Beer-Talk #27 in Zurich: WiFi Open to WPA3

WiFi is omnipresent, but the networks often have weaknesses. Does the WPA3 standard provide additional defenses? We will show you whether the WiFi networks will become secure at the next Beer-Talk in Zurich on February 28, 2019.

The Beer-Talk is divided in a technical presentation of about 45 minutes followed by discussions over a light meal. The participation is free but a registration is required.



Wireless networks have become indispensable in today's world. WiFi is almost ubiquitous and is used daily at home, on the road and at work.

There have also been cases in Switzerland where attempts have been made to exploit vulnerabilities in WiFi networks and to bypass security measures for the purpose of espionage and sabotage.

The WPA3 standard announced last year is intended to remedy known weaknesses. It introduces new approaches to encryption and authentication such as OWE (Opportunistic Wireless Encryption) and SAE (Simultaneous Authentication of Equals).

In this Beer-Talk our security analyst Felix Sieges will show the development of WiFi standards and discuss their security. From an offensive perspective, he will discuss the possibilities of attacking these standards.

After discussing current attack methods and their potential impact on the security of WiFi networks, Felix Sieges will explain options to better protect WiFi networks and its users.



Felix Sieges is a passionate IT security enthusiast, especially interested in networks and OpenSource software. Since January 2018 he has been working as an IT Security Analyst in the Compass team.



Thursday, February 28, 2019, start at 6 pm
Compass Security Schweiz AG, Weststrasse 50, 8003 Zürich



Come by, enjoy the talk and a snack.

Please register with your first name, surname and enterprise name with the subject "Zurich" at an.

Deadline for registration is Tuesday, February 26, 2019, 12 am



Vulnerability in mod_auth_openidc module

Mischa Bachmann has identified a reflected cross site scripting (XSS) vulnerability in the mod_auth_openidc module for the Apache 2.x HTTP server. Read more

Compass Security supervises scientific work

Compass Security volunteers as supervisor for academic work and studies relating to information security. Read more

Vulnerability in the Siemens SICAM A8000 Series web interface

Emanuel Duss and Nicolas Heiniger have identified an XXE vulnerability in the web interface of the Siemens SICAM A8000 Series. Read more


Compass Security Blog

XSS worm – A creative use of web application vulnerability

In my free time, I like to do some bug bounty hunting. For some reasons, I’ve been doing this almost exclusively for Swisscom. One of the reason is that the scope is very broad and I like to have this... mehr

Substitutable Message Service

Have you ever said something and later regretted it? Or written an email to someone and then wished it had not happened? Or sent an SMS message but afterward desired to change its content? Well,... mehr