This topic

Key Reinstallation Attack (KRACK)

piran — Mon, 07 Aug 2023 14:36:24 GMT

Is the BT Smart Hub 2 router (supplied with BT Full Fibre 500) vulnerable to the issue known as 'KRACK'?

Re: Key Reinstallation Attack (KRACK)

licquorice — Mon, 07 Aug 2023 15:03:32 GMT

As BT don't publish release notes for Hub upgrades, who knows.

As that paper is 6 years old and suggests domestic routers shouldn't be vulnerable, I suspect you are safe from the villains that park outside your house.

Re: Key Reinstallation Attack (KRACK)

piran — Mon, 07 Aug 2023 18:05:13 GMT

Noted but not an answer for my question.

Re: Key Reinstallation Attack (KRACK)

NigelB72 — Mon, 07 Aug 2023 18:12:51 GMT

I'd imagine that a major communication company is on top of notable security threats. We've been with BT for 8 years and haven't been hacked yet

Re: Key Reinstallation Attack (KRACK)

Crimliar — Mon, 07 Aug 2023 20:03:50 GMT

KRACK relied on an oversight in WPA2 (WiFi) authentication, and in simple terms, the fix was to delay retry times and limits. Initial fixes often came from router manufacturers but more recently have been baked into the code supplied to purchasers of chipsets by the manufacturers.

Thanks to improvements in processing power WPA2 is still breakable, but it takes time! What's far easier is to exploit WPS!