證實我在美國買的Tenda有這個問題. 據說所有Tenda都是根據同樣算法設置WPS PIN.
This is much simpler than brute force WPS's pin. Brute force WPS's pin takes 3 hours.
With very simple open source software, you can scan the environment, find the MAC address of wireless routers. After founding the MAC, take the 2nd half of the MAC and convert it into decimal and that will be the WPS PIN. It only takes a minute of human time.
People say that for some Cisco/Linksys router, there's no way to turn off WPS. For my Tenda wireless router, there is at least a radio button to disable the WPS. I am not sure if it is indeed turned off.
