How Android and iOS Can Protect Users from WiFi Protected Setup (WPS)
Wi-Fi Allianceâ€™s Wi-Fi Protected Setup specification describes how a wireless device can be automatically configured with wireless network security settings. The goal was to make it easier for non techies to configure devices to securely connect to wireless routers. On Dec 27, 2011 the US-CERT released Vulnerability Note VU#723755 outlining that the WiFi Protected Setup (WPS) PIN is susceptible to a brute force attack.
Getting the word out to the people most impacted by this vulnerability is not easy. Non-techies don’t track alerts from US-CERT or read techie blogs and may never know that their device has WPS enabled (talking to you Mom).
This is where Google and Apple can help by updating iOS and Android with core functionality that detects WPS.
If the device the user is connected to has WPS enabled iOS or Android would alert the user and direct them to a web page with more info about issue and what they can do.
If you liked this post, subscribe using below