PSA:

"Spud2020!" is not a good wifi password. It got cracked in 5 hours at 370 kH/s.

I've been learning to use the Flipper and Hashcat so I have a better understanding of how these exploits work. I am not good at this, but I will get your crappy password.

Make passwords long (like 21 or more characters) and random. I have wordlists and rules for all the cute leetspeak crap you might inject into your password. I have wordlists and rules for all the cute sentences you might use. Long and random. This is the way. I should not be able to crack anybody's password in freaking 2024 with my loser noob skills.

#security #privacy

Reply to this note

Please Login to reply.

Discussion

cool, sounds like fun if you wear a white hat. hope you tell this the owner of the wifi.

Oh yeah, this one actually started as a passive sniff in WiFi Marauder. I'll let them know for sure. I don't want anyone around me having a compromised network, either.

sound moral

keep pushing

😎 😉 😅

It's crazy to not use at least a 21-char, randomly generated password in 2024. Need mawr entropy!

passphrases, long and easy to say and type

obligatory xkcd: https://xkcd.com/936/

WPA3-SAE fixes this

Yeah, I'm seeing the benefit now.

You only get a yes or no, nothing else.

If someone is close enough to reach and hack my wifi for 5 hours, they have already been shot by me or my son....

So I thought that about us, also, but that little ESP32 picks up all kinds of remote stuff. I think these people are blasting wifi everywhere trying to get a strong signal. It carries pretty far.

To be clear, they just have to drive by once, then go home and take their time cracking it. When they come by again, they'll already have the password and can sign right on. It's actually like maybe 10/100 difficulty. Script-kiddie-level stuff.

I say "drive by" but they could do it very remotely with a popsicle stick and some paper clips for an antenna.