Severe flaw in WPA2 protocol

[PowerEngineer]

Severe flaw in WPA2 protocol leaves Wi-Fi traffic open to eavesdropping. KRACK attack allows other nasties, including connection hijacking and malicious injection.

https://arstechnica.com/information...l-leaves-wi-fi-traffic-open-to-eavesdropping/

 

[Chiefcrowe]

This is pretty major!!

I was unclear though, have there already been patches released for Windows and Mac?

 

[sourceninja]

...

 

[corkyg]

I have always considered wi-fi to be an open book. Here's another good article:

https://www.nbcnews.com/tech/tech-n...nnection-risk-n811001?cid=public-rss_20171016

 

[sourceninja]

...

 

[Chiefcrowe]

Yes, according to this MS already released the patch:

https://www.theverge.com/2017/10/16/16481818/wi-fi-attack-response-security-patches

 

[urvile]

The last place I worked didn't use WPA or any other wifi encryption. The AP was open but you could only connect to their network via a VPN using IPsec.So you had to be on the domain and you also had to have a token. In my general experience businesses that are serious about their security have never trusted WEP, WPA etc.

They know that given those encryption schemes track records of being exploited. It's likely more exploitable flaws would be found.

 

[TheRyuu]

Just keep in mind with this flaw ALL DEVICES NEED AN UPDATE[1]. Just updating your router doesn't do it (and may in fact not even need an update). For example if you're using an extender or client bridge you will need to patch (e.g. AP <-> AP). This is mainly a client side problem so make sure to grab the latest updates to your devices (phone, etc) when they become available.

It appears there are no ways to mitigate this. You can disable roaming and client services to maybe help a little but WPA on unpatched devices is fundamentally broken.

Here[2] is a link to a reddit thread documenting what has been patched (the subre. It appears as of writing Microsoft deployed the fix on patch Tuesday (10/10/17) and iOS has a fix in the latest betas.

[1] https://www.krackattacks.com/ (this is the original source)
[2] https://www.reddit.com/r/KRaCK/comments/76pjf8/krack_megathread_check_back_often_for_updated/

 

[urvile]

BTW. Thanks for making the effort to post the info guys. It is appreciated.

 

[John Connor]

I have always considered wi-fi to be an open book. Here's another good article:

https://www.nbcnews.com/tech/tech-n...nnection-risk-n811001?cid=public-rss_20171016

If it travels through the air it can be captured, analyzed, and disseminated.

 

[sdifox]

PFSense 2.4.1 patched KRACK. Not that it helps the wifi clients.