Important: Security flaw found in WEP2 encryption protocol. WIFI Not Secure.

[Gromett]

Wifi should no longer be considered secure (never was to be honest). This newly discovered security flaw is serious and allows things like browser injections.

Serious flaw in WPA2 protocol lets attackers intercept passwords and much more

KRACK attack is especially bad news for Android and Linux users.

arstechnica.com

My read on it is this. Do NOT visit any sites that do not use SSL (https://). Do NOT log into any site that is not secured with SSL.

Please note that this can even affect your home wifi network as someone sitting outside in a car/van can crack your wifi and inject malicious content into your browser. However this is extremely unlikely as hackers prefer to keep a distance from their targets. This is more likely to be used on public wifi points like what you would find at McDonalds and airports.

If you stick to https:// sites you should be safe. So banking etc is safe. However if you visit an unsecured site and your browser is exploited later visits to your bank could be at risk.

Using a VPN will allow you to be a lot more secure..

I can't answer any questions on this as it is really new news and not much in the way of analysis has been done yet.

 

[34127]

I have looked at using VPN in the past but not sure which way to go about it. Any advice on here would be appreciated.

 

[Gromett]

I have looked at using VPN in the past but not sure which way to go about it. Any advice on here would be appreciated.

Sorry I can't help on that, I run my own VPN so haven't really looked at what is available in the market.

There have been threads on this subject though, might be worth a quick search for them, or start a new VPN thread in light of this news?

 

[34127]

Thanks for your reply. The problem I have is weeding through all the info available and what to believe. I will do a bit more probing on-line.

 

[Welsh girl]

I use a VPN but when switched on my phone, using it as a hotspot stops all connections so I can only use it on the receiving device,would that be considered safe?

^{_{Subscribers  do not see these advertisements}}

 

[Jim]

This is hitting the mainstream media now . http://www.telegraph.co.uk/technolo...ice-risk-unprecedented-krack-attack-security/

 

[MillieMoocher]

This is hitting the mainstream media now . http://www.telegraph.co.uk/technolo...ice-risk-unprecedented-krack-attack-security/

I just got that alert too - comes to something when Motorhome Fun is a quicker source of information than the mighty mainstream press. @Gromett post was at 6.42 so Funsters got to know before joe public.

Shows the value of the group, nice one @Gromett

 

[Gellyneck]

Further info here
https://www.krackattacks.com/

 

[Gromett]

Here is a video that explains what is happening and how.

 

[34127]

Thanks for that, great explanation.

^{_{Subscribers  do not see these advertisements}}

 

[1_man_and_his_dob(lo)]

Link