Security researcher found Wi-Fi vulnerabilities that existed since the beginning

# · 🔥 197 · 💬 37 · 2 years ago · www.theverge.com · teleforce · 📷
The security researcher who discovered the Krack Wi-Fi vulnerability has discovered a slew of other flaws with the wireless protocol most of us use to power our online lives. The vulnerabilities relate to how Wi-Fi handles large chunks of data, with some being related to the Wi-Fi standard itself, and some being related to how it's implemented by device manufacturers. The researcher, Mathy Vanhoef, calls the collection of vulnerabilities "FragAttacks," with the name being a mashup of "Fragmentation" and "Aggregation." He also says the vulnerabilities could be exploited by hackers, allowing them to intercept sensitive data, or show users fake websites, even if they're using Wi-Fi networks secured with WPA2 or even WPA3. One exploits routers accepting plaintext during handshakes, one exploits routers caching data in certain types of networks, etc. According to The Record, Vanhoef informed the WiFi Alliance about the vulnerabilities that were baked-in to the way Wi-Fi works so they could be corrected before he disclosed them to the public. While he points out in a video that some of the vulnerabilities aren't particularly easy to exploit, he says others would be "Trivial" to take advantage of. Vanhoef points out that some of the flaws can be exploited on networks using the WEP security protocol, indicating that they've been around since Wi-Fi was first implemented in 1997.
Security researcher found Wi-Fi vulnerabilities that existed since the beginning



Send Feedback | WebAssembly Version (beta)