Security question WPS and hacking?

Mar 16, 2018
4
0
10
If the WPS button is not pushed (on my comcast gateway it would be flashing) is the wifi still vulnerable via WPS?

I later figured out to permantly disable it, but I was wondering if your still vulnerable if you have it enabled (but not physically on via the button).

Could someone hack wifi and be on my network without their device being shown in the list of devices shown in the router settings?

 
Solution
Yes, the button on the router is just there so you can push that instead of having to know the WPS PIN code. It will broadcast connection info for a set time, usually a couple minutes, that your device can use to connect. If you try to connect without pushing that button and WPS is enabled you need to enter the 8 digit PIN on the device you are connecting. In reality though the router only checks the first 4 of the PIN so that is why it is easy to hack. The intruder only needs to be able to brute force a 4 digit PIN which is much easier and faster than an 8 digit PIN.

Pretty good article on it here: https://www.howtogeek.com/176124/wi-fi-protected-setup-wps-is-insecure-heres-why-you-should-disable-it/

BadAsAl

Distinguished
Yes, the button on the router is just there so you can push that instead of having to know the WPS PIN code. It will broadcast connection info for a set time, usually a couple minutes, that your device can use to connect. If you try to connect without pushing that button and WPS is enabled you need to enter the 8 digit PIN on the device you are connecting. In reality though the router only checks the first 4 of the PIN so that is why it is easy to hack. The intruder only needs to be able to brute force a 4 digit PIN which is much easier and faster than an 8 digit PIN.

Pretty good article on it here: https://www.howtogeek.com/176124/wi-fi-protected-setup-wps-is-insecure-heres-why-you-should-disable-it/
 
Solution
Mar 16, 2018
4
0
10
thanks, excellent information.

So if someone cracked my wifi wpa pin and was creeping around my network... would I see them listed in the connected device list of my router?

If a PC has "network discovery and file sharing" turned OFF, could a hacker remotely control/view the contents of that PC?