Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  

0330 808 5201
Extended hours, 7 days a week
Home  /  geekspeak  /  What can you do to combat the Wi-Fi KRACK problem?

What can you do to combat the Wi-Fi KRACK problem?

Millions of people around the world use Wi-Fi networking for both their home and office work, because it’s extremely convenient to go fully wireless, and, indeed, many of today’s devices don’t even consider the older wired networking technology at all. That’s not just the obvious fare such as smartphones or tablets, where it would be difficult if not impossible to tether an ethernet cable, but even most laptops, where ethernet is often skipped over to keep costs low and devices as thin as possible.

Wireless is convenient, but because it’s a radio signal at its heart, it’s never been quite as secure as a physical cabled connection. Somebody running a CAT6 cable out of your home or office would be rather obvious, after all, whereas somebody relatively near your wireless network (if it’s completely unsecured) could gain effective free access. That’s why best practice is to enable wireless security. While older standards such as WEP and WPA have largely been depreciated due to older security flaws, WPA2 has stood the test of time as a robust security standard.

Well, it did. The bad news here is that researchers uncovered a very serious flaw in the WPA2 standard that could compromise just about any currently locked down network. Known as KRACK (for Key Reinstallation attACK), the flaw is inherent in the core protocols used for Wi-Fi transmission.

The good news here is that it was uncovered by a security researcher, not a malware author. The bad news is that its impact could be incredibly widespread, leaving numerous systems potentially vulnerable to outside attack.

That’s a statement that has to be predicated by “potentially”, because there are some significant caveats to the KRACK issue. First of all, while a system that uses Wi-Fi to connect to the Internet might be susceptible to KRACK, it’s only susceptible within range of the actual Wi-Fi network. If you have Wi-Fi at home, in other words, a miscreant would have to actually be standing in range of your network, which typically means your home or garden. Fairly obvious in other words, and the more likely targets there would be high value targets such as, say, banks, rather than ordinary consumers.

As yet there’s also little evidence of actual KRACK-based attacks on systems. That may well come in time as exploits are developed, but it’s not a widely exploited flaw to date.

Still, it’s an issue if the core security that’s meant to lock down your Wi-Fi doesn’t work properly. So what can you actually do to stay secure online in the shadow of KRACK?

Firstly (and this should be a regular part of your system maintenance anyway), make sure you’re up to date with any patches for any Wi-Fi connected equipment, including your router and any computers, tablets, smartphones or other devices. That’s going to be a somewhat uneven experience depending on the number of devices and who’s responsible for their updates.

As an example, however, Microsoft says that up-to-date Windows 10 machines are already immune from KRACK. Apple is working on patches for its mobile and desktop operating systems, as is Google for Android devices. Android is trickier, however, because while inhouse devices like the Pixel phones will almost certainly see quick KRACK fixes, older devices might not see them at all. If you’re still using a much older Android device, it may be wise to consider an upgrade in the near future. It’s certainly worth checking with device vendors to see if they’ve got updates planned for this purpose, and applying them as and when they become available.

Secondly (and again, this is something you should be considering anyway), check what you’re doing online and how secure it actually is. Using online banking as an example, your financial institution almost certainly uses HTTPS, rather than HTTP for its web site. That critical ‘S’ at the end indicates an encrypted session, which means that even if somebody did KRACK into your Wi-Fi, they wouldn’t be able to see your online banking anyway. Not every site uses HTTPS, however, and there it may be wise to consider using VPN (Virtual Private Network) software to encrypt your other communications.

Your other option, of course, is to use actual ethernet wherever feasible. The KRACK exploit doesn’t grant attackers carte blanche access to your network, just the potential to snoop on wireless traffic. Anything running along a fixed wired connection should be entirely safe, or at least as safe as anything on the Internet ever is.


Recent News

Apple’s recently released its latest range of iPad Pro tablets, with a specific pitch towards creative professionals. That’s due to the underlying A12X Bionic processor, a more powerful version of the chip found in its Apple iPhone XS, iPhone XS Max and iPhone XR phones. I’ve spent the last couple of weeks testing and evaluating… More 

It wasn’t all that long ago (in strictly historical terms) that the majority of computers sold were in desktop form. That’s the style with a central case, external monitor, keyboard and mouse, although that description also suits many of the integrated systems such as Apple’s iMac lines are as “desktop” PCs. We’ve now shifted well… More 

Lightbulbs, in one form or another, have been around for over 200 years. The first light bulbs were highly experimental, highly expensive, and not entirely practical up until Thomas Edison’s twist on the bulbs that had been produced before made it more practical for everyday use. We’ve shifted (largely) from those early incandescent filament lightbulbs… More 

Microsoft recently announced updated versions of its Surface Pro line of tablet/laptop hybrids, complete with 8th Generation Intel Core i5 or Core i7 processors. I’ve had a few weeks to test out the Surface Pro 6 and see if it does live up to Microsoft’s hype, and also the rather serious price points that Microsoft… More