Tech & Science Virtually every WiFi router affected by WPA2 security flaw

15:57  16 october  2017
15:57  16 october  2017 Source:   Engadget

Google balloons to help restore Puerto Rico's cell networks

  Google balloons to help restore Puerto Rico's cell networks Google's parent company is set to launch balloons into the Caribbean skies in an attempt to restore telephone networks in hurricane-ravaged Puerto Rico. Alphabet Inc., which controls Google, obtained authorization from the US Federal Communications Commission (FCC) to deploy the devices -- developed from 2013 as part of a project known as "Loon.

For other devices, like those running MacOS, Windows, OpenBSD and other operating systems are affected to a lesser extent. In this article: Flaw , gear, internet, KrackAttack, Routers , security , Vulnerability, WiFi , WPA 2 .

Curry will return for season two , which runs for six weeks starting on November 4th at 9pm. The first and final instalments will be request shows, while the middle four explore themes such as love, quests, and the best video game music of 2017. 16m ago in. Security .

  Virtually every WiFi router affected by WPA2 security flaw © Provided by Engadget UK

Researchers have discovered a key flaw in the WPA2 WiFi encryption protocol that could allow hackers to intercept your credit card numbers, passwords, photos and other sensitive information. The flaws, dubbed "Key Reinstallation Attacks," or "Krack Attacks," are in the WiFi standard and not specific products, according to the security team that discovered it. That means that just about every router and device out there could be impacted, though attacks against Linux and Android 6.0 or greater devices could be "particularly devastating," according to KU Leuven University's Mathy Vanhoef and Frank Piessens, who found the flaw.

WiFi mesh networks can detect your breathing

  WiFi mesh networks can detect your breathing They just need to add Origin Wireless' algorithm.A "Time Reversal Machine" setup consists of at least two hubs: one router is designated as an "Origin" transmitter, with the remaining routers acting as "Bot" receivers. A 5GHz signal is applied here (so it can be either 802.11a, 802.11n or 802.11ac), and to avoid interference, the signal consists of just CSI (channel state information) which is only used during mesh network configuration.

Future home of something quite cool. If you're the site owner, log in to launch this site. If you are a visitor, check back soon.

Prevent Hackers Using WPS Security Flaw To Break Into Your Wireless Router . WPS has been around for 4 years now so most wireless routers will include it – which means this WPS security flaw could put at risk millions of WiFi routers and access points around the world.

Attackers create a script that finds a WPA2 network, then make a carbon copy of it and change the WiFi channel. This new, fake network then acts as a "man in the middle," so when a device attempts to connect to the original network, it can be forced to bypass it and connect to the rogue one. The problem is made worse by Android and Linux, which don't force the client to demand a dedicated certificate. In some cases, a script can also force a connection to bypass HTTPS, exposing usernames, passwords and other critical data.

The system takes advantage of a flaw in the "handshake" method to direct users to the malicious network. Neither WiFi passwords nor secret keys can be obtained, the researchers say, as the hack works by forging the entire network. As such, it can't be used to attack routers, but hackers can still eavesdrop on traffic, making it particularly dangerous for corporations. Some details are still unclear, but it appears that for the hack to work, you may need to have had previous access to the WPA2 network.

A year later, Google WiFi is still the best option for home internet

  A year later, Google WiFi is still the best option for home internet As a tech journalist, I should care more about routers. I know enough not to rely on the hunk of junk offered up by most ISPs, but after buying a good router for a couple hundred bucks years back, I just didn’t see any reason to upgrade.especially for people with connectivity issues. And then we moved into a bigger house.

blog '' is not exists. Securing the Cloud: Security Strategies for the Ubiquitous Data Center epub

Virtual Router turns any Microsoft Windows 7, 8 and Windows 2008 R2 Computer into a Wifi Hot Spot using Windows 7’s Wireless Hosted Network ( Virtual Wifi ) technology. Secures your wireless hotspot with WPA 2 PSK password security .

Watch: How to change your WiFi channel and avoid neighbour interference (Mental Floss)

As shown above, the researchers did a proof-of-concept attack on Android, and were able to decrypt all the victim's transmitted data. The researchers point out that this will "not work on a properly configured HTTPS site," but will work on a "significant fraction" that are poorly set up. Other devices, like those running MacOS, Windows, OpenBSD and other operating systems, are affected to a lesser extent. "When attacking other devices, it is harder to decrypt all packets, although a large number of packets can nevertheless be decrypted," say the researchers.

After earlier, more limited hacks, the WPA2 protocol has been suspect for a while, so many security folks were already bracing themselves for something more serious. If you still doubt the seriousness of it, Alex Hudson, for one, is actually advising Android users to "turn off WiFi on these devices until fixes are applied." He adds that "you can think of this a little bit like your firewall being defeated."

Alan Davies points out The Great British Bake Off's biggest flaw

  Alan Davies points out The Great British Bake Off's biggest flaw Alan Davies pointed out a major flaw on The Great British Bake Off during an appearance on An Extra Slice - find out what he had to say!The QI panellist said: "It's a slightly flawed programme, this.

This Account has been suspended.

blog '' is not exists. Wi - Fi mesh from Tropos/GTS.(SERVICES): An article from: Wi - Fi

As such, you can protect yourself to a great extent by sticking with sites that have solid, proven HTTPS security. And of course, the attack won't work unless the attacker is nearby and can physically access your network.

The problem should be relatively easy to fix. A firmware change can force routers to require a dedicated certificate for each handshake, instead of relying on the one already generated. And, as the security researchers who discovered it say, "implementations can be patched in a backwards-compatible manner."

That means if you patch your Android device and not your router, you can still communicate and be safe, and vice-versa. Nevertheless, they also advise to patch all your devices as soon as security updates are available. For more details about the hack, check this very detailed FAQ from Aruba Networks.

Krack Attacks

NOW SEE: Four things that might be slowing your WiFi down

Google's annual report shows more web traffic is encrypted .
For several years now, Google has been exerting pressure to increase the usage of HTTPS across the internet. By defaulting to secure connections on both ends, users can be protected from anyone who may intercept or even manipulate data as it flows back and forth -- quite useful in a world where you can't even trust WiFi. For its own products, Google says HTTPS use is up to 89 percent overall, up from just 50 percent at the beginning of 2014. The number of top 100 websites defaulting to HTTPS has nearly doubled since last year (way to catch up), growing from 37 to 71.

—   Share news in the SOC. Networks

Topical videos:

This is interesting!