Войти в систему

Home
    - Создать дневник
    - Написать в дневник
       - Подробный режим

LJ.Rossia.org
    - Новости сайта
    - Общие настройки
    - Sitemap
    - Оплата
    - ljr-fif

Редактировать...
    - Настройки
    - Список друзей
    - Дневник
    - Картинки
    - Пароль
    - Вид дневника

Сообщества

Настроить S2

Помощь
    - Забыли пароль?
    - FAQ
    - Тех. поддержка



Пишет rednyrg721 ([info]rednyrg721)
@ 2017-10-15 19:42:00


Previous Entry  Add to memories!  Tell a Friend!  Next Entry
Entry tags:hardware, security, software, technology

Говорят, завтра покажут мегадыру в WPA2
>This is a core protocol-level flaw in WPA2 wi-fi and it looks bad. Possible impact: wi-fi decrypt, connection hijacking, content injection.

https://twitter.com/kennwhite/status/919522184384729089

>“most or all correct implementations” of WPA2 are affected.

https://twitter.com/kennwhite/status/919558600594460673

>flaw in the 4-way handshake. As I understand it, in many cases, this will be: "Throw your router away and buy a new one."

https://twitter.com/kennwhite/status/919525719927087104

UPD1 Вот оно: Key Reinstallation Attacks - Breaking WPA2 by forcing nonce reuse (discussion: https://news.ycombinator.com/item?id=15481819)

UPD2 Всякий разный анализ:

http://blog.erratasec.com/2017/10/some-notes-on-krack-attack.html
https://blog.cryptographyengineering.com/2017/10/16/falling-through-the-kracks/
https://twitter.com/gsuberland/status/919866355947581441 (thread)

UPD3 CVE-2017-13080 | Windows Wireless WPA Group Key Reinstallation Vulnerability



(Читать комментарии) - (Добавить комментарий)


(Анонимно)
2018-08-05 22:26 (ссылка)
The state of WiFi, ten months after KRACK

Chatting with the discoverer of a serious WPA2 security flaw

It has been almost a year since the “KRACK” vulnerability of the WPA2 protocol caused quite the wave in the world’s media landscape. We take a look at how things stand ten months “post-KRACK”. For this, we had a chat with Mathy Vanhoef, the man who discovered KRACK in 2017.

https://www.gdatasoftware.com/blog/2018/08/30920-ten-months-after-krack

(Ответить)


(Читать комментарии) -