ThereIsNoName
New Around Here
Back in 2011 there were reports of a security vulnerability in WPS, where an online attacker would need only 11000 guesses to gain access to any WPS enabled device.
Possible mitigations that were mentioned was to completely turn WPS off, to be able to turn off only the PIN and keep the physical button active, and to introduce an exponentially increasing time-delay between PIN guesses.
What is the status of this issue in Merlin?
1. Has ASUS done anything to address this security problem?
2. When you turn of WPS in the admin GUI, is it then really entirely turned of, and not still running in the background, which has been reported in some devices?
3. Does Merlin in any way address this issue?
4. Is it still recommended to have WPS turned off, or is it now considered safe?
///H
Possible mitigations that were mentioned was to completely turn WPS off, to be able to turn off only the PIN and keep the physical button active, and to introduce an exponentially increasing time-delay between PIN guesses.
What is the status of this issue in Merlin?
1. Has ASUS done anything to address this security problem?
2. When you turn of WPS in the admin GUI, is it then really entirely turned of, and not still running in the background, which has been reported in some devices?
3. Does Merlin in any way address this issue?
4. Is it still recommended to have WPS turned off, or is it now considered safe?
///H
