said by twizzler66:I've seen WPA2 Personal hacked in less than 3 minutes using a PSP and rainbow tables,
You of course really mean cracked.
WPA2 isn't encryption, it is the name of a document that outlines several different encryption schemes, in short it means the users used TKIP (a flawed bastard child of WEP) or CCMP (AES).
But you have pointed out a real problem with security,
PEOPLE!
Most people are too damn lazy to use a reasonable sized, random passkey, and change the SSID to something unique (thus NOT likely to be found in a pre-compiled list). Often they are the same sort of person that also writes their password and other important information on a Post-it note and the leaves it on the desk in plain sight. Uses pet names, nicknames, anniversaries, birthdays, etc. and other socially accessibly information to "secure" their lives.
Not much can be done about rainbow tables except by having hardware use random SSIDs out the box, also manufactures could implement forced length and complexity when entering or assigning keys but this requires coders and testing, and that means less profit.
As for WPS it is a back door around security, the Wi-Fi Alliance just marketed it as a way to "ease the task of setting up and configuring security on wireless local area networks".
Works both ways, for the consumer AND hacker - nice job Wi-Fi Alliance!