Windows 10: New paper reveal serious weaknesses discovered in WPA2 protocol

Read more: KRACK Attacks: Breaking WPA2

Microsoft will be first to release patch: www.neowin.net | microsoft-already-has-a-fix-for-the-wpa2-vulnerability

:)

 

Can't Install Photos app from Windows Store

Had to take computer to repair technician . After some work he discovered a flaw in the Windows 10 OS that was not revealed with such things as File Checker or the various troubleshooter apps. System was re-installed and technician was able to get the
app running. Another example of weakness in Microsoft implementation of Windows 10.

 

E55 & WiFi password

Turn off WPA2 only mode on the E55 and don't use WEP. It's a weak encryption.

 

Thanks for the heads up on that @AndreTen.

 

Just be prepared to update router's and card's firmwares, when they show up.

 

Actually, we get loads of these scares.

To me, it is irresponsible journalism to publicise it in such a manner, as it becomes a self fulfilling prophecy.

A couple of years ago, one of new UK newspapers publicised "new flash mob craze" concerning the authorities. As a result, flash mobs exploded in number!

There is no evidence as far as I can tell, the weakness has been hacked yet, but now the hackers know, and know where to look......

A more responsible article would say "Experts have identified a weakness and whilst we cannot provide details for security puposes, we have let appropriate authorities know. In meantime we recommend you do X,Y,Z etc."

Of course, journalists never care about the fallout from their articles, so long as they sell papers, or get advertising revenue from extra clicks etc.

This is one of those stories that is going to get blown out of all proportion.

 

This is authors own discovery... and he's hiding some crucial details for now, as far as I'm understanding it.

There is no attack in the wild atm, so equipment manufacturers do have some time to develop solutions. And he is not selling new equipment, because new solutions are also affected by this (it's in the way protocol works at the time of signing into network)

 

So apart from creating a scare, why did he feel need to publicise it now, rather than responsibly telling authorities?

Was it altruism, or oh let me think - £££'s for article - LOL.

 

Guessing is not productive here... But, there are good reasons I can imagine. (and what is wrong with $$$ - world is running on it).
If he publish a paper (it is research work), I guess he is academic and publishing is part of his life (cruel too).

It is good he revealed this vulnerability, no matter how much you or anybody else don't like it. Otherwise, once it's known (and someone would get to it), bad guy would find out and we won't...

 

Looks like first patches will be OS related.

neowin.net | microsoft-already-has-a-fix-for-the-wpa2-vulnerability?

 

Here is every patch for KRACK Wi-Fi attack available right now | ZDNet

 

Has anyone actually received any security KBs from MS yet today? I've checked, just did, and nothing.

EDIT: It was included in the Oct 10th Security Patch Tuesday updates.

 

What about ISP provider modems like AT&T, Spectrum, Comcast?

 

And these patches also answer the question, if author of original paper noticed software (and hardware) companies before publishing...