Am I missing something, or is the Android/wpa_supplicant "all zero key" KRACK bug mostly FUD? Surely wrong key = traffic can't flow.
Show this thread
-
He's not MITMing the AP in that video, only the association. He routes all the data out the side. Doesn't work for private network resources
Basically the real KRACK impact is for private LANs and this attack doesn't let you properly MITM those, so the impact is *way* lower.