Hello and welcome to the Wednesday, June 27th, 2018 edition of the Sansonet Storm Center's Stormcast. My name is Johannes Ulrich.

And I'm recording from Jacksonville, Florida. We got a little post script from DDA today about the XPS file that Lorna analyzed in last week's diary. Didier goes over how to use his sipdump.

p.y utility in order to gain more insight more quickly into this file type.

The reason this works is that XPS files just like so many documents are sip containers and well once you

unzip them then you can look at the components look at their file types and

gain more insight into what's going on with this document and the Wi-Fi

Alliance today published the final WPA-3 standard. This standard

will start to become in effect next year, which means that any new devices that would like to

have the Wi-Fi Alliance's logo will have to support WPA-3, just like now they have to support WPA2.

Now for the foreseeable future, of course, WPA2 will remain to be supported, so you don't

have to throw out all of your equipment at once, but starting next year, any new equipment

that you purchase hopefully will have WPA3

support build in. At this point, it's not clear if a software update can be offered to update

devices to WPA3, but I would expect for some of the more beefy, more powerful access points and such to be able to be software upgradable.

Among all the improvements, there are really sort of two things that stick out when it comes to WPA3.

First of all, they're trying to make it more difficult to launch password brute force attacks.

Because weak passwords will probably

remain to be a problem so there are more lockout algorithms in place also the key exchange got

modified so it's more difficult or impossible to actually brute force passwords offline. Another interesting improvement is the use

of opportunistic encryption. What this really means is where you currently connect to an open

access point without any encryption. If you are connecting to an open access point that supports

WPA3, there will be encryption established on

...