3 ms·
Am I understanding this correctly that you still need to authenticate with the router before using the exploit? If so, I thought it was already prudent to assum
by empressplay 9y ago
Am I understanding this correctly that you still need to authenticate with the router before using the exploit? If so, I thought it was already prudent to assume that unencrypted traffic (by the client) was effectively visible to everyone else connected over the same Wi-Fi base station?
Or is this a way to break the Wi-Fi password and connect without it?
- shakna 9y agoKRACK attacks the RNG, so you don't need to be authenticated before attacking, only in-range.
- lawnchair_larry 9y agoSecond one. You just need to find another device that is connected and manipulate its traffic.
- pmontra 9y agoIt's more than connecting without the password > attackers will be able to eavesdrop on nearby Wi-Fi traffic as it passes between computers and access points. It might also mean it's possible to forge Dynamic Host Configuration Protocol settings, opening the door to hacks involving users' domain name service. Basically they can see all your traffic and modify it. Your LAN becomes the Internet over an open AP and you don't know which servers you're connecting to.