0

and will devote their best efforts to p (General)

submitted by zhouyueyue to /forum/general

The wi-fi connections of businesses and homes around the world are at risk [url=http://www.airmax90shoesforsale.com/]cheap air max 90 for sale[/url] , according to researchers who have revealed a major flaw dubbed Krack.

It concerns an authentication system which is widely used to secure wireless connections.

Experts said it could leave "the majority" of connections at risk until they are patched.

The researchers added the attack method was "exceptionally devastating" for Android 6.0 or above and Linux.

A Google spokesperson said: "We're aware of the issue, and we will be patching any affected devices in the coming weeks."

The US Computer Emergency Readiness Team (Cert) has issued a warning on the flaw.

"US-Cert has become aware of several key management vulnerabilities in the four-way handshake of wi-fi protected access II (WPA2) security protocol," it said.

"Most or all correct implementations of the standard will be affected."

Computer security expert from the University of Surrey Prof Alan Woodward said: "This is a flaw in the standard, so potentially there is a high risk to every single wi-fi connection out there, corporate and domestic.

"The risk will depend on a number of factors including the time it takes to launch an attack and whether you need to be connected to the network to launch one [url=http://www.airmax90shoesforsale.com/]air max 90 shoes for sale[/url] , but the paper suggests that an attack is relatively easy to launch.

"It will leave the majority of wi-fi connections at risk until vendors of routers can issue patches."

Industry body the Wi-Fi Alliance said that it was working with providers to issue software updates to patch the flaw.

"This issue can be resolved through straightforward software updates and the wi-fi industry, including major platform providers, has already started deploying patches to wi-fi users.

"Users can expect all their wi-fi devices, whether patched or unpatched, to continue working well together."

It added that there was "no evidence" that the vulnerability had been exploited maliciously.

Tech giant Microsoft said that it had already released a security update.

Security handshake

The vulnerability was discovered by researchers led by Mathy Vanhoef [url=http://www.airmax90shoesforsale.com/]air max 90 for sale[/url] , from Belgian university, KU Leuven.

According to his paper, the issue centres around a system of random number generation known as nonce (a number that can only be used once), which can in fact be reused to allow an attacker to enter a network and snoop on the data being sent in it.

"All protected wi-fi networks use the four-way handshake to generate a fresh session key and so far this 14-year-old handshake has remained free from attacks, he writes in the paper describing Krack (key reinstallation attacks).

"Every wi-fi device is vulnerable to some variants of our attacks. Our attack is exceptionally devastating against Android 6.0: it forces the client into using a predictable all-zero encryption key."

Dr Steven Murdoch from University College [url=http://www.airmax90shoesforsale.com/]http://www.airmax90shoesforsale.com/[/url] , London said there were two mitigating factors to what he agreed was a "huge vulnerability".

"The attacker has to be physically nearby and if there is encryption on the web browser, it is harder to exploit."

When any device uses wi-fi to connect to, say, a router it does what is known as a "handshake": it goes through a four-step dialogue, whereby the two devices agree a key to use to secure the data being passed (a "session key").

This attack begins by tricking a victim into reinstalling the live key by replaying a modified version of the original handshake. In doing this a number of important set-up values can be reset which can [url=http://www.airmax90shoesforsale.com/]air max 90 kids for sale[/url] , for example, render certain elements of the encryption much weaker.

This attacks appears to work on all wi-fis tested - prior to the patches currently being issued.

In some it is possible to decrypt and inject data, enabling an attacker to hijack a connection. In others it is even worse as it is possible to forge a connection, which, as the researchers note [url=http://www.airmax90shoesforsale.com/]air max 90 mens for sale[/url] , is "catastrophic".

Not all routers will be affected but the people this could be most problematic for are the internet service providers who have millions of routers in customers' homes. How will they make sure all of them are secure?

BEIJING, July 12 (Xinhua) -- Chinese President Xi Jinping received the credentials presented by eight new ambassadors to China at the Great Hall of the People in Beijing Wednesday.

The ambassadors are Selim Belortaja from Albania, Jose Bernal from Mexico, Usenov Azamat from Kyrgyzstan, Mothusi Palai from Botswana [url=http://www.airmax90shoesforsale.com/]air max 90 womens for sale[/url] , Edward Boateng from Ghana, Terry Branstad from the United States, Jean-Maurice Ripert from France, and Patricia Rodriguez Holkemeyer from Costa Rica.

Xi welcomed the ambassadors to China and asked them to convey his sincere greetings and good wishes to the leaders and people of their countries.

The Chinese government will provide convenience and support for the work of the ambassadors and hopes that they will actively contribute to bilateral relations between China and their countries, Xi said.

Xi spoke positively of traditional friendship and sound relations with the eight countries [url=http://www.airmax90shoesforsale.com/]air max 90 for sale outlet[/url] , and said China will enhance mutual trust, promote pragmatic cooperation, and deepen people-to-people exchanges to boost bilateral ties.

The ambassadors conveyed greetings from their state leaders to Xi. They said their countries highly value the relations with China, as well as the friendship between the peoples, and expect to participate in the China-proposed Belt and Road Initiative.

They said they feel greatly honored to serve as ambassadors to China [url=http://www.airmax90shoesforsale.com/]nike air max 90 for sale[/url] , and will devote their best efforts to promoting cooperation between their countries and China, as well as deepening mutual understanding and friendship between the peoples.

We all know that the best foods for our weight loss plans are lean meats, whole grains and healthy fats. These ingredients load us w. [url=http://www.cheapnikejerseysnfl.com/]Cheap NFL Shirts[/url] [url=http://www.cheapnikejerseysnba.com/]Cheap NBA Shirts China[/url] [url=http://www.cheapnhljerseysadidas.com/]Cheap NHL Shirts China[/url] [url=http://www.cheapncaasportsjerseys.com/]Cheap NCAA Hoodies Online[/url] [url=http://www.cheapmajesticjerseysmlb.com/]Cheap MLB Hats Online[/url] [url=http://www.cheapcollegesportsjerseys.com/]Wholesale Jerseys[/url] [url=http://www.cheapsoccerreplicajerseys.com/]Cheap Soccer Jerseys Free Shipping[/url] [url=http://www.cheapreplicanhljerseys.com/]Cheap Hockey Jerseys[/url] [url=http://www.cheapreplicanfljerseys.com/]Wholesale NFL Jerseys[/url] [url=http://www.cheapreplicajerseyssoccer.com/]Wholesale Authentic Soccer Jerseys[/url]

all comments