Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[nicknml]

It was ON, I was just seeing how how effective the tool was at exploiting the vulnerability to get the WPS PIN.

[FurryNutz]

Can you test and see if it gets the PIN while WPS is OFF?

[nicknml]

I tested my DIR-655 with WPS off and I can confirm that WPS is truly disabled

[FurryNutz]

Kewl, thanks for the info.

[nicknml]

Do you think Dlink will fix this issue by implementing a lockout after a certain amount of failed attempts (and most likely disable WPS by default) in the next firmware version? 

[FurryNutz]

This is not D-Links issue perse, it's a protocol issue with the main standard for this protocol. Those who developed this protocol will have to address this as this protocol is in use by most of not all WiFi Mfrs. Once it's been addresses at that level, the Mfrs will implement it into there code, products needing the fix, test and release FW. It's up to the people who developed or maintain the protocol to figure out what there doing to do with it. Who knows what they do and if they even tell the public how they fix it. 

[nicknml]

This is not D-Links issue perse, it's a protocol issue with the main standard for this protocol. Those who developed this protocol will have to address this as this protocol is in use by most of not all WiFi Mfrs. Once it's been addresses at that level, the Mfrs will implement it into there code, products needing the fix, test and release FW. It's up to the people who developed or maintain the protocol to figure out what there doing to do with it. Who knows what they do and if they even tell the public how they fix it. 

True, however I do believe the protocol does allow for lockout periods (a few router manufacturers have implemented this.)

[FurryNutz]

Time will tell. I'm sure what ever they come up with, should fix the problem, however who know when someone else will find a work around. 

[spoutinwyze]

Do you think Dlink will fix this issue by implementing a lockout after a certain amount of failed attempts (and most likely disable WPS by default) in the next firmware version?

Interestingly enough I tried RFA and keep getting "Detected AP rate limting, waiting 60 seconds."
I logged into my router and found that the WPS is enabled and configured, but WPS pin method is disabled. It seems contradictory, is it enabled or disabled? I looked closer and my log and saw the pin attempts first came through about 5-6 of them before the AP error came up. I thought maybe it auto locked the WPS feature after some failed attempts. I couldn't find anything that explained the screen I saw that contradicts itself. I took a screen shot but won't let me attach

[FurryNutz]

What model router do you have?

What FW version is currently loaded?

We recommend disabling WPS completely if your not using it. We recommend using SSID and PW for WiFi access for your wireless devices.

Do you think Dlink will fix this issue by implementing a lockout after a certain amount of failed attempts (and most likely disable WPS by default) in the next firmware version?

Interestingly enough I tried RFA and keep getting "Detected AP rate limting, waiting 60 seconds."
I logged into my router and found that the WPS is enabled and configured, but WPS pin method is disabled. It seems contradictory, is it enabled or disabled? I looked closer and my log and saw the pin attempts first came through about 5-6 of them before the AP error came up. I thought maybe it auto locked the WPS feature after some failed attempts. I couldn't find anything that explained the screen I saw that contradicts itself. I took a screen shot but won't let me attach