The Krack Attack method is not really a hardware / software issue completely. The hardware / software will be patched to fix the real issue. WPA / WPA2 encryption uses a key for the devices to communicate anytime and sometimes randomly, when the devices communicate there is what is called a "handshake" between the devices. 4 messages are sent between the devices. At some point in these messages (usually the 3rd message) the devices "agree" on a key that allows them to know they are talking to each other to "secure" the connection the key travels with each transmission between the devices. Currently the key is not randomized enough or regularly enough to prevent the hacker from determining your key. Once they have the key they can tell the devices to not change the key, then do what they want with the info they can see, and even "insert" their own info into your devices (on both the access point i.e. wifi router, and client i.e. smartphone, computer,...etc). Both the access point and the client will need a patch. If the access point only was fixed the hacker can still use access the client. That is why both need the fix. Additionally, Android / Linux devices are susceptible to a "All zero's key hack" where the hacker can change the encryption key to all 0's and not have to use the software to figure out the key each time. That is why just fixing the access point will not completely protect you.
Показаны сообщения с ярлыком hacking. Показать все сообщения
Показаны сообщения с ярлыком hacking. Показать все сообщения
The best simple explanation of the KRACK vulnerability
If you’re not paranoid on the Internet, you’re in trouble
It’s not that everyone on the Internet is trying to attack you, but there’s always someone who wants to break into your system. Even if you think you have nothing of value, someone wants to own your computer. And you won’t realize the value of what you have until someone else has it. That’s just human nature.
Absolute OpenBSD: UNIX for the practical paranoid / Michael W. Lucas.
Хандбук по реверсингу
Обнаружил восхитительный талмуд: свободный, всеохватывающий и написанный человеческим языком«Reverse Engineering для начинающих». Очень многие вещи пригодятся C++ программистам в отладке и для понимания устройства мира. Среди прочего там можно прочитать про реверсинг STL и OpenMP, взлом любительской криптографии с помощью Z3, есть упражнения. Вместе с книжкой Касперски must have для любого участника CTF. Можно смело записывать в теормин компьютерного реверсинга.
А еще Boost 1.56 наконец вышел, а то вдруг кто не знает.
Подписаться на:
Сообщения (Atom)