• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to footer
WebSetNet

WebSetNet

Technology News

  • Technology News
    • Mobile
    • Games
  • Internet Marketing
  • System Admin
    • Windows
    • Linux
    • Mac & Apple
    • Website Scripts
      • Wordpress

Wi-Fi flaw could leave your router wide open to attack

August 5, 2020 by Martin6

There’s some bad news on the security front this morning, namely that your Wi-Fi network is at risk of being hacked thanks to a freshly uncovered vulnerability.

And unfortunately, this apparent flaw is in the WPA2 protocol, the tighter security used by most routers these days (the world has moved on from WPA, or the ancient WEP standard which is chock-full of holes).

According to Ars Technica, the exploit is called KRACK, and security researchers plan to reveal the exact details of the flaw at 13:00 today UK time (8:00 Eastern Time).

  • Check out our best VPN guide; any of the top-rated VPN services is likely to be good enough to protect yourself, even with KRACK around.

US-CERT (Computer Emergency Readiness Team) has already issued an advisory that warns: “US-CERT has become aware of several key management vulnerabilities in the four-way handshake of the Wi-Fi Protected Access II (WPA2) security protocol.

“The impact of exploiting these vulnerabilities includes decryption, packet replay, TCP connection hijacking, HTTP content injection, and others. Note that as protocol-level issues, most or all correct implementations of the standard will be affected.”

So the dangers range from simple eavesdropping to fully hijacking the connection, and misusing it to whatever ends the attacker might wish.

The exploit can apparently be leveraged in the third stage of the aforementioned four-way handshake, during which the encryption key can be resent multiple times, and the encryption subsequently undermined using a cryptographic nonce (which is short for ‘number used once’).

WPA2 woes

The practical upshot is that the vast majority of home and business WPA2 networks will be affected, with some already arguing that WPA2 is now effectively heading the same way as WEP (a short trip down redundant lane).

While some manufacturers have already patched their routers or network hardware, or are in the process of doing so, it’s likely that the response from other vendors will be worryingly sluggish (or indeed non-existent in some cases: in which case, maybe it’s time to buy a new router, perhaps on Black Friday).

All that said, it’s not clear how easy this exploit will be to leverage, and we’ll know more about that when the full revelation of the vulnerability comes later today. That will affect how likely it is that your average home user will be in danger here, as if this flaw isn’t an easy hole to open, the focus might be on juicier business networks (in other words, those worth the effort).

It’s all speculation at this point, but if you’re at all worried, you can always switch to using a VPN (so your data is encrypted anyway, in that case), or stick to HTTPS sites (which employ encryption, as opposed to plain HTTP) where possible.

Failing that, to be really safe, where possible you can use a wired Ethernet connection rather than Wi-Fi.

For further information on the response to this Wi-Fi vulnerability, and how it’s being addressed by the big tech companies including Apple, Google and Microsoft, read our follow-up story here.

Via: The Verge

Related posts:

  1. Need a VPN? Here are the absolute best services available right now
  2. Best VPN 2021: The best VPN services this year
  3. Microsoft December 2020 Patch Tuesday fixes 58 vulnerabilities
  4. VPN Protocols: What they are, How they work
  5. Best VPN 2020: The best VPNs for speed, privacy and streaming
  6. How to setup PPTP VPN on Windows 10 (Complete Guide)
  7. Best VPN services: Reviews and buying advice
  8. 8 best free VPNs for Netflix [Windows 10 & Mac users]
  9. Microsoft Windows Security Updates July 2021 overview
  10. 6 Best Vulnerability Scanning Tools and Software

Filed Under: Uncategorized

Primary Sidebar

Trending

  • How to fix Windows Update Error 80244019
  • Windows 10 Update keeps failing with error 0x8007001f – 0x20006
  • How To Change Netflix Download Location In Windows 10
  • Troubleshoot Outlook “Not implemented” Unable to Send Email Error
  • How do I enable or disable Alt Gr key on Windows 10 keyboard
  • How To Install Android App APK on Samsung Tizen OS Device
  • 3 Ways To Open PST File Without Office Outlook In Windows 10
  • FIX: Windows Update error 0x800f0986
  • How to Retrieve Deleted Messages on Snapchat
  • Latest Samsung Galaxy Note 20 leak is a spec dump revealing key features
  • Install Android 7.0 Nougat ROM on Galaxy Core 2 SM-G355H
  • 192.168.1.1 Login, Admin Page, Username, Password | Wireless Router Settings
  • Websites to Watch Movies Online – 10+ Best Websites Without SignUp/Downloading
  • How to Backup SMS Messages on Your Android Smartphone
  • How to delete a blank page at the end of a Microsoft Word document
  • Fix: The Disc Image File Is Corrupted Error In Windows 10
  • Android 11 Custom ROM List – Unofficially Update Your Android Phone!
  • Samsung Galaxy Z Fold 3 could be scheduled for June 2021, with S Pen support

Footer

Tags

Amazon amazon prime amazon prime video Apple Application software epic games Galaxy Note 20 Galaxy S22 Plus Galaxy S22 Ultra Google Sheets headphones Huawei icloud Instagram instant gaming ip address iPhone iphone 12 iphone 13 iphone 13 pro max macOS Microsoft Microsoft Edge Mobile app office 365 outlook Pixel 6 Samsung Galaxy Samsung Galaxy Book 2 Pro 360 Samsung Galaxy Tab S8 Smartphone speedtest speed test teams tiktok Twitter vpn WhatsApp whatsapp web Windows 10 Windows 11 Changes Windows 11 Release Windows 11 Update Windows Subsystem For Android Windows 11 Xiaomi

Archives

  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org