There's an interesting tutorial on how to crack 64-bit and 128-bit WEP on many Wi-Fi access points and routers using Backtrack (a Linux Live distribution) on What's the w0rd? at http://thew0rd.com/2008/08/19/tutorial-cracking-wep-using-backtrack-3/.

The tutorial shows how to connect to an access point using WEP encryption when one doesn't know the key. This is done by attacking the Wi-Fi router, making it generate packets for the cracking effort and finally cracking the WEP key. The author concludes that using WEP is a bad idea and suggests using WPA2 encryption for wireless networks.

I found it surprising that in a new study authored by IBM, Apple was rated the number one software most vulnerable to attack, ahead of Microsoft!

I also found it curious that Webmonkey's post (where I read about the study) was titled "Apple, Microsoft Top List of Most Vulnerable Software," which, although true, implies that Microsoft is number two. This isn't true: Microsoft is number three, after Joomla!

Unfortunately, the report notes two worrisome trends:

  • The number of vulnerabilities in our software is increasing.
  • Attacks have largely shifted from operating systems to web applications, hence the inclusion of Joomla!, Wordpress and Drupal.

Via Webmonkey. Read the entire report in PDF format.