Many users have decided that Apple’s iPhone is the right device for them – but is it the right device for mobile IT? Tomorrow at the Mobile Business Expo I will chair a panel that explores the opportunities – and issues – inherent in the iPhone and its competitors, and help attendees prepare a checklist of [...]
Introduction
Back in November of 2008 I wrote about the Wi-Fi Protected Access (WPA) attack by the German graduate students Erik Tews and Martin Beck. They discovered a limited method to crack WPA, or more specifically, to crack [...]
Apple announced the iPhone 3Gs and release 3.0 today. The iPhone 3Gs will be available in about a week. The 16 GB version is $199, the 32 GB version is $299. The older iPhone 3G price drops to $99. Release 3.0 is a free upgrade. Here is my take:
What I like
Hardware encryption [...]
Many enterprises are considering Wi-Fi CERTIFIED™ 802.11n draft 2.0 deployment because it has significant advantages over existing wireless technologies. However, these advantages present the enterprise network manager with important deployment considerations. At the upcoming Burton Group Catalyst Conference in July, I will examine the various deployment considerations for 802.11n in the enterprise. Some of the topics I will discuss are listed below.
Most existing 802.11 devices operate in a single frequency band, (e.g., 2.4 GHz or 5 GHz). 802.11n is different because it is specifically designed to operate in both the 5 GHz and the 2.4 GHz frequency bands. So 802.11n presents an opportunity for enterprises to reconsider which frequency band(s) to use. I will discuss some of the tradeoffs and issues enterprise managers need to consider. Continue reading My Catalyst conference presentation
There were approximately 40 million smart phones shipped in the third quarter of 2008. Most of these phones were purchased for personal use. However a growing number of employees expect to connect their personal device to enterprise networks in order to retrieve e-mail, synchronize calendars, and download files. Although the enterprise may not own the device, they do own the information assets stored on the device. Therefore, enterprises must evaluate mobile device threats and implement mitigation techniques. [...]
On December 3, 2008 I presented a talk entitled “Maintaining security as you upgrade to 802.11n” at the FinSec 2008 conference. My slides are [...]
I added an Articles page to the website today that contains many of the articles and tutorials I have written over the last few years. Quite often, these articles take the form of a multi-part tutorial series on a particular topic. This lets me treat the subject in more detail. On the Articles page you’ll find a [...]

Erik Tews
German graduate students Erik Tews and Martin Beck discovered a limited method to crack WPA, or more specifically, to crack the TKIP component of WPA. Their paper describes the attack and their tkiptun-ng tool carries out the attack.
WPA relies upon the old RC4 encryption algorithm from the infamous WEP protocol and uses TKIP as a “band-aid” to strengthen WEP encryption. WPA was intended as a way to secure existing WEP equipment without using a computationally intensive algorithm. This approach enabled existing hardware (access points and clients) to support WPA with a simple software upgrade. Continue reading WPA Hack
Recent Comments