Am I missing something, or is the Android/wpa_supplicant "all zero key" KRACK bug mostly FUD? Surely wrong key = traffic can't flow.
Show this thread
-
I think you basically hijack the connection at this point and go into a MITM position. Client using 0-key to communicate with you. Not AP
How do *you* intend to talk to the AP if you can't authenticate against it?
-
-
You don't. The client just thinks it's connected to original AP but you are not. You route them through some other network.
-
That makes the impact negligible. This affects mostly private LANs. You're already owned if you trust the internet.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.