CyberSec.eu

Wifi Router that cracks your neighbour’s encryption keys

Jul 10, 2009 Security News

Wiley French hackers have hacked together a nifty idea to help combat France’s idiotic HADOPI Law:

A hacker known only as ‘N’ says he has developed some software known as ‘Hadopi Router’, a term first penned by bloggers who devised the concept. ‘N’, who is said to have previously worked manufacturing routers, says he and a few friends wrote ‘Hadopi Router’ in order to prove that the evidence gathered by the Hadopi agency is unreliable.

“It locates Wi-Fi networks in the neighborhood, then begins to crack all their passwords,” says ‘N’. “Once we have the keys, we can create a virtual access point,” which in basic terms means using the Internet connection without the account holder’s knowledge.

‘N’ says that if an ‘owned’ router has its password changed, the system automatically switches to another Wi-Fi signal in the neighborhood and starts to attack the new password.

Additionally, ‘N’ claims that with Hadopi Router it is possible to monitor activity on the cracked networks but one of his accomplices called ‘V’ says they have no bad intentions.

“We just want to release our software and allow everyone to understand that the technical data used by the Hadopi agency to accuse people will not be reliable. Because of us, the judges will not be able to say that they weren’t aware of that.”

‘N’ says he is already imagining a more ambitious strategy to distribute many dozens of modified routers to a community in order to create a “mini-network”, superimposed over existing ones.

Of course, many wireless routers already have either a complete lack of security or weak WEP encryption enabled, making them sitting ducks for drive-by infringements or less casual ones conducted by neighbors within range.

An IP address does not necessarily identify an individual, in fact one could argue that in many instances these days it doesn’t even identify a computer but merely a gateway to a sub network, behind which could be any number of individuals not linked in any way to a bill payer.

Read the whole article here.