Wireless security has been advancing slowly but one of the major advancements in recent years has been WPA2 wireless security protocols. WPA is much more secure and easier to use when compared to its predecessor WEP but unfortunately a flaw has been discovered in its security and has major implications.
The whole point of wireless security is to keep people that should not be on a wireless network away from it and to provide encryption on data that is transferred. Since all of this data goes through the air anyone can conceivably pick it up but they will not be able to be read anything without the proper encryption key. That may have changed.
Brian Krebs has reported that a flaw may leave WPA2 secured wireless networks vulnerable to hacking. The exploit, dubbed KRACK (Key Reinstallation AttaCK) allows someone to break the security and steal any data being sent on the network including pictures, chat logs and passwords. It is also possible for that person manipulate the information or place ransomware on a computer or device. Yes, any device is vulnerable, from Mac, Apple, Android and of course Windows.
This is certainly scary news but you can breathe somewhat easier. Any attack that is done will have to be carried out within range of the wireless network so the attacker will have to get close. Not all information will be able to be read if it is intercepted as well. Thanks to the Secure Socket Layer (SSL) anything that is sent via a secure site (any site that uses https://) uses its own encryption and will not be visible as are most email services.
The issue has been known about for sometime but was not reported to the public. This was to allow hardware vendors time to fix the issue, since a public announcement would only create a roadmap for thieves to follow. An update has been released for routers that require the user to update it. In a further bit of good news it does not appear that any issues have arisen so far but a warning has been issued to keep all devices and routers fully updated. Check out this link for help if you need your device updated or consult your manufacturer’s website for instructions.