So we are one day past the public announcement of the KRACK Wifi WPA2 security vulnerability - that pretty much blows wide open all security for WiFi networks and devices. I thought I would go looking to see if my home router is going to have a patch for the firmware. Check the manufacturer site - they don't even mention KRACK. I found a few people on their support forum asking about it but no response from the company at all. Sent their support an email asking about it.
What else can I do?
Oh yes, check Google for news of an Android update...
Googling around I found reports that Google (and Apple) say a fix is being beta tested and will be available "in a few weeks". I'm hoping that means it'll be part of the monthly security update - although occasional they have pushed out important security updates ASAP. I'd say this is VERY, VERY IMPORTANT.
During that search I found this monster list that tells you if your device is vulnerable and has a link to any vendor specific statement.
Vendor Information for VU#228519
Source: https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4
I haven't found a simple way to paste the list in here, plus it'll be out of date pretty quickly I guess so here is a snapshot, visit the link above to get the latest data.
And if you want more info to read while you are waiting for your vendor to patch your device here are some recent stories about KRACK you can read.
- The Verge: The good news and bad news about today’s massive Wi-Fi bug
- Tom's Guide: KRACK Attack Threatens All Wi-Fi Networks: What to Do
- Krebs on Security: What You Should Know About the ‘KRACK’ WiFi Security Weakness
- ArsTechnica: How the KRACK attack destroys nearly all WiFi security