Am I the only one who’s noticing that Windows totally chokes on WPA2?
The roommate approached me the other day saying that he feared somebody was trying to crack our wireless encryption because the router kept dropping off connection. Now, there’s a thousand and one things that could explain that, but I humored him because switching to WPA2 is something I’ve been meaning to do for awhile. So, I decided to do it this morning. Figured it would be a half-hour job, at most. Made up a strong key, wired my laptop to the router so I could login to the admin for it and change the key.
Changed it to WPA2 Personal, AES+TKIP encryption.
To test, checked with my laptop - with Fedora 8 - to connect to it. Connects and authenticates without a hitch. Ping, check e-mail, etc. - full connectivity, LAN and WAN, no problem.
Went into my bedroom where my desktop is (with Windows at the moment). Found out I couldn’t connect to WPA2 networks with Windows, so I go back to the laptop and google how to get WPA2 support on Windows; seems you need a “hotfix” to get WPA2 support. No biggie - I sort of expected this anyway. Tried to download it on my Linux box to transport the .exe over to the desktop via a USB drive. No big deal, right?
Wrong! Good thing I’m not a network admin trying to upgrade several workstations to WPA2 wireless authentication after changing the wireless to WPA2. Seems this “hotfix” is “Windows Genuine [sic] Advantage [sic]” software. I needed an active connection on the Windows connection to download and install a rather small patch (the download took no more than a few seconds). The desktop is a full 30 feet or so from the wireless router, and I sure as hell wasn’t moving the desktop and all its peripherals close enough to the router to wire with standard Ethernet cable. So, to enable WPA2 support, I had to switch the encryption key back to WPA! That’s the most ridiculous thing I’ve heard since Attila died of a nosebleed.
So, I download this hotfix, install the (”Genuine [sic] Advantage [sic]”) .exe. XP at this point wants a reboot (shockingly). While that’s going on, I head back to the router and change the router to WPA2 again, and power-cycle the router for good measure. Again, the laptop with F8 has no problems connecting to the WPA2.
Finally Windows seems to connect fine to the WPA2 encryption. So, that done, I disconnect my laptop from the router and bring it back to my room. I’m about to send the hotfix .exe over to my server for longterm storage (so I don’t have to go through this again in the event of a reinstall).
Windows at this point can’t find the share on my Samba server. I open up Firefox to test some websites, and there’s no connectivity. I check to make sure the wireless hasn’t dropped off - but Windows reports the connection is “Excellent” (my laptop, through this, has not lost connectivity to the router since then). Finally, I say “screw it.” This wasn’t worth my time to continue troubleshooting. I didn’t even bother doing some pinging to see if I was getting any connectivity, but I doubt there was any. Windows was simply choking on WPA2 encryption.
So, here I sit, reverted back to WPA. I did change the key, switch to AES rather than TKIP (I understand the former is newer and better than the latter), and stop broadcasting the ESSID. Hopefully that will keep any miscreants busy for awhile - we’re pretty sure there’s a script kiddie in the neighborhood
That shouldn’t have taken me two hours to do, but after the WPA2 ring-around, that’s how long it took.
I fail to see how this Genuine Advantage bullshit that MS peddles on Windows users is in any way advantageous; I don’t know how many times I’ve been burned by it, and my MS software is all legit. Ironic how pirated MS software probably works better than “Genuine Advantage” software because you don’t need to deal with the “Genuine Advantage” BS; the people who pay for “their” “legitimate” copies of Microsoft Software are treated like children who can’t be trusted, while the pirates happily install and run whatever they damn well please. (Note that I in no way defend anybody’s claim to “intellectual property” - in fact, I’ve attacked IP plenty before as the BS it is.) DRM is so stupid in all forms.