Krack is Whack!
Note that the home wireless router manufacturers are aware of this and software updates for routers are being pushed out as I type this.
Apple already fixed their part of the issue.
https://www.macrumors.com/2017/10/16/krack-wifi-vulnerabilities-patched-apple-ios-macos/
This a client problem, not a router problem. Windows 10 desktops are essentially protected already. I think MacOs is too.
It is basically a Linux (Android) problem.
https://www.engadget.com/2017/10/16/microsoft-already-has-krack-attack-wifi-fix/
“To recap: the exploit revolves around cloning a WPA2-encrypted WiFi network, impersonating its MAC address and changing the WiFi channel. Intruders can force your device to connect to this bogus network instead of the legitimate one, making it easier for them to snoop on your data traffic or perpetrate attacks that require a local network. Would-be hackers have to get within physical distance of a target network for this to succeed, but that’s potentially a huge problem for public networks.”
and the hack vector tricks the client into reinstalling a new key, allowing the communication session to be hijacked
the fix is in the OS, not the router.
Original discoverer/author’s write up: https://www.krackattacks.com
I wonder if dd-wrt is going to get patched. I am guessing you have to wait for a new build.
bookmark