunk of an engineering project to work! I have successfully stolen my own wireless! Then I went back and un-sabotaged the security. Don't use WPS, guys. It opens only slightly lesser holes than WEP.

[Orange Wizard]

WPA master race?

[Bauglir]

Ah, that's the best part, WPS lets jackasses like me totally sidestep your precious WPA and WPA2. It's an alternative option that basically completely fucks your router.

EDIT: Alternative option for authentication, not encryption. Conceptually, imagine they assigned each router an 8 digit PIN that anybody could type in to get access. Now, imagine that it was really only 7 digits because the last was a checksum. Also, it's really 4 digits and 3 because the first half gets verified independently of the last.

[Orange Wizard]

Well, fuck you, then.

[Bauglir]

See above post for clarification in edit-form. Also, the good news is you CAN turn it off in models that support it. Although, sometimes, it just tells you it's turned off. And it's lying.

EDIT: Also, if I had to describe the best part, it's that the offline version of the attack (the one that hasn't been neatly sidestepped by just having the router stop responding if you fuck up enough times) exploits some failures in pseudorandom number generation. In one manufacturer's case, it's really easy to determine the state of the PRNG, and it's completely deterministic. In another manufacturer's case, instead of a PNRG, they just used the number zero.

[Orange Wizard]

I'm scared now.

[Bauglir]

Okay, well, to make you feel actually better, most routers aren't actually vulnerable because they've implemented the "shut the fuck up" protocol if somebody tries guessing a bunch of PINs. As for the offline attack I'm so gleeful about, it's a bitch to get working and only works on routers built with chipsets from the two particular manufacturers I mentioned just now.

[Orange Wizard]

Oh.

Alright.

* Orange Wizard turns off the wireless on his router and lays a cable down the hall instead.

[Bauglir]

I use the ceiling! Less risk of people tripping that way.

[SalmonGod]

I'll be surprised if this hasn't been shared already, but I just discovered it and it made me happy.

The Dwarves of Demrel

I'm loving the atmosphere from this little teaser.

[miauw62]

[Tack]

Happy cakeday

wh... what the hell were they doing to their keyboard
where did they get a sentient one
it just raises so many questions

Sentience doesn't imply consent you boor!

[Itnetlolor]

Happy Birthday.

[MagmaMcFry]

Happy birthday!