They could limit the used character set, to reduce ambiguity. So to add a randomly-generated, really random, and print that out, wouldn’t take any extra steps or hardware, just a tiny tweek. Thing is, the device requires programming to put it’s MAC address in, and requires a unique label for those details. Posted in Security Hacks, Slider, Wireless Hacks Tagged facepalm, mac address, password, tp-link, unique password, wr702n Post navigation But our devices need to be secure by default. Users should always change default passwords anyway. The obvious next step is to script a scanning routine which took care of with a one-liner: This will be unique for each device, but it is also promiscuously broadcast to any device that cares to listen. They did the next worst thing, which is to assign a password that gets broadcast publicly: the last eight characters of the MAC address. But that’s where this went off the rails. During the design phase someone had the forethought to make a WiFi AP password that isn’t merely a default. Shown in this image is the WR702N, a nice little router that’s popular in a lot of hacks due to relatively low power, low cost, and small size. They didn’t respond so he went public with the info. The exploit was published on Twitter feed after waiting a couple of weeks to hear back from TP-LINK about the discovery. It’s plain as day but might take a second to dawn on you. We don’t want to ruin the face-palming realization for you, so before clicking past the break look closely at the image above and see if you can spot the exploit. This “security” is so outrageous we had to look for hidden cameras to make sure we’re not being pranked.

Tp link wifi key generator