7 ms·
WPA2: Broken with KRACK. What Now?
- anti-thought 9y agoLooks like it will be another pretty branded CVE: https://www.reddit.com/r/PFSENSE/comments/76ksdi/core_protocollevel_flaw_in_wpa2_possible_impact/ https://www.reddit.com/r/PFSENSE/comments/76ksdi/core_protoc... They mention it will be at https://krackattacks.com https://krackattacks.com
- sohkamyung 9y agoPaper appears to be out [1] [1] "Predicting, Decrypting, and Abusing WPA2/802.11 Group Keys" (PDF) [ https://kryptera.se/assets/uploads/2017/10/usenix2016-wifi.pdf https://kryptera.se/assets/uploads/2017/10/usenix2016-wifi.p... ]
- gregmac 9y agoWPA2 has been around since 2004 -- it's really surprising that there's not a newer alternative developed and deployed in the last 13 years. What is around as a potential next standard? In the meantime, do we just revert to open wifi and use a VPN tunnel overtop?
- Piskvorrr 9y agoWe could. What do the remaining 99.999% of wifi users do?
- zimpenfish 9y agoTell them to use SSLEverywhere (or equivalent) and/or get them onto VPNs, I think.
- Piskvorrr 9y agoGood point - given a sane set of trusted CAs (sic!), the need for a trusted last hop mostly goes away.
- zimpenfish 9y agoI think if you're using a VPN tunnel or SSL or SSH already, then this doesn't really affect you (based on an article I read earlier today.)
- kristianp 9y agoAlready discussed at https://news.ycombinator.com/item?id=15478750 https://news.ycombinator.com/item?id=15478750
- gok 9y agoNo, that article is a less significant problem from over a year ago. This is a new issue.