https://www.pcmag.com/news/356795/encrypted-wi-fi-networks-vulnerable-to-krack-attacks?utm_source=email&utm_campaign=dailynews&utm_medium=title (https://www.pcmag.com/news/356795/encrypted-wi-fi-networks-vulnerable-to-krack-attacks?utm_source=email&utm_campaign=dailynews&utm_medium=title)Encrypted Wi-Fi Networks Vulnerable to KRACK AttacksThe vulnerability means all encrypted data is visible to an attacker and they can inject malware on to any connected devices.
'"
n".self::process_list_items("'.str_replace('
', '', '
- By Matthew Humphries
- October 16, 2017 10:00AM EST
').'")."n[/list]"'
(https://assets.pcmag.com/media/images/559506-krack-attack.jpg?thumb=y&width=810&height=456)This morning everyone is waking up to discover their Wi-Fi security is vulnerable to attack. More specifically, a vulnerability in the Wi-Fi Protected Access II (WPA2) security protocol allows an attacker to bypass the encryption, read sensitive information, and even inject and manipulate the data being transported over the previously "secure" connection.
The vulnerability, known as KRACK, was discovered and detailed by security researchers Mathy Vanhoef and Frank Piessens at the KU Leuven University in Belgium. The weakness in the security can be exploited using key reinstallation attacks, hence the KRACK attack (https://www.krackattacks.com/) moniker.
This video recorded by Vanhoef explains more:
https://www.youtube.com/watch?v=Oh4WURZoR98
The attack works by targeting the four-way handshake carried out by the WPA2 protocol. This handshake is used to verify the security of the connection using a pre-shared password. First, the client and access point are checked to ensure they share the same security credentials (the password), then a "fresh encryption key" is negotiated before secure communication is allowed over the now-established Wi-Fi connection.
What the KRACK attack does is successfully manipulate the handshake process. The researchers discovered that the WPA2 protocol does not guarantee each encryption key is only used once. By manipulating the handshake it is possible to retransmit the third message in the four-way handshake repeatedly, forcing the incremental transmit packet number to be reset and opening up the packet data to be "replayed, decrypted, and/or forged."
In layman's terms, it means an attacker in range of a protected Wi-Fi network can still gain access, decrypt data packets, and access any and all sensitive information transmitted over it. Malicious data can also be injected, meaning an attacker could access a secure Wi-Fi network (https://www.pcmag.com/article2/0,2817,2409751,00.asp) and start delivering malware and ransomware (https://www.pcmag.com/roundup/353231/the-best-ransomware-protection) payloads to everyone who establishes a connection.
The researchers intend to release tools that detect whether a Wi-Fi network is vulnerable to KRACK attacks (right now that means all of them). The good news is, the vulnerability can be patched, but it relies on vendors creating and issuing those patches.
In a statement (https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-security-update), the Wi-Fi Alliance says it "now requires testing for this vulnerability within our global certification lab network and has provided a vulnerability detection tool for use by any Wi-Fi Alliance member. Wi-Fi Alliance is also broadly communicating details on this vulnerability and remedies to device vendors and encouraging them to work with their solution providers to rapidly integrate any necessary patches."
At this point, "there is no evidence that the vulnerability has been exploited maliciously," according to the alliance.
Microsoft tells The Verge (https://www.theverge.com/2017/10/16/16481818/wi-fi-attack-response-security-patches) is has "released a security update to address this issue." We're reaching out to other companies and will update as they get back to us.
Your Wi-Fi Network Is Vulnerable: How to Protect Against KRACK (https://www.howtogeek.com/329671/your-wi-fi-network-is-vulnerable-how-to-protect-yourself-against-krack/)
by Whitson Gordon on October 16th, 2017
(https://www.howtogeek.com/wp-content/uploads/2017/10/xkrack2.jpg.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.Fx4EEqCBF1.jpg)
Today, security researchers published a paper (https://www.krackattacks.com/) detailing a serious vulnerability in WPA2, the protocol that keeps most modern Wi-FI networks secure—including the one in your home. Here's how to protect yourself from attackers.
What Is KRACK, and Should I Be Worried?
KRACK (https://www.krackattacks.com/) is shorthand for key reinstallation attack. When you connect a new device to a Wi-Fi network, and type in the password, a 4-way handshake takes place that ensures the correct password is used. However, by manipulating part of this handshake, an attacker can see and decrypt much of what happens on a Wi-Fi network, even if its owner doesn't know the password. (If you're technically- and security-minded, you can read the full paper (https://www.krackattacks.com/#paper) for more details.)
RELATED ARTICLE(https://www.abibitumikasa.com/forums/image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8SEhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wBDAQUFBQcGBw4ICA4eFBEUHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh7/wAARCABQAHgDeurasiaAhEBAxEB/8QAHAAAAgIDAQEAAAAAAAAAAAAABAUDBgACBwEI/8QAOhAAAgEDAgQDAwgKAwAAAAAAAQIDAAQRBSESEzFBBlFhInGBBxQyQpGhscEVIyQzUlNiotHwFsPh/8QAGgEAAwEBAQEAAAAAAAAAAAAAAQMEAgUABv/EACcRAAICAQQBAwQDAAAAAAAAAAABAhEDBBIhMRMiQVEFFDJhYrHB/9oADAMBAAIRAxEAPwBhFDRCx4G1ERQ%20lTiDI6V82ztpIXsCO1aHJOKPlgx2oYoQ2MVPNtDEiveMJprOxSeJ2jw27A4rbwJ4hu579YWvZnUKSV4%20tHeJbGW/0mW1iQMXHfzqk/JnoPjDT/H1nHqkViNKkd0knVCHRSpwfLriqdG7dWT51Ts7jaatZJGI1SA8G3tSJn1B3z1/PzoiK506VWkFrzFU/UcsBsT9U46AfDJ8qWQeDJdQ4rq1ud%20PJBOBxey2P7R9praXwBq9qA8c4kEfpuccI/6v7vfVTWp5aVglLBaTZ7cXduuofs7SwoG9uNuL8G6HbpTqO80d/rTxe9QaqV5a3Gl2vHdxkOjMHc9wAAW92aX2/iPSZMLHrensT0VpOE/fVCwvJFNrklyZNkmkdCRdOl/d38efJgRW/wCjDJ%206lhkH9Lg1SobsSbxSQyg945QaUat478P6NqH6P1LVFtLkKG4XU4wfUDFeWj3cKzD1NdnRZtJuF6wN8KCmsXUkNGw%20FVPTvHujXBAsvEdpIewS5AP2Zp9F4muWQMt7zAdwSQ2ay9JJe4VqUzLizO%201ZUn/ACCRh%20sWB/emPwrKH28z3niL44vSiI4qmii9KKjh9KgOjYE9uCvSl9zb4ycVZUgyMEUJfWowdqTNWgxkV5EoqzjBnQEbE4rx4%20FyMUVpiI9/AshIUyDJHXGaVDiSGS/FlpVoNM0N1gSRRzQxMcpUliCN8g7Y%202gBrzo0uJHISQ4ysb5LBsjsfrGnyWc0mk36QyFVkCEBmILFdh2PbNVvVI9VL37GOCTmIrAlQTkY2GTtX0ullulOL%20Dg/Uk448c4%20zBC7ahqd/z5udDO5VlKcKrlg2F3Pf8AOsvfAvhy7B5unxn4A/jRmkWalVuxFbxtIU5iRR8IDlQSOm5B70/4R5VBly5IS4dHQUYZOWjndz8lXhxstbxtA3Yxnh/DFVvWPkc0u4laTmtI56u7MT9pzXaCgNRSQKe1HHrs8OpCp6TFLtHztqHyHRuDyZD9oP4gU90Pw34v8O6Rb6Zb2dlf21unAnNBV%20HsMjP4V2VrcZ6V40eNqe/qWaXEuRS0WOP48HIJb7XIBi88JzDzNvcA/cwFZXWZE23ArKK1vzEz9r/IFii9KKjh9KkijFExR7VzDp2RJHwjJ2FD3JtpDwCRSx2wPOjL1SsIUdWOKPs7SOKIHgXixse4PnWa3OgplQutPgilxcXccRPVQCxHvx0rcaWbflXtve2l1CrgnlyYcY81bBp3qOgW0gMgYoxPalbeHZSCyTAj1FJ27XdDNyaof21zpy6e8i290qOFDyDPsAgtkAjfoa1aPS7mNxa6ndozAheYQVJx5darqT63bXMVnFfzlA3CsfNJUbE/RO3aprTVtUi1%20W3kitZRHbhl4rdFIJyOoGehP21bpNT5JSkrok1WLbFQ7Yx0q1jtZkjWdboKMcRTgz06gdT6%20tNOXkbVXrnUZI7hJFseERqIwyLsFzkjBJGck70zttatXVTJIY87AlTwk%20/ff0291ay1uMYsifD4DDG2c527itWSp7eaGcZjkjb3MP8AfvrYqCfZO46ilJDZJoCZDULpTBo6hlT0raiLsWyr6VlETR5rKNAs9hjoqKPbpWRp02ouFBtS6HWAX0ebi0j/AI5MU6kiVXKqNlGM%20Z70JJCzajZPj2YmaRj6Af5IoiadFRnLeyK8o9hcuAK9YmURKM15fnkWqQov62Q7eg7mpNPaJjJeSMOBN6lEEkkRvZlw8n0R/CvYVPluXoXb/objqPqfSFlzpkNxBHJCSs0LBg4G/qKXaLElzrOqSznIYpEme3CDn7zVvsIUaE%20zSLStGkkjvpYyUka8dgPQ4NX4IKGN0RZG5ZLZutjJErpCVYk5Xi7/ANJ/KoIbe0uuNOVyJ%20jjGD8RRiyywOIb1Ch6BsbGiZ7CO6QSZPGB7MqdR/mmpRmv2ImmrTVoq8IuLTUvmNwsbO2WhL9JR5Bv4h5UxtDLLeOqyNFhPYjY5PF3yT2qbUrSK9tfmOpRMPaHJuY9irjoQeqsKg0tJ5pXtL2RV1S0AImAwJ07Pj7j61iWKgYs7xPbJ3fT/wAGdtIZoAzLwsNmHka1kArIZSLhUdQruSsi56NjII9CAaJkjNeUUUSfuhdIKyiZIvSsrW0xuNYqMiANBQnvRkVT0OsLWOKVeGReIe%20hdSCNIlpCoy3WiOYI4mkJ2UZpFz555Eit3xdXpIVv5cQ%20k35Ck58njjY3Dj8kqGllBFfXPJhUfNLY4Zh0kfuPcKa3Vv8As7AfCvdPghsrSO3gXhjQYA8/Wp2bPWjgxtK5dsGaak6j0hRpdwAzxHYjsaG0G9C6pqmnyH9ZDNzRnur7jHoBtU2qwSW0wvYVyoPtgUo1kx22oWniKD91wci6x/LJyD8DXR00FO4fJFnnsSkWqVYJ4%20FwHHrSyW2ubNjJakvH3jNERZIDI2xGQRUwaRRvvWXi5CsgNDNbX8TRAiOXGGRu/ofOk97xfpWznhgfnWsvKnXqeU%20xPqAcGmV/aR3KlsGOTs6bEVUdebWLOd5553MZTlrNCpBXG6s3uOM%20lajujxLlE%20eCyR9PZc7rT4Zbq3uVbDR5yAPpA9PsqRo9utB6Fqdvqmk29/buCk0Yfbscbg%20RB2/3NGF1b/2i8dK10Njlv0y4YPIhFZW7nO1ZQo1Z/9k=) (https://www.howtogeek.com/174985/not-all-viruses-are-viruses-10-malware-terms-explained/)
Not All "Viruses" Are Viruses: 10 Malware Terms Explained (https://www.howtogeek.com/174985/not-all-viruses-are-viruses-10-malware-terms-explained/)
Once someone has access to your network in this way, they can see much of the data you transmit, or even inject their own data—like ransomware (https://www.howtogeek.com/174343/ransomware-why-this-new-malware-is-so-dangerous-and-how-to-protect-yourself/) and other malware (https://www.howtogeek.com/174985/not-all-viruses-are-viruses-10-malware-terms-explained/)—into the websites you visit (at least the ones using HTTP—sites using HTTPS should be safer from injection).
At the time of this writing, almost all devices are vulnerable to KRACK, at least in some shape or form. Linux and Android devices are most vulnerable, due to the specific Wi-Fi client they use—it is trivial to see large amounts of data transmitted by these devices. Note that KRACK does not reveal your Wi-Fi password to the attacker, so changing it won't protect you. However, WPA2 is not irreversibly broken—the problem can be fixed with software updates, which we'll talk about in a moment.
Should you be worried? Yes, at least somewhat. If you're in a single-family home, the chances of you being targeted are smaller than if you're in a busy apartment building, for example, but as long as you are vulnerable, you should be vigilant. It's probably a good idea to stop using public Wi-Fi, even password-protected ones, until patches are released.
Thankfully, there are a few things you can do to protect yourself.
How to Protect Yourself from KRACK Attacks
This is a major security issue that will likely be prevalent for quite some time. However, here are the things you should do right now.
Keep All Your Devices Up to Date (Seriously)
(https://www.howtogeek.com/wp-content/uploads/2015/08/xscreenshot.1.png.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.QOSshc94Nf.png)
You know how your PC and phone are always nagging you about software updates, and you just click "Install Later"? Stop doing that! Seriously, those updates patch vulnerabilities like this, which protect you from all kinds of nasty stuff.
Not a lot of devices have been patched for KRACK yet, but they will soon. And thankfully, as long as one device in a pair is patched—either the router or the computer/phone/tablet connecting to it—the data being transmitted between them should be safe.
That means if you update your router firmware, your network should be protected. But you'll still want to update your laptop, phone, tablet, and any other device you bring to other Wi-Fi networks, in case they are not patched. Thankfully, your computer, phone, and tablet will notify you of updates, but you should check your router manufacturer's web site periodically for router firmware updates—if you have an older router, it may not get updated, but many newer ones hopefully should. (If yours does not get an update, it might be a good time to upgrade that router (https://www.howtogeek.com/243039/why-you-should-upgrade-your-router-even-if-you-have-older-gadgets/) anyway—just make sure your new one is patched for KRACK before you buy.)
RELATED ARTICLE(https://www.abibitumikasa.com/forums/image/jpeg;base64,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%20uNJK533Hy01WXGCnGZJqeCHmMff1DcqGTHwKB7zt6KDria5mIRSiRK0H44oEaJx/i4yceQzo8Maya4Bu2MWSYUnpg6GHVhyqTvvrgtN9t1xq5aSJpI6iLrFNHytjz9foTjI1LBAOjaDKuUHphIyTW0DGBnRnzG%20iwRpLKWwQxHoNccE7YXcY1m3GrDiLju38NcxNDQr7bXgdCR8Kn9v8Au1o0xA2JI%20usy7NQLlcr/dSeaStuTIH8e7ToPsR9tHq4TkDny0i%20W6nJDTNjL9B5Dw12d2c6UsfKABsB00tBvvoaLiAh8xn10NdI6ddDXfFHB4U9GH10fKw6Z%20mhyjRcpByNvkdDJBv0JH121GcT3KC12mapqJXhRUZ3dN2VB8RX%207cKv9zLqK4o4qWhoal7a1PUyU8ndzM7e5G3lt1Pp/8ANVDiKuu9yhheGnmuLJiraKJAQX5sQx8vkm8hzuWCDfGmqsaT1J9AJ2pcIunB9BJVrHxDdoovb5Iu6pqXOUt0IO0Sg/i/M3Utk%20WJ6SlgaLumgjMf5Sgx9tZ5Y5r9QRFBPNHy%208IZ9zucn3W369dWyi4jiNDPPVoYXgTmZV35/ABfUnbHmdOZVFyacev4DonDleyFv3dWiqra5%20Z1oVimh5W988zBe7J8RnGM/m1bLxX2yyUi1d8uVLbIGGUaofDSfoQZZ/8AEHWG9pHFVXR1fNTunt1ZURSKCA6LHA5bnwdiGmAAyN1h8mGqNLPdr9dmqKqSsulyqG3duaWVz5DqfoNN14MZxTu7AvIkm1Do3O59sPClISluo7rdCNuYItNGfkW5m%206jUK/bVMx/ocK0yL/1a1nPh%20VF9dZAuMlSCCNiD4afhJQgrpmOPTHqKBOyb7ZqadsE82VqOHKQ5GMQ1jofDpzK3ro%20z/i7hCyUq0clLeaJC5bnfkqlBPmV5DjYdFPXWZ8veTd6%20M7dAANvlp9QPEgfXRPBVJNOKI8kk9pnpe0VlsvVIauzXGnuEKjLmByWT9SHDL9QNdaKfA5%20evMtuqKugro6%2021ctHWRHMc0LlWU/TqNb72a8TnjHhyeqqI44btb2VK1YxyrIp2WUDw32IG24IxnARyPpkVFzq/wZqyW3qRYRv8AEOXQ0tWHRhn5aGsnxsc2ECOhIA9dRXFlTJSWKpkgcrM68kbDqpPiPUDOpIxOpypyp8DqN4lppam1OsSczg5AxnJwR0%20ul4do6XRi9njroLZLZqOhjrayST2mXvWxBSx/haVjgZPXlzjpnO66VU3S1Cm7u98WXS7rGpZoLTS5gQBXY8jOUQjEb/CMe6R11WO0biCGF24bSoamt8UmKgjDPUzNu0ki/EygEbYwckAgrg0uhlq7PxKbnLUwXaCn5mR5gXiqQwIYY/yYk%20eSD0OtyHKM5mxJxzZpwKUJWmmSZUjlqO7ZI1zJzMWjLAACOQ9fhBPQDVk/lsF2p1aK6PDGOWWMiT3JAGB2OcA4yRnbOOnXXnLhO42q319TNdYawuExAYGA5XByAQ2xBIA3BGC2xOCLNw7xNd6SyCmM8wplbMsDsOU83KhIHUcyurZIwSrHJLNh/HuhW/zW0UcXLp6Lv/EDwmln4loL3b3aa0XGmEcEnKAIWjPdmE4yAU5QDqiW6qrbbP31HUSQSEFeZDvgjB1LcAdoQ4Woarhriu2G%208K3GQTvSM/LLTtkoJYWPwthenQjY4zq80/ZfbeKIPbuzbiqivMLjmFtrXFPXRD8pVtmx5g4OtGxV3x%20cWAlLxLUjLY0IydyT466FVWUhhkHrq03ns94wszMLlw3c4AvVvZ2ZPHowBB6ahnpKlR7O8GCNvejwfLy0r42gaya37GYlyMg50/AzQyB%207SQAg8rjIOPD5emn7faqyUiOClnmdjsEiZvLy%20Y1abR2bcc3TD0nDVdHFjJmqk7iMDbcs%20PP9joka2yVfW3pMpvL/qHqGCRgsW5V6DPgPTWzdgFultnD154irwYIrsVo6BH2M3KwZ3A8gEAz5nGqjU23gDgw%200cWX6Dia5xnKWazy80Ibyln6Y8CFydd/CXGV34z4qaurhFBT09OYqOjp15YaaP8qL/ALnqftrr5Rprab5YxXFzl/DW0BXODzA6GmLVK0kGHG420NecceTSTO0Fhvuvz0irVpKdwmBIBlCD%20Ibj99LVnXfYj0OieSPG6lTrJ%20Wg2jyjxQljoeLbtHxNRT1GZphEqSHMbSMGV%20QchIwWGedt1wQNtUKf2mjf2cK6McEpJHgrt5H7/XXqLtU4Eg4kKV1NGEq1xlguVkAOQGUEEjruCCMnBGTnKb5whxyt4F35ZXq4U5UqBGXK7MM55QQem%20CRnOcgZ1KMmMopb5E7KmmZ3dLRLSz0dLJMHuUuGliIx3GccoZs7N1JH4RjJzkC2U0N0vslXUXSVI5CwRlULyoQykgADPNhMNk595c7jJVTcA3FqkyvBLJlicuevvNu3MBvjl2wR189tK4F4GcoDW5jgRQERRt8hn/fV7MhJa2VhW9mJ9pLKl0p4KWP%20jFTJEufEAYyfXb99FY66opo1ZJGRgMgg4xr0Bx52d0d1tfd0NPFDUx7xuF6nyJ676wa62e42WtkpblSyU7g7cw2PyPjomPl74T0RbT%20y22Xtj7QrKojoeKrkI16JJMZFH%20L5Gptf4jO0sEGW70s585LdTk/fk1mFLXUaRCnqaKJiHz3pPUZ3BwM9Ns/LQk/lIjy8Ko2GO0wYE4OBgNny0555CTxK/SNQqP4h%200yenKpflgB2/o0kKfuEzqh8Ucf8W8SsReuILlXIT8E1QzIPkucD7ahqie3NTOKamkVt%20VmPTcevln/ANajMnOu%204kumWhjQi96O2GRmPvEnWw9hEbvV1DgEgR4wPMkayrhuzXG81qU1FTSSsx/CuvUPZLwenDtvzMQ9S6jmx0X09TpO2/ckm%20R6EOC4W2EwwPeO5z4aGpBIW9R89DQ9hURxO/Uj9tExbzz89J7rxjkdR5ZyP3zo1R1PvkH9IxrE5GRt1PUqR6jTToWGMgjyOu0j3c5BGmx3brkYIG2Qc67ogj1ooEbmWljz6INdMTIVx3WD6a6VjUj3W0oQ9MAE%20urrZHA0FjOAdv1DUfebBbbvTmCuo4ahD4OufsfDUuIZQvh8jvpHKwb3k5fVT/wAas0%20yDI7x2L8O1UzmCWooWPQK3Mv2Oq/U9gjk5p70uPDnhP8A51vTwF%20jA%20hGkxQSpsRlRq0b7o8bKuEH6MJpuwSc4E1/RV8eWAn/AJ1YbN2G2CjkWWsqamtI6jZVP06/vrXFIHVdLRVPw7HV3dbJdkKEF6IOycO2i0QCCgo4qdfRdz9ep1ZbfCF%20EabWIHZhnXZTRhOmRq1MHvbJb40PBcDy0NLDEDB3%20WhpsGf/2Q==) (https://www.howtogeek.com/281635/are-my-smarthome-devices-secure/)
Are My Smarthome Devices Secure? (https://www.howtogeek.com/281635/are-my-smarthome-devices-secure/)
In the meantime, if your router is not patched, it's extremely important that every device on your home network does. Unfortunately, some may never get them. Android devices, for example, don't always get timely updates, and some may never receive one for KRACK. Smarthome devices (https://www.howtogeek.com/281635/are-my-smarthome-devices-secure/) can be problematic as well, since they can still get malware that makes them part of a botnet (https://www.howtogeek.com/183812/htg-explains-what-is-a-botnet/). Keep an eye out for firmware updates to any other Wi-Fi connected devices you use, and email the manufacturers of those devices to see if they have issued or are planning on issuing a patch. Hopefully, since this vulnerability is already making big waves, device manufacturers will actually be incentivized to release patches.
Here is a running list (https://char.gd/blog/2017/wifi-has-been-broken-heres-the-companies-that-have-already-fixed-it) of devices that have been patched, or will be receiving patches soon.
Use HTTPS on Sites That Support It (You Probably Already Do)
(https://www.howtogeek.com/wp-content/uploads/2017/03/ximg_58cb25f2e3bfa.png.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.TOGGhHQF2v.png)
RELATED ARTICLE(https://www.howtogeek.com/thumbcache/120/80/ddf1ee8e7adb7f6e161eb7501610bdba/wp-content/uploads/2017/03/ximg_58cb2b0b07c08.png.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.eZ8YDr4qKW.png) (https://www.howtogeek.com/181767/htg-explains-what-is-https-and-why-should-i-care/)
What Is HTTPS, and Why Should I Care? (https://www.howtogeek.com/181767/htg-explains-what-is-https-and-why-should-i-care/)
While you wait for your devices to receive patches, make sure you take care of your personal data. If you do anything sensitive over the internet—email, banking, any site that requires a password—make sure you do it over HTTPS (https://www.howtogeek.com/181767/htg-explains-what-is-https-and-why-should-i-care/). HTTPS isn't perfect, and some sites haven't implemented it properly (like Match.com, as shown by the researchers), but it should still protect you in many situations.
Thankfully, more and more sites are using HTTPS by default these days, so you shouldn't have to do much—just make sure you see that little lock icon when you connect to any site that requires a password or credit card information. And make sure that lock icon stays there as you use the site, since an attacker could attempt to strip the HTTPS protection at any time.
Change the Default Settings on Your Router and Other Devices
(https://www.howtogeek.com/wp-content/uploads/2014/01/ximg_52eabb504ee6a.png.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.80P3VdyB5h.png)
RELATED ARTICLE(https://www.howtogeek.com/thumbcache/120/80/bb2778d309765fd3f1a4a1f51c4cd742/wp-content/uploads/2014/01/ximg_52eac74fe8b0f.jpg.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.PqpdFDBmHo.jpg) (https://www.howtogeek.com/180987/5-things-you-need-to-do-immediately-after-plugging-in-your-new-router/)
Six Things You Need to Do Immediately After Plugging In Your New Router (https://www.howtogeek.com/180987/5-things-you-need-to-do-immediately-after-plugging-in-your-new-router/)
Even if your router does get patched, that doesn't mean it's safe from other attacks. Someone could compromise one of your devices using a KRACK attack, then install malware that attacks your network in other ways—like logging into your router using the password it came with. Make sure you aren't using the default password on any device in your home, make sure your router uses WPA2 with AES encryption, and disable insecure router features like WPS and UPnP. These are all basic things everyone should do (https://www.howtogeek.com/180987/5-things-you-need-to-do-immediately-after-plugging-in-your-new-router/), but now's a good time to double check.
Run Antivirus and Anti-Malware on Your PC
RELATED ARTICLE(https://www.abibitumikasa.com/forums/image/jpeg;base64,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%20oHg2XrfV/xu6haFrPTLsWUZGMwDa37968h6k11W6a6vLqW4kcAs0rFiTjHrWLd3TO55zVRpSeCaxHTRx3bE0NH6Xs4KM7GQlx/ZunzPk5xioWYbaa7g%20tRFqouetJrF0kE80qiLc0qh6lN0r0ZZxnjNSLcHsKENS1%204tL2S3SGJlTGCc57A1XHVN2D/x4f5/3Wu/mSjieWOcbg27HwshnL9VKwPa0WO/dHizHsTTvGA9aAz1Xe/%20PB/P%2064eqr0/4If5/wB0fdVB%20R9FJ9tVn4j2Eem7C%20tRvqAUd6Am6lvG/wAUX81G2v3Tf44/5qN3NdH4J9FPbyxU%20QPaN5tSYg4as661A8ksTQq2tXLf2J/NQvqczd1WqsvM9O7s4%20lai5dmb3A9rcubxm9aptISeazPnpfwrXPnZPwrVB/HKdx3J9K%20zhEzRsPlXJH71AzfWq/zTeqLXDcH8C1XdxWnPn4U7eHTDwp2fjmm7s9qgMrHnAFc8RvYVGeKQZ%20FIOHzYUp980qhLk96VMPEoMp2glwreuEHVJz9R/0K9D6S%20HllqvTc%20qST%20SzG6/JjYtGpXKmMA4cnBGOMYyfLkjzfUm33sjZ74/6FbWl9Y61p9pb28NzIBaszW5EjL4ZIAJGD3IAB9wBXluORzyzv%20kf5G%209vK6ByTW8Mo2HXtBu1vSS3qAyLWO58G239bHI1a1FlqEtupLKpBB%20hGaPrHq7oy807S4eptLvrybT4I4/6cKESnMm8E71xwYsHBJ2449fOrmaS4neaVtzuck1vR6ro/wAmElsC8phJcbcKZtu0diMr5Vb82b9XxBwYA83Nt1i10kMlTI%20nb0sLiWjAvsP8C0rjXOiriXS2fpswrBco92IVIEseDvGPE5524GV4B5Gc0/X9d6HlsVTSem2S5jkgk8SRColZSfFBAkbaj8EKM47Z4BrD1W46fktJlsLaaOZjuQsuNuZGO37x4CFRn3H61e1G86WS8litrEMgkkCyhGK43HZhfE5GMDuO2foXqqt%2046l%20HJgFlD05e/LLdgRvKod0tzHh2A8QDxC4DY7emRUU%20pfDi71vR/k9MuLOzg%20Z%20dM8HllGwmI4EhJbcMY3KO31JwpNQ6WkRj9lyq52hMDhAFUDIDDccgk9s7v1pn2j0%206QrLZMdi4YLHtU8IDwH%208dreb0yOD3AhEV11F8N2SZbfpaVMW7CNjFzJKWn7/1vIPNbkHzbdjLhgcmzrXUvwwvBczWnTFxbXczzyJIbVfDiLSlkAiWUAgRkJjIAI3DPIIh89oP2l4q2DpbFCpjBPm/q5BPm/Bwee9csbvQAzRXdtIYRdtIrLEC5jLIQp8w/tVxj/2zQhGV91X8OL25nluOnLkod5iiS3WNEDNMwRQsoCBWeI5AO7YRhdxoI6vvdFv9US40PTjp9uYVDw4wN4JyRlm4xt9e%20atWuodM4RbnSnwqnzRkhi21QCct2zvJ49qZd3%20gOtvHb2UkcK3BkkQrk7doGN27Lc5OPLxxn1oQh%20lRHqWsaXNov2dZ2xg4XLiIZZgXLf3cBjs98AeuBU%20m6loFzY2tvq0MjzxRBA5QBARITk4IJ8nH7fnQhCtKt6zu%20nku5nubGR4SybVAPI24bHm8vmwcc8cfmqELFuTmZiaj/SpHwzbsnmmHHvWlPQzPkc4DYkqjDVxNja0nsAufpW1fXWiS6aRDZlLzw41BCkAMBGCfvYxxJ6ZO4H8sQsB60wyCoTQTDx8qXVxZRTNe9Lt8xMNPYyu39OMIyovmkOeH9mjGPdT%20tcXPTrai8psHW3KcRjcQDvPbz5yUxySRnPHsPGX6U3xvpSaKbCXVR5RKl9oKatHKmnlbPY6yx4JLYYshG4nB4UHB7Zqzdap05cbA2mtt3MSApXaH2M2NrAZBMgGfQL%20QEvFPtXPGPtRopsI1UeUX3GodKu0AGnSNHChUptZSRvdgM7GXJOc4wMetHVp%20nXs5E06zmil8ux3JJJBOc%20bGCMH8%20PyHvGPtS8Y%20gFGimwjVR5RnNq3TUl5PPPYNcv45kgYRCJVQsSEKqfNjjk9%20R2AzBeaj0xMDJ9ly%20NJkyMXbOSpyR5sDzYI78UJ%20Mfal4x9qNFLhGpjyi%20fUOlGgVRpkkkkYKp95FxvZgMbyTwcEk/l2oZm2eK3h8qeRxj/wCmqwmPtXfFPtRopsI1UeVLSqEzEDtSpNHLhLqY8oc8R/xN%209IyP%20I/vUeaVR3OU/pCeXf8R/elvb8R/emUqS5S2Cdvf8R/epZ4Lu3jiknhmiSZd8TOpAde2RnuKgqxc315cq63Fw8ivJ4jBjkbsYyPbjjj2HsKOoosrGlaVq2qR3Mmn2k9ylrH4tw6DyxJnG5j2A%20pqvdw3Fq6pMpUsNy%20bIIzjII4PIP7Vp9L9U6t05aataadJGINXtPk71HUkSwkhiuQQRyB29qzb68e78FWRI44I/DijQsVRdzMQNxJ%208zHv60dRRZPtLG/u4JZ4ImaKJSXcsFHAyQCTycc4HNQ20VzczpBbpJLK5wqICSa07LqCe20o6b8pbS25ieNg6nzFskPwfvKTwfoM5wKzLO5ltLhZ4Su9cjzIGBBGCCDkEEEjmluUWCmv7O90%20ZoruNo2V2Q%20YEEqcHBBwRkHkcGvQfhh8Geq/iF0xN1Do%20paPa2cN61kfnJpVcyKiOcBI24w68596ANW1W71OVnuCir4junited%20snakesDCpuOcDJJwOwySceteh/B344dXfDDRb3R9Et9LurS5kkuI1u7YO0FyyIomVu%20QEXynikuUWCC%20u%20m9T6N6u1HpjVpYJL3T5fCma3ctGTgHykgEjBHoKgl0oxSNFLq1kkiMUZSZMqw7jhK71l1HqnV3U9/1JrcyTajfy%20LcOkYQM2AOFHA4Aqy3VV00hkOnacXL79xjckHOeDuyKLlFgse8iltrhoHcMQAQyk4YEAgj8wRSrl9cteXLTuiIWCgKmcAAAADJJ7AUqW5RYL//Z) (https://www.howtogeek.com/225385/what%e2%80%99s-the-best-antivirus-for-windows-10-is-windows-defender-good-enough/)
What's the Best Antivirus for Windows 10? (Is Windows Defender Good Enough?) (https://www.howtogeek.com/225385/what%e2%80%99s-the-best-antivirus-for-windows-10-is-windows-defender-good-enough/)
This should go without saying—because you should already be doing it—but make sure you have decent antivirus and anti-malware software running on your PC. KRACK attacks can be used to inject malware into the sites you visit, and "just using common sense" will not protect you (https://www.howtogeek.com/140795/htg-explains-why-you-need-an-antivirus-on-windows-no-matter-how-careful-you-are/). We recommend using Windows Defender (https://www.howtogeek.com/225385/what%E2%80%99s-the-best-antivirus-for-windows-10-is-windows-defender-good-enough/), which comes built-in to Windows 8 and 10, for your antivirus, along with Malwarebytes Anti-Malware (http://www.jdoqocy.com/click-3607085-11971602?sid=ct225385) to protect yourself from browser exploits and other types of attacks. Even if all your devices are fully patched against KRACK, you should be using these programs.
RELATED ARTICLE(https://www.howtogeek.com/thumbcache/120/80/7cf216f5896a389dec7e896e5fc5c9c1/wp-content/uploads/2017/03/xGeneral_Security-650x300.png.pagespeed.gp+jp+jw+pj+ws+js+rj+rp+rw+ri+cp+md.ic.Ejz89432c0.jpg) (https://www.howtogeek.com/173478/10-important-computer-security-practices-you-should-follow/)
Basic Computer Security: How to Protect Yourself from Viruses, Hackers, and Thieves (https://www.howtogeek.com/173478/10-important-computer-security-practices-you-should-follow/)
In short, this vulnerability is a big one, and the only way to truly protect yourself is to make sure your router and all your Wi-Fi connected devices are up to date. But while we wait for those updates, basic computer security (https://www.howtogeek.com/173478/10-important-computer-security-practices-you-should-follow/) can go a long way: use HTTPS wherever you can, don't use the default passwords on your devices, run antivirus and anti-malware, and update your software as soon as you get that notification. You don't want to get attacked only to realize five minutes of updates could have kept your data safe.