Am I missing something, or is the Android/wpa_supplicant "all zero key" KRACK bug mostly FUD? Surely wrong key = traffic can't flow.
Show this thread
-
That makes the impact negligible. This affects mostly private LANs. You're already owned if you trust the internet.
I mean, sure, you could spoof a LAN and recover some auth credentials, but not MITM properly. And you need to know what to expect.
-
-
Mh? At this point you emulate an AP with a negotiated all-zero key. It's full MITM, just not through orig AP. At least how I understood it.
-
MITM means you're in the middle. He's not in the middle, he's routing to a totally different network. You can't MITM an intranet with this.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.