WPA2 is vulnerable

[cobito]

A few hours ago, the news came out: WPA2 is no longer a secure protocol for Wifi and with WEP defenestrated years ago, home connections are left without easy-to-configure options.

Read more...

[krampak]

At a domestic level it seems to have little impact, right? Unlike the WEP vulnerability that I myself used in its day to have wifi on the laptop by being able to obtain the router's key, in this case we are talking about sniffing the traffic of a device, not obtaining the router's key, so at first glance for a profile like ours this vulnerability does not have much appeal.

[Bm4n]

@krampak from what little I have read about it is quite serious because it allows you to see and send traffic to a WPA2 wifi network. They can even access by forcing https websites to go to http and then steal passwords. It is evident that any protocol is susceptible to being breached the problem is that this is now public and a hacker can use it easily. The issue is how long it will take to fix it and update the systems, considering that there are still a large number of devices working on WEP (which is basically like not using security) imagine how long it will take to replace WPA2...

As always, internet security, that big farce. And people still don't take it seriously.

[whoololon]

According to this other news, in most environments, said vulnerability has been fixed... namely.

[Bm4n]

@whoololon pues no me deja muy tranquilo

Apple – patched in betas sent to iOS, watchOS, macOS, tvOS developers; users still to receive the update
*Amazon – currently in review process
*Belkin Linsys – currently in review process
*Dell – currently in review process
*Synology – releasing soon
*TP-Link – currently reviewing if it’s affected

[cobito]

@bm4n said in WPA2 is vulnerable:

@krampak from what little I've read about it, it's pretty serious because it allows you to see and send traffic to a WPA2 wifi network. They can even force https websites to switch to http and then steal passwords.

And here's the proof on Android/Linux:

[krampak]

I still think it doesn't have much effect at home xD