38 ms·

Do we now need WPA3? No, luckily implementations can be patched in a backwards-compatible manner.

• s17tnet 9y ago
  The problem is that tons and tons of devices will not receive update until they die.
  • StavrosK 9y ago
    Don't you only need to patch one end of the communication? Eg if phones are patched, they're safe, even if the AP is not. Then again, I didn't read the attack fully, this might be a client-only problem.
    • Khoth 9y ago
      Tons of phones won't be patched. Android phones generally only get system updates for a small portion of their lifespan.
  • pnutjam 9y ago
    You can mitigate with a vpn.
    • 0xfeba 9y ago
      How do I install a VPN on my IoT lightbulbs?
      • pcunite 9y ago
        My understanding is that only the light bulb's traffic will become decrypted. If you see it go from blue to red, without your consent, then you'll know. Otherwise, the Wifi password is still safe.
• r1ch 9y ago
  It's a pity this didn't completely break WPA2 like how WEP was broken, now it will be years before there's any new security developments. Things like management frame authentication and dynamic client keys for open networks would be big improvements for the majority of use cases.
• akerro 9y ago
  How many BT and Virgin home routers will be patched? Somewhere around 0?
  • dan1234 9y ago
    Both Virgin & BT force upgrade consumer routers overnight.
    • Sephiroth87 9y ago
      Latest Virgin upgrade was a year ago, so I'm not holding my breath...
      • dan1234 9y ago
        Mine last updated a couple of months ago, around the end of August. (V2.01.12, superhub2ac)