3 ms·
This particular attack seems difficult in practice. Reassembled fragments still need to yield a checksum-valid frame. With TLS becoming the norm most laptop/mob
by Dinux 5y ago
This particular attack seems difficult in practice. Reassembled fragments still need to yield a checksum-valid frame. With TLS becoming the norm most laptop/mobile/server communication channels will not be affected.
As mentioned in the paper, the problem is indeed that MCUs have become so cheap that every $7 light bulb is equipped with WiFi. The firmware on these devices is almost never updated after production. And even on devices that are being updated, like philips hue, it's often found that WiFi chipsets run their own firmware.
- bruce343434 5y agoWhat is an MCU?
- Dinux 5y agohttps://en.m.wikipedia.org/wiki/Microcontroller https://en.m.wikipedia.org/wiki/Microcontroller
- AnotherGoodName 5y ago>Reassembled fragments still need to yield a checksum-valid frame. For a 32bit checksum changing data will give you a 1 in 4,294,967,296 chance of being correct. So just keep bit twiddling some unimportant portion of the frame until you obtain a valid checksum. 4,294,967,296 is not a large number for a modern computer. These frame checksums are only intended for accidental bit flips. They aren't protection against someone creating fake frames with valid checksums.