Ofufuzawo adapeza cholakwika pamawonekedwe a Wi-Fi omwe owukira angagwiritse ntchito poyimitsa pamsewu wamagetsi opanda zingwe ngakhale WPA2 itagwiritsidwa ntchito ngati chitetezo.
Key Reinstallation Attacks, kapena Krack Attacks, amagwira ntchito kutsutsana ndi ma network onse a Wi-Fi otetezedwa ndi WPA2, ndipo mwina nthawi zina angagwiritse ntchito jakisoni ndikuwongolera deta. Kuukira kumeneku kumagwira ntchito motsutsana ndi miyezo ya WPA ndi WPA2, komanso kutsutsana ndi ma netiweki ndi ma Enterprise omwe amatsata Wi-Fi.
Njira yowukira imagwira ntchito motsutsana ndi 4-hand hand hand of the WPA2 protocol. Kugwirana uku kumachitika ngati zida zamakasitomala, tero foni yam'manja ya Android kapena laputopu, mukufuna kulowa nawo pa intaneti ya Wi-Fi.
Kugwirana chanza kumatsimikizira kutsimikizika ndikuyang'ana kiyi ya encryption yomwe imagwiritsidwa ntchito kuteteza traffic pomwe kulumikizana kukugwira.
Pezani: Microsoft lofalitsidwa upangiri momwe udawunikirira kuti udakonza vutoli pamitundu yonse yothandizidwa ndi yomwe yakhudzidwa Windows Lachiwonetsero cha October 2017 Lachiwiri.
Cholakwika chachikulu chomwe ofufuza adapeza chimakhudza chinsinsicho, ndipo chimatheka ndi "kuwongolera ndi kuyankha mauthenga okhudzana ndi manja". Mwanjira ina, wowukirayo amapusitsa wozunzidwayo kuti akhazikitsenso kiyi yomwe ikugwiritsidwa ntchito kale.
Kasitomala akajowina netiweki, amachititsa kugwirana manja kwa 4 kuti akambirane kiyi yachinsinsi yatsopano. Idzakhazikitsa kiyi mukalandira uthenga 3 wa kugwirana manja kwa 4. Kiyi ikakhazikitsidwa, idzagwiritsidwa ntchito kubisa mafelemu achizolowezi achinsinsi pogwiritsa ntchito njira yolumikizira. Komabe, chifukwa mauthenga akhoza kutayika kapena kutsitsidwa, Access Point (AP) ibweza uthenga 3 ngati sichilandira yankho loyenera monga kuvomereza. Zotsatira zake, kasitomala amatha kulandira uthenga 3 kangapo. Nthawi iliyonse ikalandira uthengawu, imabwezeranso kiyi yemweyo, kenako ikonzanso pulogalamu yowonjezera yolumikizana (nonce) ndikulandila kotsatsa komwe kogwiritsiridwa ntchito ndi chinsinsi cha protocol.
Tikuwonetsa kuti wowukira akhoza kukakamiza mabizinesi osagwiritsidwa ntchito posonkhanitsa ndikusinthitsa mauthenga a 3 a 4-hand hand hand. Pokana kukakamiza kuti musagwiritse ntchito mwanjira iyi, protocol ya encryption ikhoza kugwiridwa, mwachitsanzo, mapaketi amatha kutha, kutsindikitsidwa, ndi / kapena kupanga.
Ofufuzawo anazindikira kuti chilichonse chomwe chimasinthidwa chimatha kunena za womutsutsa.
Zizindikiro zotsatirazi za Vulnerility ndi Exposures zotsatirazi zidaperekedwa pachiwopsezo:
- CVE-2017-13077: Kubwezeretsanso kiyi ya maelekitala awiri (PTK-TK) pakugwirana manja kwa 4.
- CVE-2017-13078: Kubwezeretsanso kiyi yamagulu (GTK) pakugwirana manja kwa 4.
- CVE-2017-13079: Kubwezeretsanso kiyi ya gulu la umphumphu (IGTK) pakugwirana manja kwa 4.
- CVE-2017-13080: Kubwezeretsanso kiyi yamagulu (GTK) pamanja ndikugwirana.
- CVE-2017-13081: Kubwezeretsanso chinsinsi cha gulu la umphumphu (IGTK) pamafotokozedwe ofufuza.
- CVE-2017-13082: Kulandila Pempho Lobweretsanso Limodzi la Fast BSS (FT) lotsogolanso ndikukhazikitsanso kiyi yotsekezera ya awiri (PTK-TK) mukayikonza.
- CVE-2017-13084: Kubwezeretsanso kiyi ya STK mu kugwirana manja kwa PeerKey.
- CVE-2017-13086: kukhazikitsanso kiyi ya Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) mu kugwirana manja kwa TDLS.
- CVE-2017-13087: kukhazikitsanso kiyi yamagulu (GTK) pokonza mawonekedwe a Wireless Network Management (WNM) Sleep Mode Response.
- CVE-2017-13088: kukhazikitsanso kiyi ya gulu la umphumphu (IGTK) pokonza mawonekedwe a Wireless Network Management (WNM) Sleep Mode Response.
Pepala lofufuzira likhoza kutsitsidwa kuchokera pano (PDF), zambiri zowonjezera pazosatetezeka ndi ofufuza pa Akumenya Krack webusaiti.
Nkhani yabwino ndikuti ndiyotheka kuyendetsa nkhaniyo. Komabe, kasinthidwe ka firmware kakuyenera kumasulidwa ndi wopanga wa rauta, malo opezera kapena kasitomala. Ofufuzawo akuti chipangizo chilichonse chomwe chimagwiritsa ntchito Wi-Fi chimakhala chosavuta kuti chiziwombedwe.
Chinthu chimodzi chomwe ogwiritsa ntchito angachite ndikugwiritsa ntchito kulumikizana kwa VPN kugwiritsa ntchito chitetezo china kuti owasokoneza asamazindikire kuchuluka kwa magalimoto ngakhale angaukire chipangizocho bwinobwino. Mutha kugwiritsa ntchito kulumikizana kwa chingwe komanso ngati ndichotheka.
Chotsatira Kukonzekera Kwasintha kwa WiFi Kukumana kwapadera kumaphwanya WPA2 kufotokozera adawonekera poyamba GHacks News News.