KRACK Wi-fi hack

gaelic123
Member

Posts: 109

KRACK Wi-fi hack Oct 16, 2017 11:31:01 GMT -5

Quote

Post by gaelic123 on Oct 16, 2017 11:31:01 GMT -5

Looking for advice.

I've heard that there is a Wi-fi vulnerability. From what I've heard Microsoft has issued an update, but I'm wondering if I should be doing anything to protect my router. I'm not technologically proficient enough to figure out if there's a way to update the router.

I tried going online to Linksys for support, but I didn't see anything that I would be able to understand. In the past, I've screwed thing up by trying to fix something beyond my ability, and so I 'm just looking for advice and possible assurance.

Thanks in advance,
Mary

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

KRACK Wi-fi hack Oct 16, 2017 12:04:45 GMT -5

Quote

Post by jholland1964 on Oct 16, 2017 12:04:45 GMT -5

You are correct. Presume you have read this article:

www.wired.com/story/krack-wi-fi-wpa2-vulnerability/amp

Several things of note in there:

An attacker needs to be physically in range of a particular Wi-Fi network to carry out the assaults, an important limitation.

To prevent the attack, users must update affected products as soon as security updates become available,

There's some good news: Most current versions of iOS and Windows aren't vulnerable, or are only vulnerable in one niche circumstance, because of the way Apple and Microsoft implemented the WPA2 standard to prevent resends of the third handshake message.

The best thing you can do to protect yourself is to install updates for as many of your devices as possible as soon as they come out, and make sure you only share sensitive data on sites that use HTTPS encryption. For large institutions, the key is architecting networks with multiple layers of protection, so data security doesn't hinge on any one standard.

I have checked on the Linksys site and since this is brand new today they can only say they "are aware of this and working on it."

The same answer from ALL router makers. Don't panic.

Please note all of what is said in the article above. As long as you have your router configured correctly and safely there is nothing else you can do. When the router mfgr's create an update or a patch then you should get it.

Also note what is said again:

An attacker needs to be physically in range of a particular Wi-Fi network to carry out the assaults, an important limitation.

Don't panic. I certainly am not panicked. My router is set up correctly and securely and that is all I can do. That is all you can do also.
I repeat, at this point there is NOTHING you can do so don't believe or try and quick or "for sure" fixes you may see online, those are not to be trusted. All we can do is WAIT.

Last Edit: Oct 16, 2017 12:06:46 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

gaelic123 Member Posts: 109	KRACK Wi-fi hack Oct 16, 2017 12:24:35 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by gaelic123 on Oct 16, 2017 12:24:35 GMT -5 Judy- Thanks so much for your reply. As I said, I've screwed thing up in the past by trying to fix something. I really appreciate the support. Thanks again, Mary

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	KRACK Wi-fi hack Oct 16, 2017 12:43:41 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Oct 16, 2017 12:43:41 GMT -5 You're so welcome Mary. Happy to give the support and remember we are all here for anyone needing help. Judy
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

KRACK Wi-fi hack Oct 16, 2017 14:34:51 GMT -5

Quote

Post by jholland1964 on Oct 16, 2017 14:34:51 GMT -5

More information: Oct 16, 2017, 2:59pm EDT

The Good News and Bad News

THE GOOD NEWS: IT’S HARD FOR HACKERS TO EXPLOIT

The good news is Krack is a wide but shallow bug: nearly every device that uses Wi-Fi is vulnerable, but the attack itself is difficult to execute and not as damaging as you might expect. Taking advantage of this bug would take a lot of preparation and a very specific target, which is very good news in the short term...an attacker would have to be within Wi-Fi range to carry out any of those exploits, which dramatically reduces the risk that an average person will be targeted. Unlike server-side bugs like Heartbleed or Shellshock, there’s no way to carry out the attack over the internet at large. Hackers need to be physically present in range of a network

The upshot of all of that is you probably don’t have to worry about hackers going after your network specifically. Still, we encrypt Wi-Fi signals for a reason, so you will want to patch your software as soon as you can.

THE BAD NEWS: PATCHES AREN’T HERE YET

Unfortunately, many vendors are still putting together patches for the bug, so updating immediately won’t be an option for everyone.

Because WPA2 is so widespread, researchers predict that nearly every device that uses Wi-Fi will be vulnerable in some way. That starts with computers and phones, but also your router and any other device that plays a part in your home Wi-Fi network.

The most important devices to patch are the ones you use most often: your computer and your phone. Those would be the center of any attack, and locking them down will prevent the most severe damage from the bug. Microsoft is currently deploying a Windows patch, and Apple says that a patch for the bug is currently deployed in the beta versions of iOS, macOS, watchOS and tvOS. (The patch is expected to go public in the coming weeks.) Android phones will probably be the hardest to patch: the ecosystem is notoriously slow to deploy patches, and because of a specific implementation issue, more than a third of Android phones are vulnerable to a simpler form of the attack. Google has promised to deploy an Android patch in the coming weeks, but it may be some time before that patch will reach non-Pixel devices. Even if your router isn’t patched, patching the device should be enough to stop an attacker from getting in the middle.

Be sure to read this link below that also was noted in quote above.

Microsoft has already fixed the Wi-Fi attack vulnerability

Last Edit: Oct 16, 2017 14:49:19 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

Admin

Post by gaelic123 on Oct 16, 2017 11:31:01 GMT -5

Post by jholland1964 on Oct 16, 2017 12:04:45 GMT -5

Post by gaelic123 on Oct 16, 2017 12:24:35 GMT -5

Post by jholland1964 on Oct 16, 2017 12:43:41 GMT -5

Post by jholland1964 on Oct 16, 2017 14:34:51 GMT -5