Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  

0330 808 5201
Extended hours, 7 days a week
Home  /  geekspeak  /  What can you do to combat the Wi-Fi KRACK problem?

What can you do to combat the Wi-Fi KRACK problem?

krack

Millions of people around the world use Wi-Fi networking for both their home and office work, because it’s extremely convenient to go fully wireless, and, indeed, many of today’s devices don’t even consider the older wired networking technology at all. That’s not just the obvious fare such as smartphones or tablets, where it would be difficult if not impossible to tether an ethernet cable, but even most laptops, where ethernet is often skipped over to keep costs low and devices as thin as possible.

Wireless is convenient, but because it’s a radio signal at its heart, it’s never been quite as secure as a physical cabled connection. Somebody running a CAT6 cable out of your home or office would be rather obvious, after all, whereas somebody relatively near your wireless network (if it’s completely unsecured) could gain effective free access. That’s why best practice is to enable wireless security. While older standards such as WEP and WPA have largely been depreciated due to older security flaws, WPA2 has stood the test of time as a robust security standard.

Well, it did. The bad news here is that researchers uncovered a very serious flaw in the WPA2 standard that could compromise just about any currently locked down network. Known as KRACK (for Key Reinstallation attACK), the flaw is inherent in the core protocols used for Wi-Fi transmission.

The good news here is that it was uncovered by a security researcher, not a malware author. The bad news is that its impact could be incredibly widespread, leaving numerous systems potentially vulnerable to outside attack.

That’s a statement that has to be predicated by “potentially”, because there are some significant caveats to the KRACK issue. First of all, while a system that uses Wi-Fi to connect to the Internet might be susceptible to KRACK, it’s only susceptible within range of the actual Wi-Fi network. If you have Wi-Fi at home, in other words, a miscreant would have to actually be standing in range of your network, which typically means your home or garden. Fairly obvious in other words, and the more likely targets there would be high value targets such as, say, banks, rather than ordinary consumers.

As yet there’s also little evidence of actual KRACK-based attacks on systems. That may well come in time as exploits are developed, but it’s not a widely exploited flaw to date.

Still, it’s an issue if the core security that’s meant to lock down your Wi-Fi doesn’t work properly. So what can you actually do to stay secure online in the shadow of KRACK?

Firstly (and this should be a regular part of your system maintenance anyway), make sure you’re up to date with any patches for any Wi-Fi connected equipment, including your router and any computers, tablets, smartphones or other devices. That’s going to be a somewhat uneven experience depending on the number of devices and who’s responsible for their updates.

As an example, however, Microsoft says that up-to-date Windows 10 machines are already immune from KRACK. Apple is working on patches for its mobile and desktop operating systems, as is Google for Android devices. Android is trickier, however, because while inhouse devices like the Pixel phones will almost certainly see quick KRACK fixes, older devices might not see them at all. If you’re still using a much older Android device, it may be wise to consider an upgrade in the near future. It’s certainly worth checking with device vendors to see if they’ve got updates planned for this purpose, and applying them as and when they become available.

Secondly (and again, this is something you should be considering anyway), check what you’re doing online and how secure it actually is. Using online banking as an example, your financial institution almost certainly uses HTTPS, rather than HTTP for its web site. That critical ‘S’ at the end indicates an encrypted session, which means that even if somebody did KRACK into your Wi-Fi, they wouldn’t be able to see your online banking anyway. Not every site uses HTTPS, however, and there it may be wise to consider using VPN (Virtual Private Network) software to encrypt your other communications.

Your other option, of course, is to use actual ethernet wherever feasible. The KRACK exploit doesn’t grant attackers carte blanche access to your network, just the potential to snoop on wireless traffic. Anything running along a fixed wired connection should be entirely safe, or at least as safe as anything on the Internet ever is.

FacebookTwitterGoogle+Share

Recent News

wallpapers

There’s a quick and easy way to make your computer your very own, as well as brightening it up and providing you inspiration every time you sit down in front of it. There are millions of computers worldwide, but it’s pretty likely that only one — or a handful — are yours. One of the… More 

mac-os-new

Apple’s revealed the future of macOS, and while it’s not merging with iOS, it’s going to come awfully close. Apple recently held its Worldwide Developer Conference (AKA WWDC) in San Jose California, outlining all of its software plans for its mobile and computing operating systems. It unveiled iOS 12, which will launch for iPhones from… More 

homepod-pair

Smart speakers are the new cool gadget in town, not that they’re actually all that “new” to speak of. Amazon and Google have been duking it out with their respective Echo and Home speakers for some time now. In 2018, we’ve also seen a wide variety of new smart speakers from the likes of Panasonic,… More 

chromeicon

If you’re a user of Google’s popular Chrome browser — and with anywhere between 60-80% of the web’s traffic delivered to Chrome, the chances are pretty good that you are — then come July, you’ll see a significant change in how the web pages you visit are presented. That’s because the version of Google Chrome… More