Am I missing something, or is the Android/wpa_supplicant "all zero key" KRACK bug mostly FUD? Surely wrong key = traffic can't flow.
Show this thread
-
Mh? At this point you emulate an AP with a negotiated all-zero key. It's full MITM, just not through orig AP. At least how I understood it.
MITM means you're in the middle. He's not in the middle, he's routing to a totally different network. You can't MITM an intranet with this.
-
-
Ah. Used MITM as client<->Internet. So yes, the android flaw can't be used for that.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
you both are correct. Just a matter of how you define the intended MITM "outcome".
-
also, if you are basing your security model ONLY on the "security" of your physical network (wired or wireless), you are doing it wrong.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.