New Wifi vulnerability can steal user information from everyone

[sounds]

Summary

Not a lot of patched devices yet. Please patch your wifi router!

 

Quotes

Quote

Three of the discovered vulnerabilities are design flaws in the Wi-Fi standard and therefore affect most devices. On top of this, several other vulnerabilities were discovered that are caused by widespread programming mistakes in Wi-Fi products. Experiments indicate that every Wi-Fi product is affected by at least one vulnerability and that most products are affected by several vulnerabilities.

 

My thoughts

When the attack is abusing a flaw in the W-Fi standard, you know it's bad.

 

Sources

https://www.fragattacks.com/

[sounds]

This is the same Wifi researcher who discovered https://www.krackattacks.com/

[Zodiark1593]

When your wifi device doesn’t get updates…

[sounds]

1 minute ago, Zodiark1593 said:

When your wifi device doesn’t get updates…

Switch to one that does? Or use OpenWRT? Or unplug it and go off grid? j/k about that last one.

[Zodiark1593]

7 minutes ago, sounds said:

Switch to one that does? Or use OpenWRT? Or unplug it and go off grid? j/k about that last one.

Don’t have any on hand that does (or anything newer than a decade really), and I’m certainly not paying for something that is unlikely to see home internet anytime soon, as the primary internet is cellular. The router is pretty much only used for Airplay, and it’s not even powered on much. 

[sounds]

Just now, Zodiark1593 said:

something that is unlikely to see home internet anytime soon, as the primary internet is cellular. The router is pretty much only used for Airplay. 

Cool. Stay safe, and use protection.

[colonel_mortis]

It's worth noting from the article that in practice the problem is in the implementation rather than the spec, so the impact will vary significantly by device.

Quote

Fortunately, the design flaws are hard to abuse because doing so requires user interaction or is only possible when using uncommon network settings. As a result, in practice the biggest concern are the programming mistakes in Wi-Fi products since several of them are trivial to exploit.

 

[Zodiark1593]

Just now, sounds said:

Cool. Stay safe, and use protection.

Me:*casually kicks container of Chlorine Triflouride under bed*

 

”Yeah, safe… got it. 

[porina]

Time for my once-in-forever manual check for firmware update...

[JLO64]

1 hour ago, Zodiark1593 said:

The router is pretty much only used for Airplay, and it’s not even powered on much. 

Just out of curiosity, could you elaborate more on your setup? I have a spare router and a friend who doesn’t use wifi at home (he uses his iphone’s hotspot for everything) but would definitely benefit from being able to use AirPlay.

[GDRRiley]

==moved to General==
not tech news and not formatted correctly

[da na]

I use Ethernet so I'm fine, right?!?!

/sarcasm

[Zodiark1593]

57 minutes ago, JLO64 said:

Just out of curiosity, could you elaborate more on your setup? I have a spare router and a friend who doesn’t use wifi at home (he uses his iphone’s hotspot for everything) but would definitely benefit from being able to use AirPlay.

My Vizio TV had Airplay built in, so I use that. I’ve an old Netgear router (back when 802.11n was the hot new thing) that I switch on when I want to use it, and the tv is connected via ethernet to ease the load on the wireless. 
 

However, outside a few games (Apple Arcade users would probably be happy), it’s largely a failure for what I wanted of it, which is to mirror video streams over to my tv. Not even YouTube appears to allow mirroring, let alone the paid streaming apps. 

[Quackers101]

if I bluetooth my wifi, would that be safe?

or should I start to using the radio?

[Mark Kaine]

You would be wrong, I dont use wifi since ca 2008 (when I learned how 'safe' it is)

[noodlespinbot]

On 5/11/2021 at 9:16 PM, sounds said:

Cool. Stay safe, and use protection.

Cant get any WFDss if you use protection