That Easy Install Button on your Wifi? Turn it OFF

WPS or QSS – WiFI Protected Setup is broken by design.

Summary:

Turn it OFF

More Information:

New Wifi access points/routers come with a really neat/advertised feature telling you that they can make it easy for mortals to install and configure. They can get you connected easily, quickly and connected to the Internet.

Easy comes, easy goes.

The feature, variously labelled WPS – Wifi Protected Setup, or something telling you that it makes your life easier, is insecure. Leaving it on, or using it without understanding it’s short-comings, is leaving your connection potentially open for misuse by others.

A major security flaw was revealed in December 2011 that affects wireless routers with the WPS feature, which most recent models have and enable by default. The flaw allows a remote attacker to recover the WPS PIN and, with it, the network’s WPA/WPA2 pre-shared key in a few hours.[4] Users have been urged to turn off the WPS feature,[5] although this may not be possible on some router models.[6]

Steve Gibson from http://www.grc.com provides a run through in his podcast Security Now 337: WPS: A Troubled Protocol and in the show notes