Re: [gentoo-user] Key reinstallation attack on WPA2 - new vulnerability discovered

[Lucas Ramage]

LEDE has already patched this issue. That's what I run on my router. But
android? I doubt my phone would be getting an update if I wasn't running
lineageos.

On Thu, Oct 19, 2017 at 3:30 PM, Daniel Frey <djqfrey@×××××.com> wrote:

> On 10/19/2017 11:35 AM, Mick wrote:
>
>> In case you are not aware of this vulnerability:
>>
>> https://www.krackattacks.com/
>>
>> https://bugs.gentoo.org/634440
>>
>>
> I read this the other day. It seems that pretty much all devices are
> affected by this. I'm curious to know how many Android handsets will
> actually get fixed.
>
> Apparently if one of the client or AP is patched it is better but not
> completely fixed. So now I wonder of all those old home routers that
> probably haven't had a firmware update ever.
>
> Then what about all the crappy IoT devices which rarely update? Ugh.
>
> This is really nasty.
>
> Looks like Google is working on it, so is Apple, Microsoft, and a bunch of
> other vendors.
>
> There looks to be a patch for my UBNT AP already. I read yesterday
> Microsoft is advising people to update Windows to get the fix.
>
> Ugh, I can hear people asking me questions about this already.
>
> Having a CVE on pretty much every wifi device in existence... Wow.
>
> Dan
>
>


-- 
Regards,

[image: Visit online journal] <https://lramage94.github.io/>

*Lucas Ramage* / Software Engineer
ramage.lucas@×××××××××××.org / [phone]

*PGP Fingerprint* / Learn More <https://emailselfdefense.fsf.org/en/>
EAE7 45DF 818D 4948 DDA7 0F44 F52A 5A96 7B9B 6FB7
<https://pgp.mit.edu/pks/lookup?op=get&search=0xF52A5A967B9B6FB7>

*Visit online journal*
http://lramage94.github.io <https://lramage94.github.io/>

[image: Github]  <https://github.com/lramage94>[image: Linkedin]
<https://www.linkedin.com/in/lramage94>