KRACK Vulnerability - Revision history

Xx176 at 18:41, 29 October 2018

2018-10-29T18:41:05Z

← Older revision		Revision as of 18:41, 29 October 2018
Line 49:		Line 49:
	[[Category:DSL]]		[[Category:DSL]]
	[[Category:Modems]]		[[Category:Modems]]
	[[Category:Computer ~~help~~]]		[[Category:Computer Help]]
	[[Category:Privacy and Security]]		[[Category:Privacy and Security]]
	[[Category:Home Network]]		[[Category:Home Network]]

Fy792 at 21:30, 28 July 2018

2018-07-28T21:30:37Z

← Older revision		Revision as of 21:30, 28 July 2018
Line 1:		Line 1:
	<div class="ncfrightbox"> {{Template:~~Modem~~ Links}} </div>		<div class="ncfrightbox"> {{Template:Home Network Links}} </div>
	This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.		This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.

Line 7:		Line 7:
	* Wi-Fi networks use a password through WPA2 for two general purposes:		* Wi-Fi networks use a password through WPA2 for two general purposes:
	** Controlling who can connect to the network; and		** Controlling who can connect to the network; and
	** Encrypt (or conceal) the data shared over the network between the access point (Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to ~~encrypt~~ the data between the access point and client.		** Encrypt (or conceal) the data shared over the network between the access point (Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to disguise the data between the access point and client.

			<div class="ncfrightbox"> {{Template:Modem Links}} </div>

	=Why should I care?=		=Why should I care?=

Fy792 at 20:44, 28 July 2018

2018-07-28T20:44:01Z

← Older revision		Revision as of 20:44, 28 July 2018
Line 2:		Line 2:
	This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.		This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.

	==What is KRACK?==		=What is KRACK?=
	* KRACK stands for Key Re-installation Attack and refers to attacks on Wi-Fi networks using weaknesses in the WPA2 protocol which secures most modern protected Wi-Fi networks.		* KRACK stands for Key Re-installation Attack and refers to attacks on Wi-Fi networks using weaknesses in the WPA2 protocol which secures most modern protected Wi-Fi networks.
	* KRACK allow attackers to read and access information on Wi-Fi networks that were considered secured.		* KRACK allow attackers to read and access information on Wi-Fi networks that were considered secured.
Line 9:		Line 9:
	** Encrypt (or conceal) the data shared over the network between the access point (Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to encrypt the data between the access point and client.		** Encrypt (or conceal) the data shared over the network between the access point (Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to encrypt the data between the access point and client.

	==Why should I care?==		=Why should I care?=
	* WPA2 is widely used and is presently the strongest form of Wi-Fi security available to the average person including modems configured by NCF.		* WPA2 is widely used and is presently the strongest form of Wi-Fi security available to the average person including modems configured by NCF.
	* Almost every client device is vulnerable to KRACK whether on Wi-Fi at home or elsewhere.		* Almost every client device is vulnerable to KRACK whether on Wi-Fi at home or elsewhere.
	** Variations of KRACK can be used against clients of various kinds including devices running Android, Apple, Windows and Linux OSs.		** Variations of KRACK can be used against clients of various kinds including devices running Android, Apple, Windows and Linux OSs.

	==Should I be worried?==		=Should I be worried?=
	'''NO'''. Why?		'''NO'''. Why?
	* '''NCF modems with standard configuration are NOT VULNERABLE to KRACK.''' Nevertheless, NCF will continue the practice of making firmware updates available as they become available from our modem providers.		* '''NCF modems with standard configuration are NOT VULNERABLE to KRACK.''' Nevertheless, NCF will continue the practice of making firmware updates available as they become available from our modem providers.
Line 24:		Line 24:
	* Time: This attack works only during periods of connection and re-connection of your client device to a Wi-Fi network. As such, an attacker has a very limited time window in which to attempt this attack (usually a few seconds).		* Time: This attack works only during periods of connection and re-connection of your client device to a Wi-Fi network. As such, an attacker has a very limited time window in which to attempt this attack (usually a few seconds).

	==What should I do?==		=What should I do?=
	[[File:HTTPS_ncf.PNG\|300px\|thumb\|right\|NCF website showing secure logo]]		[[File:HTTPS_ncf.PNG\|300px\|thumb\|right\|NCF website showing secure logo]]
	# Update the operating system on your phone, computer and other client devices when they receive security updates. Each device you update becomes protected against the KRACK vulnerability.		# Update the operating system on your phone, computer and other client devices when they receive security updates. Each device you update becomes protected against the KRACK vulnerability.
Line 36:		Line 36:
	# Consider using a [[Virtual_Private_Networks\|VPN]] service.		# Consider using a [[Virtual_Private_Networks\|VPN]] service.

	==External links==		=External links=
	*[https://www.krackattacks.com/ Krack Attacks Website by Mathy Vanhoef of imec-DistriNet]		*[https://www.krackattacks.com/ Krack Attacks Website by Mathy Vanhoef of imec-DistriNet]
	*[https://www.krackattacks.com/#faq Krack Attacks FAQ]		*[https://www.krackattacks.com/#faq Krack Attacks FAQ]

Fy792 at 20:41, 28 July 2018

2018-07-28T20:41:48Z

← Older revision		Revision as of 20:41, 28 July 2018
Line 1:		Line 1:
			<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.		This page is specifically written to help members to understand the most relevant aspects of '''KRACK''' Wi-Fi attacks.

Xx176 at 17:52, 27 July 2018

2018-07-27T17:52:37Z

← Older revision		Revision as of 17:52, 27 July 2018
Line 48:		Line 48:
	[[Category:Computer help]]		[[Category:Computer help]]
	[[Category:Privacy and Security]]		[[Category:Privacy and Security]]
			[[Category:Home Network]]

Xx176 at 02:57, 21 July 2018

2018-07-21T02:57:11Z

← Older revision		Revision as of 02:57, 21 July 2018
Line 44:		Line 44:
	* Good online references for understanding some of the terms used in this article are [https://www.webopedia.com Webopedia] and [https://en.wikipedia.org Wikipedia]		* Good online references for understanding some of the terms used in this article are [https://www.webopedia.com Webopedia] and [https://en.wikipedia.org Wikipedia]

	[[Category: DSL]]		[[Category:DSL]]
			[[Category:Modems]]
	[[Category:Computer help]]		[[Category:Computer help]]
	[[Category:Privacy and Security]]		[[Category:Privacy and Security]]

Fy792 at 19:40, 23 June 2018

2018-06-23T19:40:48Z

← Older revision		Revision as of 19:40, 23 June 2018
Line 46:		Line 46:
	[[Category: DSL]]		[[Category: DSL]]
	[[Category:Computer help]]		[[Category:Computer help]]
			[[Category:Privacy and Security]]

Xx176 at 01:44, 22 June 2018

2018-06-22T01:44:11Z

← Older revision		Revision as of 01:44, 22 June 2018
Line 45:		Line 45:

	[[Category: DSL]]		[[Category: DSL]]
			[[Category:Computer help]]

Fs881: /* Should I be worried? */

2017-11-11T23:10:16Z

Should I be worried?

← Older revision		Revision as of 23:10, 11 November 2017
Line 19:		Line 19:
	** Also, other networking devices like Wi-Fi repeaters and extenders which are not connected to your modem by Ethernet may be vulnerable.		** Also, other networking devices like Wi-Fi repeaters and extenders which are not connected to your modem by Ethernet may be vulnerable.
	* And, although your modem/router may not be vulnerable, your client devices may be. Updating your devices with a security patch that address KRACK will protect each device from this vulnerability.		* And, although your modem/router may not be vulnerable, your client devices may be. Updating your devices with a security patch that address KRACK will protect each device from this vulnerability.
	* Vulnerability vs. Infection: Be vigilant but do not anxious. A security vulnerability on a device does not mean that the device is already infected or has a high likelihood of being infected. Follow the recommendations in the sections below to be safe against this vulnerability and keep informed.		* Vulnerability vs. Infection: Be vigilant but not anxious. A security vulnerability on a device does not mean that the device is already infected or has a high likelihood of being infected. Follow the recommendations in the sections below to be safe against this vulnerability and keep informed.
	* Proximity: An attacker needs to be within Wi-Fi range of your network (close enough to connect to your Wi-Fi).		* Proximity: An attacker needs to be within Wi-Fi range of your network (close enough to connect to your Wi-Fi).
	* Time: This attack works only during periods of connection and re-connection of your client device to a Wi-Fi network. As such, an attacker has a very limited time window in which to attempt this attack (usually a few seconds).		* Time: This attack works only during periods of connection and re-connection of your client device to a Wi-Fi network. As such, an attacker has a very limited time window in which to attempt this attack (usually a few seconds).

Fs881: /* What is KRACK? */

2017-11-11T23:08:27Z

What is KRACK?

← Older revision		Revision as of 23:08, 11 November 2017
Line 2:		Line 2:

	==What is KRACK?==		==What is KRACK?==
	* ~~KRACKs~~ stands for Key Re-installation ~~Attacks~~ and refers to attacks on Wi-Fi networks using weaknesses in the WPA2 protocol which secures most modern protected Wi-Fi networks.		* KRACK stands for Key Re-installation Attack and refers to attacks on Wi-Fi networks using weaknesses in the WPA2 protocol which secures most modern protected Wi-Fi networks.
	* ~~KRACKs~~ allow attackers to read and access information on Wi-Fi networks that were considered secured.		* KRACK allow attackers to read and access information on Wi-Fi networks that were considered secured.
	* Wi-Fi networks use a password through WPA2 for two general purposes:		* Wi-Fi networks use a password through WPA2 for two general purposes:
	** Controlling who can connect to the network; and		** Controlling who can connect to the network; and
	** Encrypt (or conceal) the data shared over the network between the access point (~~Modem or~~ Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to encrypt the data between the access point and client.		** Encrypt (or conceal) the data shared over the network between the access point (Router) and clients (computers, phones, tablets, etc). Encryption is done by using the Wi-Fi password to generate an even stronger key that is used to encrypt the data between the access point and client.

	==Why should I care?==		==Why should I care?==