Help us improve our customer experience. We are very keen to get your thoughts on some of the ideas we are exploring. Please take a few minutes to complete this short survey,
Yes, I have just been reading this article and would like to know if BT have patched our HomeHub5 Firmware.
The vulnerability would appear to be the targeting end point device as in the phone, tablet and likely a PC or laptop using a wireless connection. It seemingly, is not targeting the access point, IE. Router or other wireless access point. At least so far. As this quote from the link in message 5 would seem to indicate.
“Although most devices appear to be vulnerable to attacks reading Wi-Fi traffic, the exploit doesn’t target access points.”
So at least for the moment, it doesn't seem to be a router problem per se.
Perhaps if people were able utilise what would seem to be ‘best practice’ and use a wired connection for communications containing sensitive data, like Internet Banking etc. and refrain from keeping PII (personally identifiable information) on portable devices then the issue would have much less impact.
You should be using a VPN for any sensitive data anyway.
@Brandscill wrote:
Not realistic to tell everyone using mobile banking they should also have a VPN
Not wanting to trivialise this in any way, but if you're using mobile banking the browser / app will be using HTTPS and so any transactions would not be exposed even if the WiFi were compromised.
If you read the details on the site they highlight that
‘Although websites or apps may use HTTPS as an additional layer of protection, we warn that this extra protection can (still) be bypassed in a worrying number of situations. For example, HTTPS was previously bypassed in non-browser software, in Apple's iOS and OS X, in Android apps, in Android apps again, in banking apps, and even in VPN apps.’