investorschatroom.com

Sci-tech

WiFi WPA2 Krack Attack, Flaw: Microsoft, Apple Addresses Security Flaw

Share

The vulnerabilities are exploited using key reinstallation attacks (KRACKs) that target Wi-Fi clients like laptops, smartphones, and smart home devices - any device that connects to a router using Wi-Fi, really. They could also modify intercepted traffic, injecting it with ransomware and other malware.

This attack technique bypasses established network defenses, including encryption, and works against all modern protected WiFi networks.

Kuskov explained that in order to decipher traffic, an attacker would simply need to bring his computer within range of the targeted Wi-Fi network and run special software.

The vulnerability has more to do with flawed implementation than the protocol itself. However, Ars Technica reports that Android and Linux users are more vulnerable to severe attacks than Windows or iOS users. Microsoft says that it released a security fix on October 10, so anyone on the latest version of Windows 10 will be protected.

What can a hacker have access to? Bleeping Computer posted a list of available patches and pledged to update it as new fixes appear.

"It seems to affect all Wi-Fi networks, it's a fundamental flaw in the underlying protocol, even if you've done everything right [your security] is broken", said Alan Woodward of the University of Surrey's Centre for Cyber Security. In the meantime, treat every Wi-Fi connection like it's the public network at Starbucks.

NFL Betting Odds Detroit Lions at New Orleans Saints
Kamara had 10 carries for 75 yards and four catches for 12 yards - plus a spectacular hurdle over Lions cornerback Darius Slay . Luckily for Detroit, Stafford will play with the injury and try to lead the team to its fourth win of the season.

UEFA Nations League is announced
Each league will have its own play-off competition with single-leg semi-final and final to decide who gets the final four places. Play-offs in four separate one-off mini-tournaments will find the four final participants in the competition.

Trump boasts of a higher IQ than Tillerson
Trump and Tillerson are scheduled to have lunch Tuesday at the White House with Defense Secretary Jim Mattis. Trump's tense relationship with Tillerson burst into public view last week.

The Wi-Fi Alliance, an industry group that represents hundreds of Wi-Fi technology companies, said the issue "could be resolved through a straightforward software update". "Users can expect all their Wi-Fi devices, whether patched or unpatched, to continue working well together", the statement said.

However, because this attack compromises the WPA2 protocol that both your wireless devices and wireless access point use, MAC filtering is not a particularly effective deterrent against this attack.

I don't see this becoming a major threat to most users unless and until we start seeing the availability of easy-to-use attack tools to exploit this flaw.

Moving forward, at the very least you should get ready to update your router's firmware, as it's possible your manufacturer will have a patch in the very near future.

Your password-protected Wi-Fi connection could be vulnerable to trespassing.

Share