[lotuseclat79]

WPA2 security hole discovered.

Security experts at AirTight Networks have discovered a hole in the WPA2 Wi-Fi security protocol. The security hole was named as Hole 196 after the number of the relevant page in the IEEE 802.11 (2007) standard document. At the bottom of page 196, the IEEE standard introduces the keys used by WPA2: the PTK (Pairwise Transient Key), which is unique for every Wi-Fi client and used for unicast traffic, and the GTK (Group Temporal Key) used for broadcasts. While data forgeries and spoofed mac addresses can be detected with the PTK, the GTK does not offer this functionality.

-- Tom

[lotuseclat79]

WPA/WPA2 encryption: A possible workaround.

It seems using WPA or WPA2 is not as secure as we would like to believe. It’s not the end of the world, but important enough to learn what’s going on.

-- Tom