Board 8 > wifi is kinda fucked

(+) Yeah! (+)

https://www.krackattacks.com

basically, the wpa2 protocol is completely broken with new exploits
---

I heard about some of the technical stuff from this, but as a normie I have no idea what any of it really means.
---

Holy shit this is kind of a big deal

And I avoid using wifi wherever possible.
---

So how do Wi-Fi users check themselves to see if they've been affected?
---

just fuck my shit up fam

(this is apparently not a big deal for your home networks, but public ones are not going to be in great shape)
---

HaRRicH posted...

So how do Wi-Fi users check themselves to see if they've been affected?

My understanding is that unless the attacker brazenly replaces things that you notice, it could be very difficult (if not impossible? My networking skills aren't up to snuff) to tell.

That said
The Mana Sword posted...

(this is apparently not a big deal for your home networks, but public ones are not going to be in great shape)

This is going to be true just because public networks are so much more lucrative in the average case. My advice would be to avoid using them outright, or at least only use them for static content (no logging in, no using if you're already logged in, no sending personal info, etc)
---

Bumping for visibility
---

Regaro posted...

no using if you're already logged in

Wait why does this matter? Don't most websites store your login information as some kind of cookie rather than by using the actual data you used to login?

But either way yeah I've been avoiding using Wifi of any sort since this news broke, though I agree home networks probably aren't at too high a risk level all things considered.
---

HaRRicH posted...

So how do Wi-Fi users check themselves to see if they've been affected?

There might be a detection tool that monitors your nonce, but I dont think theres a simple way to check at this time.

Id recommend using a VPN tunnel until WPA2 gets universally updated somehow?
---

pyresword posted...

Wait why does this matter? Don't most websites store your login information as some kind of cookie rather than by using the actual data you used to login?

Cookies are stored in the browser and sent to the site on demand. Therefore, if you're a victim of this kind of attack, the attacker can read and copy your cookie in transit and use it directly, bypassing the need to log in.
---

See, this is why we can't have nice things.
---