Home WiFi Router with pfSense or m0n0wall?

[Alejandro Imass]

On Wed, Apr 24, 2013 at 4:16 PM, Michael Powell <nightrecon at hotmail.com> wrote:
> Alejandro Imass wrote:
>
> [snip]
>>>> Most consider the answer to use WPA2, which I do use too. Many think
>>>> it is 'virtually' unbreakable, but this really is not true; it just
>>>> takes longer. I've done WPA2 keys in as little as 2-3 hours before.
>>>
>>> Are you saying that any WPA2 key can be cracked or or you simply
>>> referring to weak keys?
>>
>> I would also like to specifically if it's for weak keys or are all
>> WPA2 personal keys crackable by brute force. Also is WPA2 Enterprise
>> as weak also. Could anyone expand on how weak is WPA2 and WPA2
>> Enterprise or is this related to weak PSKs only??
>>
>
> I'm just a lowly sysadmin and not any kind of crypto expert.  The problem is
> time and horsepower. While a ridiculously easy key of say 4 characters that
> is not salted may be doable on a PC, once you start to get to 8-9 characters
> or more the time it takes begins to get huge fast. It's a matter of can you
> tie up the resource long enough to wait it out. Throw salting into the mix
> and it gets longer again.
>
> What I do at home is concatenate 2 ham radio call signs of friends that I
> can remember. Then I sha256 that and select from the end backwards 15


[...]

> The pre-shared key is the weakest as compared to Enterprise. Enterprise WPA
> is stronger because it is a user account based system which authenticates
> using 802.1x via a Radius server. You can even assign certificates to user


OK. So we are talking about weak PSKs, of course with enough computing
power virtually anything is crackable by brute force. What I don't get
is that I thought that mac address filtering at the wireless level
meant that the router would not negotiate with a mac no listed in it's
table. I haven't used Kismet but you are saying that with Kismet I can
infer authorized macs that are connecting to a specific access point
so I can spoof one and perform my brute force attack?? Honestly I
don't know much about 802.11 but if that is so it's pretty retarded
and mac address filtering really a joke then.

Thanks again for such detailed responses. I know all this seems all OT
but it's a security issue that I don't think that many people are
aware of so I haven't changed the subject to OT because of this.

Best,

-- 
Alejandro Imass