Stupid
This is hardly a "crack" so much as a brute-force testing of common combinations of letters and numbers. Although this would well work against "password" and other short passwords, guessing the 64-hex-character WPA2 key that even the tiny, underfunded primary school I work at uses would be way, way, beyond this software. You're still looking at 512 bits of random data - that's 2^512 combinations, which is roughly 10^154, which at a billion attempts a second would still take many times longer than the age of the universe (believed to be 13.73 billion years, or 10^10-ish) to get anywhere near guessing the password.
And there's nothing you can do about this. Of course not. It's like saying there's nothing you can do against terrorist A-bombing the entire world, killing everyone and then cutting the vault door to steal your gold. This is a bogus advertisement for a password guesser, not a dire hole in WPA2 and the article should be rewritten to reflect that.
The way the article was written, you would think they had found some super-duper hole in WPA2. In actual fact, they sit and try A, then B, then AB, etc. ad infinitum... Eventually, they will hit the password that was used. Of course they will. Although this will catch out only a few people, it won't compromise anything which is already supposedly secure. And it's not new. It's not powerful. It's not effective. It's not even sensible. Using similar, better and even this exact company's software, I've yet to recover a single (modern) Word doc or zip file that I've password protected with anything more powerful than "password" after leaving the computers running for MONTHS.


