Microsoft shuts down Krack with sneaky Windows update (WPA2 Wifi vulnerability update)

ComputerWorld ^ | Oct 16, 2017 | Gregg Keizer

[dayglored]

The company last week quietly patched vulnerabilities in the WPA2 protocol used to secure wireless networks, but did not reveal the fix until today.

Microsoft today revealed that it quietly patched Windows last week against vulnerabilities in the Wi-Fi Protected Access II (WPA2) protocol used to secure wireless networks.

Details of the security update were only published Monday to Microsoft's Security Update Guide, the catalog-like portal that earlier this year replaced the decades-old practice of delivering explanatory bulletins.

All supported versions of Windows received the update, according to the catalog listing, including Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012 and Windows Server 2016.

...

[dayglored]

Great news!

[dayglored]

Windows is patched for Krack -- so DO YOUR UPDATES! ... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

[dayglored]

Unless of course you prefer your Windows sans updates. To each their own.

[867V309]

Unless of course you prefer your Windows sans updates. To each their own.

that would be me.

If anyone knows which update is the fix, I'd appreciate it.

[dayglored]

> If anyone knows which update is the fix, I'd appreciate it.

Got me. When they started rolling up all the updates into a monthly single package, I gave up keeping score. Maybe another FReeper knows.

[SunkenCiv]

Thanks dayglored.

• Every Wi-Fi network at risk of unprecedented 'Krack' hacking attack
• Severe WiFi security flaw puts millions of devices at risk (WPA2 cracked, but there's a patch)

[bitt]

Windows is patched for Krack — so DO YOUR UPDATES! ... PING!

[sagar]

Windows is a giant malware with an OS.

[JustaTech]

To find the update for your version of Windows, click on the “catalog listing” link in the excerpt and scroll down to the table of Affected Products.

[867V309]

Thanks!

[hsmomx3]

I would like to know this myself. My computer has already updated but still would like to know which update this was.

Also, what if your router is connected to an older version of Windows OS that no longer receives updates but the laptop which receives the WI FI signal is a WIN 10 OS, does this still mean, the newer computer is safe?

Hope that makes sense????

[867V309]

Hope that makes sense????

Makes perfect sense.

Unfortunately, some articles say the computer OS needs patching, and some say the router needs a firmware update. I think this issue is serious, but not critical right now. If you use Android on a public wifi you might be more vulnerable, but if you use public wifi Krack is the least of your worries.

[trebb]

I guess some would prefer they broadcast the vulnerabilities - I prefer the quiet fix with notification after the fact...

[jurroppi1]

The best way to make sure you are secured against this threat is to update the client (the computer you use). It may also be wise to see if there is a firmware update for your router also, but patching the client side system will take care of the issue.

[UB355]

you are seriously out of it, W10 updates come daily

[dayglored]

> you are seriously out of it, W10 updates come daily

I run Win7.

I won’t be “out of it” until Jan 2020. :-)

[Fresh Wind]

Why do they call the update “sneaky”?

Microsoft became aware of the problem and fixed it. As you said, people who refuse to do the critical updates do so at their own risk.

This sounds like the old “Microsoft can do nothing right, and Apple can do nothing wrong” attitude.

Yes, Apple fixed the problem as well. Are they calling Apple “sneaky” too?

[dayglored]

> Why do they call the update “sneaky”? Microsoft became aware of the problem and fixed it. As you said, people who refuse to do the critical updates do so at their own risk.

I dunno. Might just be a snarky headline writer. By this point, everybody knows that Microsoft slides updates into Windows 10 systems without announcing them. It's one reason I'm sticking with Win7 for now.

> This sounds like the old “Microsoft can do nothing right, and Apple can do nothing wrong” attitude. Yes, Apple fixed the problem as well. Are they calling Apple “sneaky” too?

Neither the article nor the author said anything about Apple. These days, Windows gets more flak from Linux users than Apple users, judging by the comments on the FR threads anyway.

Any in any event, there are probably 10 times more disgruntled Windows users who trash Microsoft, than there are Mac users in total. :-)

[Gennie]

More info - KRACK Attack – WPA2 Vulnerability – What You Need To Know

[hsmomx3]

I have WIN 10 and received two updates today which took about two hours total.

One was a Flash update and the other was a Windows Update 1709.

Seems my internet is a little slower now. I use FireFox and I will have to see why this is.