Sigh, the amount of misinformation around KRACK is making me want to pull my hair out. "Stop using all WiFi! Never use public WiFi" *groan*
Show this thread
-
is it possible to execute the key reinstallation and have the client maintain their connection with the original network, then decrypt?
On Android 6.0 the key zeroization (not really reinstallation) attack doesn't let you do this. Older Androids/other devices, yes.
-
-
The problem is the *precise* impact depends on devices on both sides, versions, settings, crypto algo used, traffic, protocols, etc. Messy.
-
So it isn't really "lol I'm taking over your WiFi", more like "dedicated attacker w/inside knowledge can attack specific corporate network".
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.