Hector Martin

Sigh, the amount of misinformation around KRACK is making me want to pull my hair out. "Stop using all WiFi! Never use public WiFi" *groan*

Also "Android 6.0 devices are totally pwned!" (more like: they're actually more secure than older devices)

PSA: If you use WiFi mostly to access the Internet and don't have openly accessible devices in your LAN, you are FINE. Keep calm and WiFi on

what does “openly accessible devices” mean in this case?

Like a NAS or something, especially with no authentication. An actual server you don't want others to have access to, and without TLS.

I'm still confused, I thought the attacker can only force a client to join their fake network. How do they get access to LAN-internal stuff?

is it possible to execute the key reinstallation and have the client maintain their connection with the original network, then decrypt?