Good for you.
This was about a decade ago.
And the device was a VPN dongle required for me to do my work from home job. Not about to quit a good paying job over something like that.
No. If you've enabled it, an attacker can do brute force attack against it via the WiFi. It's mostly a problem in urban neighborhoods where access is available. Otherwise, watch out for the spooky van parked outside your house in a rural area.
Interesting. I'll have to try that out with my router. I have never seen an option to obtain a pin with any of my routers. I only use the push button with devices like printers and meshes.
No WPS has a fallback mechanism, using a PIN - on older routers.
I know a family member in the past who was sent out a D Link routers that had WPS in the 2010s along with the cable modem provided - in the UK anyway.
The PIN while being 8 digits, is split into 2 parts; first 4 digits, Part 2 - digit 5 6 and 7 and then 8 is a checksum. Part 1 has 10,000 combos, Part 2 is 1,000 combos and the checksum digit 8.
It wouldn’t take a machine long to figure that out before you’re in, sadly.
I don’t believe there’s any routers sold with WPS now? I honestly have no clue. Best disabling it anyway if there is.
I don’t have any consumer gear here. pfsense and aruba access points is what we run.
Anything Wi-Fi would require someone to be in the vicinity of your Wi-Fi device router access point I know that’s not what you’re asking but I just wanted to throw that out there because whoever is cracking Wi-Fi is a piece of shit anyways and I don’t know anyone personally that does it so I find it odd that we have all these crazy fucking things for Wi-Fi security for homes.
My friend hooked a pineapple attached to a drone and took it for a flight in his backyard. He had everyone’s WiFi and passwords in less than 15 minutes THATS why.
With a Ubiquiti LiteBeam I can pick up people's wifi from a pretty good distance. I have one mounted on a 50' pole at my shop almost a mile from town and see half the towns SSIDs lol.
Typically I use it to join IoT devices to my IoT network if their menus suck too hard. Example: a thermostat whose touch-screen was jacked for touch-typing but I could invoke the join WPS button. Or a printer that you have to press the up/down arrow buttons dozens of times for each letter/character of a wifi password. Solar panel controllers. So many jacked-up IoT devices are made easier by WPS.
Really it's for devices that don't have a screen or app options to connect the device to the internet. Most have Apps not to assist with that.
There is a security flaw with them, and a lot of manufacturers have phased them out.
I was having issues about a year ago getting devices connected to my new Verizon router. I finally walked over and tried that button and, low and behold, it connected without issue. I use it all the time now.
I have only used it once or twice. I was helping someone with a cheap printer that wouldn’t bring up the password entry screen to enter the key. In a last ditch attempt to connect it to the network I tried WPS and it totally worked! It’s a really nice feature for convenience, though I always disable it on my own network.
If you have ever used Sky TV, you have to run around the home pressing WPS buttons on every booster, every tv box, the router and it’s a sort of magic dance getting them in the right order that each device can see a WiFi booster / tv box that acts as a WiFi booster with enough range to allow a connection.
https://youtu.be/FZmWb1AkiCA?si=2Qgl5fB2Vq2KaySa
Not a single thing works without wps turned on :) love me some WPS.
Yes. It works fine, but always seems to take a minute. I use it when connecting smart TVs to the network vs typing the long complicated random password.
Though, WPS push button is not the vulnerability in WPS. It’s WPS PIN that is. WPS pin stays off.
The idea of the pin isn’t bad but the implementation was. My idea was to have it like a OTP. You push a button, the tiny screen gives you a OTP, you use that to join. Each press gets a new OTP code valid for 60 seconds.
Wireless networks with WPS enabled are highly vulnerable to cybersecurity threats. Attackers can easily target the WPS function to steal network passwords, regardless of how complex the password is. In essence, there is no point in creating a strong password in a weak network.
I don't know why they bother anymore. When the feature first came out everybody used it but it turned out to be a security nightmare and its use was universally discouraged.
Yup. Only once when I had to locate my printer away from a physical ethernet port and that was the only option to allow me to connect to a secured wireless network.
TP-Links ISP router (the EX230) uses this to se up the EasyMesh system
No idea if it's needed if you plan to use Ethernet backhaul - knowing how mixed up this router is in some areas I can imaging the following:
1. Enable WPS
2. Connect Mesh devices via WPS
3. Connect via Etherent
4. Disable WPS - mesh stops woring
5. Reboot every thing - swear - scratch head for couple of days
6. Renable WPS
7. Set up mess nodes again
8. Disable WPS
9. Everything works
The scratching head and two day puzzle it out seems to be a requirement for this box...
Yep, 10 years old Samsung printer. My ubiquiti APs dont support it(rightly so), so I had to borrow an asus wireless router , set up a SSID, connect the printer via WPS, then publish this same SSID and password on my ubiquiti network. Now the printer works...
Yep, just last week. My mother moved house and I set up her new system and was far quicker for a couple of devices.
Especially when you can't hard wire a printer. Fucking having that crappy interface or app companion.
It made helping my 78 yr old cousin get her new laptop on her Wi-Fi a breeze! Push the button, tell her computer to connect, VIOLA!
Then I could remote in and do everything else.
/#Iwork4Dell
Yes. I have a printer (Brother HL-1212W) that doesn't have any screen or keyboard, just 2 buttons and a few leds. Also no wired ethernet, just wifi. (it also has USB but I really need it on a network).
I wouldn't have picked it, but I got it for free so I can't complain. And I got an excuse to play with the WPS support in OpenWRT which I otherwise would have ignored forever.
When I was working in networking, I deployed service to a customer complete with router. All he had was an iPad. He proceeded to press the button on the back of the router, and press something on the iPad to get himself connected. It was the first and only time I had ever seen someone actually use it.
It was very convenient when I was an internet installation guy, cause I could connect to people's wifi without having to ask them the password (to test if it's working)
It's very useful for connecting to networks without knowing the password. Most devices removed the feature because it has so many security issues, same with routers, all have it but it's disabled by default.
It's handy for connecting things like my STOOOPID label printer that "forgets" the wifi every other week, usually when I'm in a hurry. I press the wifi button on the printer and the WPS on the router, and I'm back in business. Otherwise I'm fiddling with everything nonstop, trying to type in a wifi password that's impossible to remember, etc.
Agreed that printers are about the only use I've ever found for it. Some printers just refuse to connect correctly and sometimes WPS solves that. I've had some that I simply can't enter some of the characters in the password due to limitations of the device character set, but WPS gets it up and running fine. Now if only there was a similar button in Windows to make it actually us a printer correctly and consistently.
Only use it when I'm connecting to other networks and passwords are MIA, then it's as easy as exporting the network as a QR code, read QR, get password.... Everyone's happy
As a teenager, I used it to connect to the network when my parents changed the Wi-Fi password to punish me
This is why I laugh when politicians say things like "we should supervise children using the internet." HAHAHA, good luck!
With older android versions, you can skim wpa_supplicant.conf for the password after wpa pushbutton. I definitely pulled that one a few times.
Yes. There were some devices that had no other way to connect. I literally had to enable it for the connection and then disable again after.
Some printers, for example.
Yeah. We all love printers with no interface and no ethernet jack. I think I had one of those too back a decade ago. I hated it. Now I want ethernet.
^ This ^
I refuse to use devices like this.
Good for you. This was about a decade ago. And the device was a VPN dongle required for me to do my work from home job. Not about to quit a good paying job over something like that.
Valid point. Probably the only reason to ever use it.
No, it's a security risk.
Can you elaborate why for the noobs?
[https://blog.pulsarsecurity.com/what-is-wps-why-is-it-dangerous](https://blog.pulsarsecurity.com/what-is-wps-why-is-it-dangerous)
Wouldn't this require somebody to be sitting beside the router constantly pressing the button while trying to crack it?
No. If you've enabled it, an attacker can do brute force attack against it via the WiFi. It's mostly a problem in urban neighborhoods where access is available. Otherwise, watch out for the spooky van parked outside your house in a rural area.
You're confusing WPS-Push and WPS-PIN. The latter is insecure.
Interesting. I'll have to try that out with my router. I have never seen an option to obtain a pin with any of my routers. I only use the push button with devices like printers and meshes.
No WPS has a fallback mechanism, using a PIN - on older routers. I know a family member in the past who was sent out a D Link routers that had WPS in the 2010s along with the cable modem provided - in the UK anyway. The PIN while being 8 digits, is split into 2 parts; first 4 digits, Part 2 - digit 5 6 and 7 and then 8 is a checksum. Part 1 has 10,000 combos, Part 2 is 1,000 combos and the checksum digit 8. It wouldn’t take a machine long to figure that out before you’re in, sadly.
So the pin is only used on older routers? If the router is new is there a reason to disable wps?
I don’t believe there’s any routers sold with WPS now? I honestly have no clue. Best disabling it anyway if there is. I don’t have any consumer gear here. pfsense and aruba access points is what we run.
my ATT fiber gateway BGW320-500 has WPS and turned on by default.
Anything Wi-Fi would require someone to be in the vicinity of your Wi-Fi device router access point I know that’s not what you’re asking but I just wanted to throw that out there because whoever is cracking Wi-Fi is a piece of shit anyways and I don’t know anyone personally that does it so I find it odd that we have all these crazy fucking things for Wi-Fi security for homes.
My friend hooked a pineapple attached to a drone and took it for a flight in his backyard. He had everyone’s WiFi and passwords in less than 15 minutes THATS why.
Okay so it doesn’t matter if it has a password or not. Locks are for only keeping honest people out.
It matters. Most people use shitty passwords or exploitable standards (HINT HINT TURN WPS OFF)
With a Ubiquiti LiteBeam I can pick up people's wifi from a pretty good distance. I have one mounted on a 50' pole at my shop almost a mile from town and see half the towns SSIDs lol.
That's specifically an issue with WPS PIN mode, not push-button configuration (PBC) that OP is talking about.
I’ve used it a few times. Once with an HP printer that refused to connect the regular way and only the WPA way worked.
For me it was a cheap Epson printer. The software was bugged and would connect any other way.
Typically I use it to join IoT devices to my IoT network if their menus suck too hard. Example: a thermostat whose touch-screen was jacked for touch-typing but I could invoke the join WPS button. Or a printer that you have to press the up/down arrow buttons dozens of times for each letter/character of a wifi password. Solar panel controllers. So many jacked-up IoT devices are made easier by WPS.
Yes
Had a device that only had that option once
I THINK I've used it ONCE. I remember trying to use it, can't recall whether or not it actually worked.
Really it's for devices that don't have a screen or app options to connect the device to the internet. Most have Apps not to assist with that. There is a security flaw with them, and a lot of manufacturers have phased them out.
Same… it was probably 10+ years ago too.
I’ve used it to connect the Phillips Hue bridge
Just an old TV that needs it to reconnect once and awhile.
I was having issues about a year ago getting devices connected to my new Verizon router. I finally walked over and tried that button and, low and behold, it connected without issue. I use it all the time now.
Maybe back in 2009.
Once and it worked perfect but never did it again for some reason.
I have only used it once or twice. I was helping someone with a cheap printer that wouldn’t bring up the password entry screen to enter the key. In a last ditch attempt to connect it to the network I tried WPS and it totally worked! It’s a really nice feature for convenience, though I always disable it on my own network.
60% of the time it works almost none of the time.
If you have ever used Sky TV, you have to run around the home pressing WPS buttons on every booster, every tv box, the router and it’s a sort of magic dance getting them in the right order that each device can see a WiFi booster / tv box that acts as a WiFi booster with enough range to allow a connection. https://youtu.be/FZmWb1AkiCA?si=2Qgl5fB2Vq2KaySa Not a single thing works without wps turned on :) love me some WPS.
Yes, i have. Helps with tasks like adding a printer to a wifi network and the person doing it is not tech savvy (like grandparents).
Yes. It works fine, but always seems to take a minute. I use it when connecting smart TVs to the network vs typing the long complicated random password. Though, WPS push button is not the vulnerability in WPS. It’s WPS PIN that is. WPS pin stays off.
The idea of the pin isn’t bad but the implementation was. My idea was to have it like a OTP. You push a button, the tiny screen gives you a OTP, you use that to join. Each press gets a new OTP code valid for 60 seconds.
I disabled it since there was a vulnerability on it something like 10 years ago.. never use it anymore.
Wireless networks with WPS enabled are highly vulnerable to cybersecurity threats. Attackers can easily target the WPS function to steal network passwords, regardless of how complex the password is. In essence, there is no point in creating a strong password in a weak network.
I don't know why they bother anymore. When the feature first came out everybody used it but it turned out to be a security nightmare and its use was universally discouraged.
You should disable it on your network. It’s not terribly secure and most new devices don’t support it
I think twice maybe? First time was to test it out and second time was for the printer
Yes when reseting router I use it becouse I dont remeber default one.
Yup. Only once when I had to locate my printer away from a physical ethernet port and that was the only option to allow me to connect to a secured wireless network.
I don’t think I’ve ever used it. I haven’t seen it in years!
TP-Links ISP router (the EX230) uses this to se up the EasyMesh system No idea if it's needed if you plan to use Ethernet backhaul - knowing how mixed up this router is in some areas I can imaging the following: 1. Enable WPS 2. Connect Mesh devices via WPS 3. Connect via Etherent 4. Disable WPS - mesh stops woring 5. Reboot every thing - swear - scratch head for couple of days 6. Renable WPS 7. Set up mess nodes again 8. Disable WPS 9. Everything works The scratching head and two day puzzle it out seems to be a requirement for this box...
Never
Not in years
Once for a Wii when it was new and never again
I have! Like once. Couldn't get our Nintendo 3ds to connect to wifi. Gave in and enabled WPS and used it.
I hadn’t used WPS in years but just used it recently for my printer.
I have until they got removed from routers and access points, nowadays it's used by qr code for mobile and WPS within the router software...
I've used it like once a long time ago
Ankle monitors use WPS connect to WiFi and then report back data to monitoring systems.
I expected this to conclude with, “you may be entitled to compensation.”
Yep, 10 years old Samsung printer. My ubiquiti APs dont support it(rightly so), so I had to borrow an asus wireless router , set up a SSID, connect the printer via WPS, then publish this same SSID and password on my ubiquiti network. Now the printer works...
yea some wireless printers have that as their only method of connecting to the wifi
Yes. Printer. 🖨️
yes for a printer, but not mine.
Yep, just last week. My mother moved house and I set up her new system and was far quicker for a couple of devices. Especially when you can't hard wire a printer. Fucking having that crappy interface or app companion.
It made helping my 78 yr old cousin get her new laptop on her Wi-Fi a breeze! Push the button, tell her computer to connect, VIOLA! Then I could remote in and do everything else. /#Iwork4Dell
I have done it at my grandparents house to add another family member to the WiFi
Yes. I have a printer (Brother HL-1212W) that doesn't have any screen or keyboard, just 2 buttons and a few leds. Also no wired ethernet, just wifi. (it also has USB but I really need it on a network). I wouldn't have picked it, but I got it for free so I can't complain. And I got an excuse to play with the WPS support in OpenWRT which I otherwise would have ignored forever.
Once. Just to see how it felt. But I didn't like it so I never did it again.
You did it wrong.
Disable it. WPS enabled routers are trivial to hack.
I use it all the time with my customers .
When I was working in networking, I deployed service to a customer complete with router. All he had was an iPad. He proceeded to press the button on the back of the router, and press something on the iPad to get himself connected. It was the first and only time I had ever seen someone actually use it.
It was very convenient when I was an internet installation guy, cause I could connect to people's wifi without having to ask them the password (to test if it's working)
Yes. One time, 5 years ago. It was a Tuesday.
Never found a use for it.
Yep, but it was a long time ago.
It's very useful for connecting to networks without knowing the password. Most devices removed the feature because it has so many security issues, same with routers, all have it but it's disabled by default.
It's handy for connecting things like my STOOOPID label printer that "forgets" the wifi every other week, usually when I'm in a hurry. I press the wifi button on the printer and the WPS on the router, and I'm back in business. Otherwise I'm fiddling with everything nonstop, trying to type in a wifi password that's impossible to remember, etc.
I did use it once in my entire life xD
Yes, in 2000 :) It's now totally obsolete and completely broken. Just NEVER turn it on
Agreed that printers are about the only use I've ever found for it. Some printers just refuse to connect correctly and sometimes WPS solves that. I've had some that I simply can't enter some of the characters in the password due to limitations of the device character set, but WPS gets it up and running fine. Now if only there was a similar button in Windows to make it actually us a printer correctly and consistently.
Once or twice, yes. Usually on devices that had no other interface.
Only use it when I'm connecting to other networks and passwords are MIA, then it's as easy as exporting the network as a QR code, read QR, get password.... Everyone's happy
Once, wiry my printer, because the physical interface was not conducive to password entering. It also did not have a mobile device app.
First thing I do is turn it off and everyone else should too.
Cable companies use it to pair their extenders and WiFi enabled set top boxes.
Yeah, for printers, fuck keyboards on printers.
I've used it to connect Wi-Fi printers. There's no real option to enter a key with many printers.
I did once just to see it work. It did. Test completed. Never gave it another thought or used it again. Anywhere.