Key Replacement Attack ( KRACK ) on WiFi systems

[bernardgreen]

https://www.wired.com/story/krack-wi-fi-iot-security-broken/

“For the general sphere of IoT devices, like security cameras, we’re not just underwater,” says Kevin Fu, a computer scientist at the University of Michigan who focuses on medical device security. “We’re under quicksand under water.”

What if any affect will this have on domestic wifi systems ?

 

[ban-all-sheds]

More: https://en.wikipedia.org/wiki/KRACK

https://www.theregister.co.uk/2017/10/16/wpa2_krack_attack_security_wifi_wireless/

The architecture of the WPA2 protocol is flawed, if you don't, or can't, get a patch, you are vulnerable.

From the Wikipedia article:

Some WPA2-users may counter the attack by updating Wi-Fi client and access point device software, if they have devices for which vendor patches are available. However, vendors may delay in offering a patch, or not provide patches at all in the case of many older devices.​

 

[Adam_151]

Breaking the encryption due to the session key being re-transmitted more than once...I thought we'd known about that sort of exploit for about 70 odd years....

 

[Keithmac]

Breaking the encryption due to the session key being re-transmitted more than once...I thought we'd known about that sort of exploit for about 70 odd years....

Enigma?.

 

[JohnW2]

Enigma?.

Quite. Some lessons learned are quickly forgotten!

Kind Regards, John

 

[ban-all-sheds]

Spookily I was at a talk at the BCS last night on the life of Alan Turing.