![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/10\/rsz_photographer-1927657_640.jpg\")
Security researchers have found a new critical security flaw dubbed \u201cKrack\u201d (Key Reinstallation Attacks) that affects literally every WiFi router and smart phone in use today. The reason? The security flaw resides in the WiFi standard itself, rather than in a third-party product.<\/p>\n
In addition to being vast in scope and scale, Krack is a particularly nasty, versatile flaw, allowing hackers to intercept credit card numbers, passwords, photos and a whole host of sensitive personal information.<\/p>\n
It works like this: A hacker finds a vulnerable WPA2 network, and then makes an exact copy of it, including impersonating the MAC address. This clone then serves as a \u201cman in the middle\u201d allowing the hacker who controls it to intercept everything passing through it.<\/p>\n
WPA2 encryption requires a unique key to encrypt each block of plain text, but because Krack attacks make a copy that\u2019s indistinguishable from the original, they\u2019re able to use the same encryption key.<\/p>\n
As bad as that is, it gets worse for Android and Linux users. Thanks to a bug in the WPA2 standard, these devices don\u2019t force the client to demand a unique encryption key with each use. Instead, they allow the key to be \u201czeroed out,\u201d literally creating an encryption key containing all zeroes, which interferes with a key part of the handshake process.<\/p>\n
In addition to that, hackers can deploy specialized scripts that can cause the connection to bypass HTTPS, which leaves passwords and other normally protected data exposed.<\/p>\n
If there\u2019s a silver lining, it is that the attack can\u2019t be used to target routers directly, but honestly, that\u2019s not much of a silver lining, because the potential damage this new vector could cause is virtually without limit.<\/p>\n
Unfortunately, until a patch is released, there\u2019s not much you can do, short of turning off WiFi altogether. This may work for smartphone users, but it is simply impractical for routers.<\/p>\n
There\u2019s some good news, though. The fix should be relatively easy to implement, although no ETA has been given at this point.<\/p>\n","protected":false},"excerpt":{"rendered":"
Security researchers have found a new critical security flaw dubbed \u201cKrack\u201d (Key Reinstallation Attacks) that affects literally every WiFi router and smart phone in use today. The reason? The security flaw resides in the WiFi standard itself, rather than in a third-party product. In addition to being vast in scope and scale, Krack is a […]<\/p>\n","protected":false},"author":5,"featured_media":30095,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30],"yoast_head":"\n