Re: [gentoo-user] Key reinstallation attack on WPA2 - new vulnerability discovered

2017-10-19 Thread Lucas Ramage 
LEDE has already patched this issue. That's what I run on my router. But
android? I doubt my phone would be getting an update if I wasn't running
lineageos.

On Thu, Oct 19, 2017 at 3:30 PM, Daniel Frey  wrote:

> On 10/19/2017 11:35 AM, Mick wrote:
>
>> In case you are not aware of this vulnerability:
>>
>> https://www.krackattacks.com/
>>
>> https://bugs.gentoo.org/634440
>>
>>
> I read this the other day. It seems that pretty much all devices are
> affected by this. I'm curious to know how many Android handsets will
> actually get fixed.
>
> Apparently if one of the client or AP is patched it is better but not
> completely fixed. So now I wonder of all those old home routers that
> probably haven't had a firmware update ever.
>
> Then what about all the crappy IoT devices which rarely update? Ugh.
>
> This is really nasty.
>
> Looks like Google is working on it, so is Apple, Microsoft, and a bunch of
> other vendors.
>
> There looks to be a patch for my UBNT AP already. I read yesterday
> Microsoft is advising people to update Windows to get the fix.
>
> Ugh, I can hear people asking me questions about this already.
>
> Having a CVE on pretty much every wifi device in existence... Wow.
>
> Dan
>
>


-- 
Regards,

[image: Visit online journal] 

*Lucas Ramage* / Software Engineer
ramage.lu...@openmailbox.org / (941) 404-6794

*PGP Fingerprint* / Learn More 
EAE7 45DF 818D 4948 DDA7 0F44 F52A 5A96 7B9B 6FB7


*Visit online journal*
http://lramage94.github.io 

[image: Github]  [image: Linkedin]

Re: [gentoo-user] Key reinstallation attack on WPA2 - new vulnerability discovered

2017-10-19 Thread Daniel Frey 

On 10/19/2017 11:35 AM, Mick wrote:

In case you are not aware of this vulnerability:

https://www.krackattacks.com/

https://bugs.gentoo.org/634440



I read this the other day. It seems that pretty much all devices are 
affected by this. I'm curious to know how many Android handsets will 
actually get fixed.


Apparently if one of the client or AP is patched it is better but not 
completely fixed. So now I wonder of all those old home routers that 
probably haven't had a firmware update ever.


Then what about all the crappy IoT devices which rarely update? Ugh.

This is really nasty.

Looks like Google is working on it, so is Apple, Microsoft, and a bunch 
of other vendors.


There looks to be a patch for my UBNT AP already. I read yesterday 
Microsoft is advising people to update Windows to get the fix.


Ugh, I can hear people asking me questions about this already.

Having a CVE on pretty much every wifi device in existence... Wow.

Dan

[gentoo-user] Key reinstallation attack on WPA2 - new vulnerability discovered

2017-10-19 Thread Mick 
In case you are not aware of this vulnerability:

https://www.krackattacks.com/

https://bugs.gentoo.org/634440

-- 
Regards,
Mick

signature.asc
Description: This is a digitally signed message part.