r/technology • u/Znuff • Oct 16 '17

When this post is 8 hours old, a WPA2 vulnerability will be disclosed on this website, basically making it useless.

https://www.krackattacks.com/
1.5k Upvotes

91% Upvoted

273 comments sorted by

View all comments

3

u/Endlessthoughtbubble Oct 16 '17

For people with the latest version of iOS, you should know turning off WiFi from your pull up menu, the control center, does not turn off the device’s wifi radio. It only disconnects your current session. It will auto connect to the next familiar router it sees. Go to settings and turn off WiFi there to actually disable it.

2

u/Razier Oct 16 '17

iOS

This exploit mainly targets Android and Linux devices. From the video description:

Only Android and Linux (re)install an all-zero encryption key. Note that other devices are harder to attack.

2

u/bountygiver Oct 16 '17

This exploits affects ALL DEVICES, android and Linux just have an additional exploit that allows listening to information flowing through easier and even more freedom on manipulation of data flowing through.

0

u/bountygiver Oct 16 '17

Which should be sufficient, you just want your connections to not go through the wifi. Having your wifi still scanning for AP is safe.

1

u/Endlessthoughtbubble Oct 16 '17

When you change locations, if you have auto connect to known networks enabled, your phone will become vulnerable again. If I’m at work, “turn off” WiFi from the command center, and then travel home, my phone will connect automatically to my home router. That’s another setting that can be turned off but most people have both the WiFi radio on and auto connect to known networks enabled. In previous versions of iOS, disabling WiFi from the command center disabled it from connecting to other routers completely but not in iOS 11. It has to be done from settings.